Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6a8fb38-499b-4b26-94a4-9a72f6734697.roa
File: d6a8fb38-499b-4b26-94a4-9a72f6734697.roa (raw, json)
Hash identifier: xtgbcNnli378BrPplYsfJ/fdMfDbKR+IwuiG3sDfWm0=
Subject key identifier: 2D:34:16:45:01:84:57:80:05:01:26:23:55:17:32:90:E0:35:B5:ED
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6DC8D26919D55494D345C57F3FEB50FA1B9E620C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6a8fb38-499b-4b26-94a4-9a72f6734697.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 98.130.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c8:d2:69:19:d5:54:94:d3:45:c5:7f:3f:eb:50:fa:1b:9e:62:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=7c32a2996e624b9450676c58d1c87cd94128fc5756f77959af4db8de991a52df, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:8a:9c:67:f3:33:7a:6d:0d:5c:d1:fa:60:
1f:06:b2:78:ba:e3:0a:fe:e5:3a:9c:bb:53:27:d8:
60:7a:54:a9:24:05:14:04:46:60:98:64:dd:6f:cc:
64:c8:18:c8:40:4d:7b:c3:dc:86:90:b7:31:eb:d6:
87:fd:88:7d:7a:74:9c:f6:0e:9f:9a:01:0d:cc:47:
6d:ee:43:55:e5:21:db:4b:bb:6d:3f:55:3a:a0:81:
52:5b:b0:f8:2a:79:ce:95:dd:17:21:1f:e8:1e:63:
64:d6:f6:25:51:da:bf:0b:39:ae:80:45:ec:b1:7f:
0f:4c:b8:ad:99:40:cb:48:c6:a8:06:b2:92:91:e7:
83:fa:fb:90:c8:55:61:d3:50:86:e9:5f:72:91:26:
ac:da:4b:ce:1f:cb:98:07:0d:8a:6d:ad:33:5c:c5:
5e:36:90:cb:8f:b0:b2:e6:2e:52:20:fa:a6:1e:22:
75:89:af:bd:f5:cf:13:66:31:51:a2:c4:59:d6:3b:
d1:14:4c:f6:4f:ed:0a:f5:33:d2:7b:e1:5a:dc:6f:
78:58:e0:64:5a:f7:4f:b8:3f:92:57:c9:c5:de:eb:
3a:ff:b5:8e:29:4a:1e:26:62:62:88:61:5a:27:e5:
c9:81:ac:e1:2f:ce:5a:3e:fd:07:f5:1c:9d:8a:5c:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:34:16:45:01:84:57:80:05:01:26:23:55:17:32:90:E0:35:B5:ED
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6a8fb38-499b-4b26-94a4-9a72f6734697.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.130.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:53:c3:0a:b4:cb:5c:5b:db:50:35:07:dc:0c:61:7c:67:5b:
82:0e:d9:cf:98:04:0d:33:1b:28:0f:de:49:5d:6b:5f:ba:06:
ba:cc:d9:a7:3b:cb:16:75:85:3a:dd:f7:9c:8d:44:e6:bf:8a:
77:46:a8:15:3a:53:17:72:3f:81:76:bb:7b:78:9a:0a:d0:a3:
1f:c3:c2:a5:8c:fc:0a:e0:ff:11:f5:17:60:b2:c1:ff:61:9a:
83:bc:e0:c5:bd:57:22:74:21:1b:89:42:77:ee:24:11:53:39:
fa:0e:45:b6:0a:67:f6:bd:57:41:b6:da:a0:f7:2f:48:e0:72:
01:48:52:94:51:a1:05:83:87:05:0a:18:a1:60:19:44:24:70:
f3:49:0e:d6:7d:0d:1d:bd:75:0b:ed:a0:a2:c1:95:ec:7e:57:
48:56:04:72:b2:40:57:c2:0e:72:eb:67:6e:f5:27:e6:1d:e9:
dc:26:01:db:2b:09:c8:55:81:20:e2:44:07:03:7f:84:39:5f:
45:c4:56:a2:10:43:f0:eb:69:cc:09:c9:e2:f1:a3:1f:27:fa:
f8:0b:4b:07:14:15:fd:2a:5a:23:9a:1e:dd:16:38:45:a4:c4:
8e:b3:b2:2f:b9:cb:d4:73:5f:14:4d:96:e1:6f:4b:7f:67:0c:
c0:9c:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:37 2025 by rpki-client