Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7fcc738-a515-41c5-8254-f2627a389b7a.roa
File: d7fcc738-a515-41c5-8254-f2627a389b7a.roa (raw, json)
Hash identifier: CkvMbarVK+mUoAX1RaZoSu2pkM5nbc3bKzWDxzMq5ug=
Subject key identifier: 75:DF:EB:34:C6:57:82:F4:4E:43:AC:40:37:34:AF:35:5C:92:BC:8E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4AF3B446A3398127C9A9AC0E42770C56D47CC3E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7fcc738-a515-41c5-8254-f2627a389b7a.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f70:2000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f3:b4:46:a3:39:81:27:c9:a9:ac:0e:42:77:0c:56:d4:7c:c3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:24:bc:24:53:84:f3:e2:45:f3:10:c5:f8:
dd:e8:e3:89:26:a9:92:69:38:3c:a9:44:6f:15:5f:
cd:5b:1e:82:53:c8:59:6b:d0:7b:02:5c:3e:47:70:
b7:3a:af:92:c5:66:f0:db:e9:54:1d:7f:74:c6:d8:
19:b3:00:ee:5f:d3:12:b3:eb:81:b5:44:aa:e1:94:
d2:d4:3c:1f:05:99:e0:19:3e:93:00:f3:6b:02:c0:
04:b7:b1:18:5d:b8:30:13:62:78:f7:1b:b0:a6:64:
ed:89:9d:ce:31:6c:92:77:f7:3f:7d:27:f1:57:23:
bd:fa:53:b1:a9:80:0f:d0:d6:04:a9:fd:5f:42:da:
f7:c2:c2:bc:04:fa:fc:b8:30:03:73:13:55:0f:af:
24:67:0c:53:71:9a:73:3f:9a:35:11:f9:07:17:af:
8f:0c:e6:42:1f:33:d9:3a:cf:3f:4e:e7:1d:c1:41:
4c:65:c7:55:2f:aa:56:a2:38:05:8e:6e:dd:af:13:
1a:fe:cf:e9:5d:32:ef:d0:48:0e:7e:f0:c9:59:3c:
3f:55:58:01:8a:ee:39:24:24:43:6d:b9:29:67:bf:
b8:b7:26:35:b5:dc:15:4d:69:52:97:e6:06:34:0e:
91:5a:96:e4:09:2c:e0:02:30:66:58:60:18:ec:71:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DF:EB:34:C6:57:82:F4:4E:43:AC:40:37:34:AF:35:5C:92:BC:8E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7fcc738-a515-41c5-8254-f2627a389b7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f70:2000::/40
Signature Algorithm: sha256WithRSAEncryption
86:26:4c:67:34:b4:87:10:1d:7e:12:99:5a:15:d4:5e:65:b1:
d8:58:71:70:6b:4b:44:c4:f8:0e:f6:40:cb:79:a4:b3:0e:bc:
d4:97:ba:7a:5d:17:f1:9e:2c:6a:70:d6:fc:d1:11:46:e1:3e:
1f:83:2c:5a:26:f0:9b:ce:cd:2a:68:4f:a0:a8:14:44:c8:5b:
19:d8:9f:7a:36:ce:5a:30:65:7f:c4:b8:0b:e1:52:a5:77:d5:
be:2d:aa:50:48:7e:42:f8:c4:a0:50:63:9c:40:0c:44:29:50:
32:2e:cb:98:98:d7:4c:c8:28:eb:79:8c:cc:0b:87:d1:2c:d6:
b4:72:7b:d9:56:97:1e:e9:ae:c2:5f:1e:03:c8:ba:cb:ca:c9:
c3:d8:83:1f:8b:7b:9b:7c:90:fe:91:79:6a:6d:db:24:bd:39:
6d:0a:9a:07:45:51:56:7f:66:7d:77:81:ea:d7:c4:3d:61:dd:
17:6c:1f:94:bd:f9:b3:f9:c3:7f:d7:07:80:af:a5:35:3d:7d:
bd:36:3a:7a:fe:a8:36:f0:d8:d7:6f:a7:db:d4:ae:18:53:e7:
54:6e:e7:0a:a5:78:5e:56:d4:67:9f:ac:99:f0:b9:88:0c:f8:
14:df:18:70:c4:e6:68:89:c9:2c:6d:12:7a:c3:95:af:80:17:
b3:c2:b1:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:36 2025 by rpki-client