Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d87cb009-5e50-4e26-8ace-8e0a26e835c5.roa
File: d87cb009-5e50-4e26-8ace-8e0a26e835c5.roa (raw, json)
Hash identifier: +kp6NRq7qFTJmlF6tOhUmXJ4G89kGLzQwFy8YXX9VNY=
Subject key identifier: EF:DF:AA:D5:97:45:63:53:23:B9:37:42:DD:74:AD:C4:2D:6A:02:59
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 31CE39D2EC452309D38DD503F629CC89A735762C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d87cb009-5e50-4e26-8ace-8e0a26e835c5.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f70:4000::/39 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ce:39:d2:ec:45:23:09:d3:8d:d5:03:f6:29:cc:89:a7:35:76:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=05a345122ea1ed7ef85df298ea79fe57d9a8373046e937b3009e2c3a2c858925, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:ac:24:1f:58:20:f4:1a:c6:7a:23:f8:2e:
5e:cc:eb:a1:3a:14:ea:6e:33:6f:1c:c7:32:4e:98:
bf:ff:22:c2:5c:a2:77:5f:54:02:c7:de:75:3a:5f:
60:52:a3:c7:88:d5:e8:28:4c:1d:f4:52:28:34:d9:
b7:c6:c6:54:62:36:33:e7:9e:43:80:52:8b:98:d9:
ae:ad:1c:7a:7e:49:6a:30:d6:24:a1:9f:32:68:be:
0c:8e:d2:bf:94:83:c5:3f:1c:e6:da:1e:8b:1e:90:
17:39:9e:b7:83:2e:45:04:ef:b8:44:a3:d8:07:fd:
5c:43:3b:e2:60:2c:b6:28:24:07:e1:21:4c:95:84:
be:5a:df:07:ec:69:4f:71:b7:0c:bf:5f:d3:9a:c6:
9b:a7:c3:37:c2:19:84:17:54:3a:b3:cd:d1:35:1b:
93:54:22:87:92:b8:c0:d7:2d:51:1b:88:f9:d6:0e:
66:d4:70:2a:0f:3f:85:40:73:67:ba:c5:7f:07:6a:
e8:42:df:90:69:64:6c:52:50:05:6f:26:9f:95:39:
27:39:ff:4f:d3:fe:a6:d2:de:1b:a9:10:88:d4:8d:
3b:9d:79:16:57:5a:6d:6b:ff:22:5e:08:6a:fc:4c:
07:9c:82:5e:b2:7e:0d:4c:9f:5d:c5:0e:21:24:43:
c3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DF:AA:D5:97:45:63:53:23:B9:37:42:DD:74:AD:C4:2D:6A:02:59
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d87cb009-5e50-4e26-8ace-8e0a26e835c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f70:4000::/39
Signature Algorithm: sha256WithRSAEncryption
02:70:70:65:91:cb:a5:52:61:95:86:1c:20:50:3b:f3:18:81:
1e:a1:fd:3a:5a:e7:1d:12:50:78:82:87:f5:d1:e7:c0:ba:ce:
d6:aa:42:36:a9:3d:a9:84:78:7f:b2:a7:23:cc:a7:ce:fe:13:
7c:ea:70:86:14:0b:19:16:01:8b:4e:62:77:28:53:f3:0d:a9:
d7:1c:1f:5c:c4:32:80:64:33:2e:cf:1b:a1:8d:e6:a5:2e:c7:
d8:7f:f3:63:7d:e8:13:c4:88:84:88:9c:58:f7:da:a8:c2:3c:
f1:fb:77:97:d5:d5:fc:17:d1:c1:db:bf:3c:56:d0:a7:ef:dd:
ba:8c:d4:29:85:01:59:d5:32:44:b7:c8:22:62:ae:8c:55:d2:
6c:a4:8c:ab:ee:43:de:57:6a:c2:a6:1b:e6:9f:05:44:81:4e:
59:42:ba:7c:a4:f9:28:3a:7a:a5:96:8c:2f:50:c3:87:40:19:
8d:d2:26:ef:00:ae:cc:25:42:4e:c6:42:7c:db:99:8c:a9:57:
af:4c:08:e4:7c:c7:91:18:fe:24:04:77:b0:df:96:50:50:4f:
ec:95:3a:d5:3e:bb:0c:7d:4b:80:ef:ab:a2:74:b4:04:6c:b2:
fd:a6:b2:5e:9f:ab:5e:28:77:43:f9:05:5c:d9:02:11:27:b8:
fa:79:7b:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:11:39 2025 by rpki-client