Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8b91754-7ee9-411f-9498-474444373286.roa
File: d8b91754-7ee9-411f-9498-474444373286.roa (raw, json)
Hash identifier: cLPkDt4Hg+p5eWVACJNYasWwiDw8+s3SNAXdBsL03Zc=
Subject key identifier: 0E:89:0F:2E:83:CB:78:86:45:38:EE:24:3D:DC:37:69:2D:2E:B4:3A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20861981E6D43A495ADE0A2FB2A02FB23C7867CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8b91754-7ee9-411f-9498-474444373286.roa
Signing time: Sat 28 Dec 2024 00:00:00 +0000
ROA not before: Sat 28 Dec 2024 00:00:00 +0000
ROA not after: Sat 01 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.20.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:86:19:81:e6:d4:3a:49:5a:de:0a:2f:b2:a0:2f:b2:3c:78:67:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 28 00:00:00 2024 GMT
Not After : Feb 1 23:59:59 2025 GMT
Subject: serialNumber=71a3fba3681bf782541ad86ec0a11aa3d71f0411718943a600341c9410ff396a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:0c:e2:51:f2:c1:2d:67:d1:7a:38:3b:a2:
0d:26:b2:ad:f3:79:6e:af:30:6f:e0:88:9c:2b:1a:
ae:6a:d8:cf:e0:dd:fe:a1:1f:d3:05:88:18:79:9e:
8f:56:01:a6:6b:4f:29:6f:61:79:0d:ad:4b:86:21:
64:21:48:b7:4f:d3:d0:33:b3:9c:70:17:10:bd:25:
f4:04:ff:9d:c8:dc:60:ff:5e:2f:b4:c4:6a:ec:39:
45:5f:f2:46:5e:5e:ef:a2:7f:97:8a:35:0a:63:b3:
45:de:ec:14:6d:3a:8f:8d:69:4b:a0:6f:af:09:c5:
6a:f8:8a:44:a9:c9:77:6f:65:8d:36:ec:97:eb:73:
e7:cd:07:bc:21:4c:cf:e6:63:7b:b8:52:8a:80:2f:
a7:df:52:d3:5b:92:78:e0:a7:d3:77:3d:b7:3c:37:
0e:09:66:40:83:c3:8e:41:bd:ff:08:ff:17:78:9f:
e2:9b:6b:32:f2:ab:61:c1:11:fb:43:7d:26:40:88:
33:1c:6b:fc:cc:66:9b:6e:63:8e:11:0e:7a:94:6e:
4a:6a:74:1c:d4:1e:87:1c:13:53:8e:6b:0e:c4:f2:
62:7d:cf:38:79:b7:4b:a8:59:04:7d:53:63:88:c1:
a6:5e:31:f0:b6:17:e6:36:24:75:b0:bd:ee:44:1d:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:89:0F:2E:83:CB:78:86:45:38:EE:24:3D:DC:37:69:2D:2E:B4:3A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8b91754-7ee9-411f-9498-474444373286.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.20.248.0/22
Signature Algorithm: sha256WithRSAEncryption
16:f6:58:96:9e:e2:69:dc:44:3a:ea:1b:ad:b5:ba:4a:cd:1e:
3f:aa:f9:dd:d6:4b:27:11:e2:25:0f:45:70:e1:ba:d5:6b:07:
e3:2b:47:57:86:e3:24:44:5a:19:14:81:a8:db:91:81:ff:24:
87:9a:62:ef:56:ee:c9:b8:bb:7e:c8:fe:f9:31:ca:93:9f:44:
94:76:d9:0b:d1:78:42:1d:f2:4b:ef:ec:b4:90:b1:30:68:18:
c1:f4:8c:15:1f:1d:57:6b:d5:dd:17:82:b2:88:92:77:ad:69:
b1:40:88:30:57:cd:80:64:76:be:7b:e8:db:f1:46:4b:b2:07:
d8:66:63:73:7c:d4:2c:eb:62:d4:2b:93:26:b0:4d:b7:25:ee:
78:06:7c:af:dc:a9:da:f2:73:7b:a0:cd:b3:15:3e:ce:60:ea:
33:f4:dd:40:1a:71:41:36:12:17:d3:30:fa:df:d1:ba:61:f8:
45:86:1e:ae:c2:6e:ed:5f:a8:d5:17:2b:f1:b4:ad:c7:1c:fd:
12:ba:ab:a7:75:13:f8:ef:34:76:8f:50:e3:23:5e:a4:12:e9:
85:fa:7c:6d:fe:a9:1d:d0:d5:64:90:00:fa:f2:ac:86:a0:08:
5e:0b:cb:c0:ea:3e:b5:e4:83:65:30:a9:10:3c:e0:8a:2f:a7:
f0:50:b1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:19:26 2025 by rpki-client