Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e82103f9-a7da-45cc-adae-05b0d55f23bb.roa
File: e82103f9-a7da-45cc-adae-05b0d55f23bb.roa (raw, json)
Hash identifier: MG1/Js2p4wQxb0nE9zpl+Zg5EtHOaRk8h2fXjCB/gXk=
Subject key identifier: F9:63:33:96:38:CA:CD:D4:DC:AB:01:CF:EE:90:D9:39:19:1D:B3:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A5A06F94F3F58E2D483969F0B2F29FCDEDC8078
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e82103f9-a7da-45cc-adae-05b0d55f23bb.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 13.128.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:5a:06:f9:4f:3f:58:e2:d4:83:96:9f:0b:2f:29:fc:de:dc:80:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=5a755eaa0637e9ba99cc67f817c2ef13c1ef7283f087dc6c59500c7a54195b9f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:f6:82:bb:6b:84:70:94:46:22:0b:74:8e:
d8:4d:c4:17:87:98:77:14:26:be:7e:39:35:fd:fc:
06:d7:c5:f0:5c:bc:ce:d8:bf:8f:84:7f:24:6d:73:
c9:0a:50:65:1b:92:4e:5f:2d:66:e3:47:0c:d6:57:
99:96:2c:99:0a:a5:b2:32:61:5c:1a:49:be:18:3e:
98:c8:58:14:5f:24:05:2f:87:ce:92:eb:27:ab:07:
02:e6:1e:04:cf:c8:a0:a8:c5:27:49:eb:26:f8:b3:
8a:59:ba:31:77:ce:dd:88:e7:e1:09:eb:50:77:58:
73:01:51:25:34:9a:76:e0:8c:17:31:9e:a7:7f:b2:
7d:94:24:a2:a6:96:ab:95:d8:25:e7:1b:2c:0a:ea:
cf:66:77:81:c2:08:17:dc:a4:25:29:71:7e:3e:17:
7c:a6:1c:b7:f0:f2:4e:86:98:dc:99:0c:af:53:13:
42:ca:88:ae:02:95:eb:24:3e:f1:40:3e:23:87:ee:
a0:32:47:fa:20:56:c9:75:07:1e:c9:cb:0b:2a:d2:
4f:9a:6d:80:01:0b:f9:b8:da:b6:55:74:1e:41:c8:
1d:89:46:68:1e:49:83:8a:14:8e:3f:3f:d4:ef:92:
f0:41:2a:d0:6b:87:9c:25:5f:1a:c8:50:6e:54:de:
21:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:63:33:96:38:CA:CD:D4:DC:AB:01:CF:EE:90:D9:39:19:1D:B3:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e82103f9-a7da-45cc-adae-05b0d55f23bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.128.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c7:55:b0:31:20:bb:45:7b:71:ea:cd:16:42:42:36:d3:0b:62:
ea:31:a9:c2:76:31:4d:bc:31:f4:ee:fb:19:19:93:ac:92:2d:
74:8d:2b:25:7a:30:c4:ad:3b:79:40:93:f6:b3:f5:fc:fc:2f:
8b:91:52:fe:99:fb:4b:7c:f4:c8:36:03:94:46:a9:c9:e5:75:
8a:35:2b:97:e6:ca:fd:4f:f9:56:60:09:59:d7:52:79:a7:e8:
c5:66:34:8b:99:1d:6e:a1:5e:e9:b1:56:34:08:13:d8:f3:45:
db:c2:26:4f:6a:56:8c:0f:90:50:a1:b0:8d:f8:8d:a7:f8:30:
3c:6d:4c:d3:fe:c4:9c:c7:af:03:a1:61:cd:73:29:a3:cb:a4:
a4:8a:8b:a0:1a:ae:73:c8:55:ee:3f:96:a5:af:50:c6:10:f1:
a1:6d:5e:5d:6e:ad:ad:aa:e4:79:5e:ad:12:1f:17:3a:83:7e:
f1:ac:c5:05:ab:1d:b7:cd:93:48:36:54:49:ec:00:5e:a7:92:
c7:e7:e1:24:56:d2:b7:f8:8a:f9:f3:9c:6e:d1:2d:4c:58:66:
f8:22:f2:9f:4e:9a:36:64:d9:ee:f5:c9:17:11:eb:cb:c8:f1:
8d:e8:18:b9:ea:92:00:ef:44:60:37:4f:16:e0:36:10:87:d4:
d0:02:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:40:41 2025 by rpki-client