Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec8d1e92-6913-4151-9edb-086db7e8fd5c.roa
File: ec8d1e92-6913-4151-9edb-086db7e8fd5c.roa (raw, json)
Hash identifier: f4eA5eMB++zHYxlHGKrDKAkA3i1lHrn96JHMFG81xNM=
Subject key identifier: 00:A6:10:87:6D:2C:42:08:7A:6D:66:A1:B6:17:3C:FB:D6:B2:C6:43
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 763EFBC9823508C93D9D254B36F6375DA091B627
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec8d1e92-6913-4151-9edb-086db7e8fd5c.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 57.94.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:3e:fb:c9:82:35:08:c9:3d:9d:25:4b:36:f6:37:5d:a0:91:b6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=7dbd32fccf8df95f642a542f17ab16bb65f265eb1d56189fe94d3afd970e4e08, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:bf:c8:86:ff:22:2b:75:98:64:a6:ed:a8:
ed:92:58:09:ea:e7:d5:69:c5:22:0d:d6:d5:84:46:
63:36:b9:38:f7:4f:e5:37:1f:2e:7a:e6:11:fe:ff:
3c:50:7f:18:c2:e4:5f:86:e9:b2:af:41:e6:bb:82:
5b:e4:0f:b1:43:a1:0d:8f:b5:9e:fc:31:87:cc:68:
5e:90:61:a1:44:84:48:47:f4:ac:23:4e:70:f4:f5:
9b:40:77:41:06:44:60:56:17:7e:2b:00:f9:3f:03:
ff:3a:1b:05:00:78:c6:5d:6a:c1:75:af:6d:ab:22:
8c:46:60:97:d8:9f:b0:a9:ee:20:2f:29:a6:2a:c9:
cd:b5:7c:65:3f:7c:0b:d6:41:2b:8c:af:4e:cb:d4:
eb:ec:9f:29:b9:e7:17:58:0b:67:28:93:2b:ee:7a:
bc:b0:4d:15:c7:d8:e9:46:bf:c5:db:c7:b3:43:b6:
88:ca:34:98:31:7e:18:a6:90:be:a8:b5:87:3c:08:
b7:7f:b9:27:d0:ea:d8:df:20:61:0e:e7:2c:f9:10:
a5:2a:c9:8c:bd:1c:00:2d:7f:61:41:20:2a:ed:a0:
5f:d4:62:61:29:20:2f:6a:3b:61:a1:70:4b:00:2f:
fe:2f:e7:e9:3a:bf:7c:20:56:d6:68:3c:eb:42:1e:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A6:10:87:6D:2C:42:08:7A:6D:66:A1:B6:17:3C:FB:D6:B2:C6:43
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec8d1e92-6913-4151-9edb-086db7e8fd5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.94.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:7e:49:54:ae:45:a7:bb:fd:af:a2:b4:31:e5:9f:67:79:0b:
a6:9c:69:64:eb:b5:06:10:68:ac:60:56:0b:ae:12:c4:1c:e5:
83:a5:b6:f6:96:53:50:9d:a1:61:8c:6a:61:ca:d3:ad:63:38:
c6:dc:26:02:0c:73:bb:d8:5c:21:04:1a:c9:ba:87:13:72:c5:
f9:ae:91:16:1e:49:2e:64:4f:7f:1c:77:9e:1e:3d:b5:8d:62:
29:77:cc:ce:52:44:6b:27:e3:9a:4c:d9:5c:8f:87:96:6c:0a:
af:11:c2:17:98:9d:a2:02:e5:da:ca:e0:2d:67:eb:48:d2:89:
84:f1:59:f1:c6:7f:55:5e:81:5e:28:eb:22:23:4f:d3:db:31:
a2:73:77:d3:b9:e5:ba:4d:f4:e8:7f:93:14:42:0c:f3:4a:5d:
af:de:d8:7f:79:30:95:cf:1b:fd:b5:84:4c:13:1d:9d:b5:fe:
44:fe:79:0b:18:9a:e7:66:bd:63:b7:d1:b1:7b:1a:81:a2:d4:
e9:2d:18:1e:0e:d6:49:20:fa:57:11:3f:35:aa:76:54:d0:f6:
12:30:92:c3:6e:b0:91:ff:a6:2e:92:ea:84:c3:b3:75:d7:4b:
52:c5:b3:7a:93:07:13:6b:0e:86:44:1f:4b:6f:9b:f0:16:81:
85:a7:f7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:58:25 2025 by rpki-client