Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0589bc1-dada-4627-8535-78658bd02252.roa
File: f0589bc1-dada-4627-8535-78658bd02252.roa (raw, json)
Hash identifier: fv/+vZ/5WxalkCn+vAFca5vurpY855awmz6r3HSacFs=
Subject key identifier: 5C:F6:48:9E:26:E3:F9:BC:57:9D:18:6F:28:C4:E5:E2:F1:F2:05:0F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 334EEF27B63BB6DDA46A3C621FA83C1EF2FDDEBD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0589bc1-dada-4627-8535-78658bd02252.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.249.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4e:ef:27:b6:3b:b6:dd:a4:6a:3c:62:1f:a8:3c:1e:f2:fd:de:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=9a574a519ed665dcd80dff8110e5e3cb8375fc8843181ade5c6590aca9c66e25, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b2:0b:39:3f:45:9d:73:47:34:89:95:84:bc:
36:b3:fd:b4:ee:94:63:c3:b5:88:e7:5a:db:a9:e8:
5a:97:15:f7:49:6b:99:0f:c0:4f:33:ce:ba:10:71:
d8:be:81:eb:d4:f5:72:04:be:21:cb:27:b6:39:47:
af:f2:76:b7:0c:8d:76:6c:bd:58:2f:17:e9:4c:2e:
e0:84:af:80:a4:54:88:d0:a7:4c:4f:65:16:3c:fe:
d3:8a:dc:f5:c5:dd:8f:74:14:56:59:df:d7:e2:0d:
27:e3:84:05:6f:48:c1:03:20:d9:71:3f:c4:cc:97:
bd:71:20:a7:26:52:d1:8c:ab:3b:b7:fd:92:0b:e6:
c7:bf:65:8b:2b:7d:49:27:42:bb:49:58:43:64:20:
a8:d7:ac:96:32:be:e5:b5:04:1d:fa:c6:1e:1a:41:
98:56:f9:89:bc:bf:24:8b:1d:4b:9b:75:1f:92:0b:
2f:02:3c:c7:24:79:bd:6a:25:7c:04:9b:cc:0d:5c:
04:7d:f2:2f:0b:5b:46:a7:c3:31:d9:3d:d8:cb:1d:
9e:57:6c:57:42:d9:ba:ad:da:f7:31:3e:31:a9:33:
7d:ed:81:f0:52:73:93:93:0f:eb:10:fd:3d:b1:28:
46:1b:db:86:ea:0b:21:70:e1:e7:54:e9:6f:53:dd:
c2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F6:48:9E:26:E3:F9:BC:57:9D:18:6F:28:C4:E5:E2:F1:F2:05:0F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0589bc1-dada-4627-8535-78658bd02252.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.249.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d5:9c:14:d7:9b:d5:6c:25:6e:c2:7e:9c:ae:9e:68:81:a3:fd:
48:6b:4a:70:da:7c:ad:26:0e:15:2d:58:51:76:66:91:f5:cc:
6e:05:9a:40:cd:10:88:5f:12:07:ba:d9:63:2a:f4:58:1f:22:
22:08:56:32:40:1e:3e:2c:f2:5d:18:84:0f:86:a7:49:92:5f:
07:25:92:90:60:f5:f2:5f:93:ec:36:3e:21:59:0f:5f:da:0a:
01:62:f5:0a:52:ce:97:27:af:7a:4b:cd:23:54:ef:ee:b7:01:
89:c5:c8:bb:30:00:54:10:c2:ca:ce:fb:1e:60:06:fa:9d:6c:
db:25:bd:fe:c6:5b:ec:68:da:e6:07:0f:a3:4b:80:06:6c:52:
c2:90:56:9c:32:70:e6:72:cd:b2:fe:b7:87:23:ce:99:ce:ca:
c6:35:eb:08:3a:35:10:be:6d:27:b5:f9:c3:b9:f4:c4:26:70:
44:bb:66:82:61:43:6e:48:1a:6c:8e:00:95:22:68:52:9d:6c:
6e:a6:ac:f8:06:27:33:bf:ab:5e:f9:43:31:5e:1c:1b:7d:57:
33:4a:00:88:63:ea:ae:50:37:9c:1e:fc:2e:17:ea:e3:58:b9:
74:f4:7a:1e:e4:f8:41:b4:b8:a2:b1:6b:4d:46:07:19:16:a0:
fd:c1:1b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:19:25 2025 by rpki-client