Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f248a53f-e5b6-4e54-bd78-942b18e4e340.roa
File: f248a53f-e5b6-4e54-bd78-942b18e4e340.roa (raw, json)
Hash identifier: 0HJiYB8Ss5/w8a3deUIK5JMZKMWJ3Uqa4FD62gjlz0A=
Subject key identifier: AE:8A:1C:A9:0B:A5:19:15:09:9F:73:F2:35:4D:95:33:E6:A2:A7:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7986676BD62068440CFB08441A3250CB60C6C733
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f248a53f-e5b6-4e54-bd78-942b18e4e340.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 209.92.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:86:67:6b:d6:20:68:44:0c:fb:08:44:1a:32:50:cb:60:c6:c7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=c50ef8fe83daa15cdbc342cfa1d74e38a5e43f3e9e185341b6bfbad2af72a474, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:10:71:a0:bf:4d:27:e8:e9:e2:77:e9:66:
ad:63:a8:83:53:69:c0:a0:c0:e6:dc:d6:e0:45:e0:
61:17:b7:0b:49:72:da:21:71:56:37:c9:2b:8e:1d:
9d:04:22:70:62:22:f9:fb:d4:35:0b:8e:04:bf:8d:
04:f3:9a:41:2c:c0:4e:02:29:11:ab:86:20:d2:6e:
63:d6:1d:e9:3d:6a:73:ba:a4:9e:2a:db:dc:07:6f:
e5:ce:e3:4c:24:e3:03:dd:a3:69:5b:f0:f4:ee:50:
ef:9c:b7:d8:2c:3c:e7:3e:3c:d0:f0:1d:7c:a5:d9:
88:20:4f:71:bb:0c:98:84:f1:47:28:09:86:bd:51:
72:7d:0c:0c:b9:45:b6:47:90:41:76:07:31:4a:31:
f4:71:19:a2:29:27:17:08:66:ea:9d:38:ea:cf:49:
33:f0:77:e6:0a:13:b5:5f:e7:be:be:fb:7e:cb:08:
21:3d:b1:07:2d:e0:1e:8d:06:9c:c6:a2:24:29:fc:
68:cb:06:be:09:37:c4:ec:e2:ab:f0:a6:86:40:ed:
c4:81:c8:f1:ec:eb:51:70:fb:f4:56:b4:46:f6:3b:
80:89:8c:ed:06:ad:c6:84:b9:30:25:38:9d:b4:0c:
53:55:9b:fa:fb:35:e3:f7:2b:b8:de:24:80:66:dd:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8A:1C:A9:0B:A5:19:15:09:9F:73:F2:35:4D:95:33:E6:A2:A7:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f248a53f-e5b6-4e54-bd78-942b18e4e340.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.92.6.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:eb:b2:04:60:52:65:19:f8:78:38:dd:89:28:a4:df:13:e3:
f3:8b:45:f1:5f:58:62:f5:70:a6:3c:ec:a6:40:a5:23:f9:d0:
c2:c6:b6:8e:d2:ee:0f:1d:7e:20:ce:bd:35:b5:b8:59:f3:4d:
36:41:0d:b6:a3:6e:de:bd:ae:26:eb:ca:95:22:47:94:1e:a3:
9a:f4:d6:2c:e2:8c:47:70:f7:52:e0:e6:8f:61:6f:84:dc:71:
56:3c:2c:69:df:97:51:4d:ca:66:be:85:bf:e6:34:05:17:ce:
35:05:66:e6:95:4d:72:73:a1:ef:cb:b6:1c:b3:10:1d:cc:84:
36:6f:05:87:8f:80:57:f0:ec:84:e9:1c:14:6d:cf:20:2c:92:
d0:55:0d:f9:56:21:3e:a4:32:42:c4:61:b3:e3:d7:5a:62:92:
05:0d:78:3e:85:39:cf:04:8b:e0:17:33:7f:0a:02:b4:1e:a7:
90:48:73:bd:8f:95:34:a7:a6:b7:ff:40:66:8a:94:e8:ab:7e:
3c:f7:dd:10:7d:78:06:12:ce:83:54:ac:64:cc:92:93:6f:c8:
eb:7c:f1:d3:9f:10:0d:70:e4:d0:e4:94:8f:66:9b:65:5f:da:
84:a7:35:22:a6:8e:82:02:92:ac:00:9d:27:33:1e:a0:76:b0:
7b:3c:71:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:46:53 2025 by rpki-client