Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd320eee-672e-453f-9cf1-ac3169dd5148.roa
File: fd320eee-672e-453f-9cf1-ac3169dd5148.roa (raw, json)
Hash identifier: NuttPsQmS22lbEdRdpn4Kl9LO8xpsOjZ6HFs0nUnFRk=
Subject key identifier: FB:C2:BA:DE:C8:95:E5:61:DD:55:57:48:3E:94:3B:35:96:D3:87:CF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 667AF8F0F4DF87859407CB235C76CC6455FBD3E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd320eee-672e-453f-9cf1-ac3169dd5148.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 5.60.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:7a:f8:f0:f4:df:87:85:94:07:cb:23:5c:76:cc:64:55:fb:d3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: serialNumber=80807505f01e935b170bc896cced5e5221d3500ff3e5087393c48184ccc9fa80, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:c8:e2:19:1e:ae:0d:06:d7:a7:89:a8:12:
a5:33:2c:8b:d8:22:d7:d9:96:e0:bb:3f:79:b2:a0:
8b:29:da:a7:b8:95:16:d4:32:52:7c:76:3d:b9:b7:
6c:28:15:3d:85:8b:21:36:70:1b:08:5e:06:f7:cc:
91:d0:a6:63:3e:37:89:b0:87:a4:e9:b5:91:11:a2:
02:df:a1:5b:9f:2e:12:c5:80:c1:41:d2:20:c0:4b:
79:f0:26:05:29:40:10:82:6f:e4:3e:3a:3c:0d:c8:
a5:b8:4b:61:96:3d:39:5c:ea:5f:13:b9:0d:aa:44:
6f:a6:52:27:0b:8f:24:33:2a:71:c4:64:1f:fa:75:
6a:60:d2:75:0e:37:ac:8a:49:df:f1:4a:50:e2:41:
c9:8a:33:4a:31:95:3e:45:10:bb:a7:a8:5e:63:47:
c9:5e:55:c8:f2:6f:21:6c:ce:e2:14:80:6c:4d:ee:
d5:8a:63:51:a5:cf:8c:c1:f3:50:49:d8:37:c8:28:
24:c6:fe:d6:10:1d:c4:db:7d:b6:56:60:a8:a4:74:
d7:bc:44:a6:c9:50:61:8a:cc:94:53:39:59:03:b2:
ef:85:03:48:02:1c:97:a0:e5:11:ca:b5:f7:6e:ca:
eb:72:1a:2d:72:df:30:97:ff:3c:c0:e4:8f:6c:8a:
28:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C2:BA:DE:C8:95:E5:61:DD:55:57:48:3E:94:3B:35:96:D3:87:CF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd320eee-672e-453f-9cf1-ac3169dd5148.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.60.208.0/22
Signature Algorithm: sha256WithRSAEncryption
41:c6:0f:cc:57:c2:2a:ba:62:40:1b:c6:07:6e:b5:a0:c2:f5:
09:95:c2:11:b2:87:ff:9f:21:5e:bf:3a:2f:b4:1f:a8:3a:52:
6e:14:40:72:08:c2:c3:2c:ed:d5:3b:81:9d:e5:8b:fd:c4:2a:
69:41:37:cc:24:74:46:1d:26:f4:05:58:17:92:9c:f7:b2:2a:
6a:85:13:e3:9f:36:fb:86:04:0d:36:8f:94:e1:e3:95:15:f0:
2c:8a:3f:05:e2:22:6b:b7:91:7b:1e:4d:fe:c5:ae:9c:bf:15:
74:88:b2:50:db:80:74:e3:ce:74:06:08:2c:f3:c8:7a:d7:da:
d3:91:e8:14:b5:b5:07:e8:e0:ee:9a:20:0d:ab:37:2b:12:79:
d9:22:e1:4d:d3:1f:64:c8:25:f4:88:c8:fd:d4:bb:1e:14:e0:
24:74:5a:9a:91:37:f9:67:28:09:e7:87:bf:05:23:56:71:10:
ab:54:39:03:12:ec:9b:1d:fd:1d:2c:08:a7:99:00:59:d2:e5:
36:eb:82:57:f8:f4:ae:f7:ea:05:8f:47:ec:1d:47:ce:aa:99:
84:a2:96:31:4b:bc:08:09:f7:71:c7:3b:99:f9:06:54:66:23:
86:a8:42:88:c8:7e:61:2c:c2:5c:23:f9:60:a7:78:6f:cd:7b:
81:88:41:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:52:09 2025 by rpki-client