Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/2aac1a5b-ea0b-4ef8-82c3-d199c0bdb189.roa
File: 2aac1a5b-ea0b-4ef8-82c3-d199c0bdb189.roa (raw, json)
Hash identifier: hEyE1QS2HyydZMz3CsIR6Z2Mazf5BLP+xbdAPiJcp9c=
Subject key identifier: 11:82:13:8C:A9:B9:5B:4A:5A:C8:C7:C8:1A:7E:CC:BC:FA:9B:FA:BC
Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial: 70E0885F9DEB16D0791F95AAA002876D545E7384
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/2aac1a5b-ea0b-4ef8-82c3-d199c0bdb189.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2606:f40:fff6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e0:88:5f:9d:eb:16:d0:79:1f:95:aa:a0:02:87:6d:54:5e:73:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ac:bc:61:59:31:09:6e:02:6f:d2:a0:55:76:
f8:d1:a8:57:3e:81:b3:0b:c0:7d:54:07:68:e7:e1:
0b:9a:23:04:1c:8d:17:62:25:cb:15:24:93:e6:91:
42:2c:c3:96:14:9b:a4:8e:5c:c2:b1:2a:e1:c3:8a:
02:35:27:6f:b5:ff:1b:e1:12:0a:67:36:36:10:68:
d0:f6:b5:f6:e3:2c:1d:0f:95:07:f4:f7:8d:9e:55:
e1:43:6a:55:25:b6:af:a4:c2:36:26:18:90:78:fa:
94:42:57:dd:a6:52:d2:e8:03:64:10:b5:e3:2e:4b:
9a:c3:66:b5:fe:b2:54:40:af:9f:74:02:cc:c1:3b:
78:cb:8d:19:7f:ca:99:d2:57:75:ce:e0:53:9e:fe:
0b:db:6f:2d:37:b1:cc:7e:6a:5a:79:e4:d3:b9:9f:
47:92:54:e3:cf:a9:d9:57:a1:98:12:fa:b0:19:7a:
dc:5b:68:89:96:1f:9f:c6:33:28:0d:d8:b0:78:e3:
30:6f:87:7b:51:e8:bd:62:da:b0:0c:e1:6a:88:2e:
dc:98:b1:23:cf:0c:9f:b5:8a:6d:d2:95:ae:b3:47:
49:6f:cc:72:d4:ee:dd:d1:b8:fc:9c:c4:79:3b:80:
ef:7f:a8:e6:1a:e4:d9:89:d5:2d:34:f1:2b:a0:d6:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:82:13:8C:A9:B9:5B:4A:5A:C8:C7:C8:1A:7E:CC:BC:FA:9B:FA:BC
X509v3 Authority Key Identifier:
keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/2aac1a5b-ea0b-4ef8-82c3-d199c0bdb189.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:f40:fff6::/48
Signature Algorithm: sha256WithRSAEncryption
b2:8b:7f:ed:0a:4a:31:c5:cd:a4:e7:11:69:9d:ef:2e:98:f3:
0e:34:e4:2f:1a:50:4a:d0:4b:83:2e:87:32:94:90:46:d7:cb:
b1:40:90:e4:4c:9e:a1:55:f6:5e:1a:a4:2c:d7:d8:44:1c:cf:
5a:0f:f2:fa:be:19:d0:27:b6:cd:d8:bf:13:56:6b:5a:65:c4:
a6:cc:0a:64:10:bd:f9:f6:3f:ca:06:2f:09:5c:cf:d5:22:d8:
13:8c:ee:b1:6a:31:ca:54:47:c5:94:9e:65:bf:d3:6d:7b:66:
81:ff:0d:8e:9c:e2:92:8d:e4:d4:7e:bf:65:ef:ab:3b:63:13:
22:93:b7:31:e5:4d:f8:ab:fd:3b:99:a5:21:7a:86:c6:8f:35:
c8:57:2a:20:6e:6c:5b:6a:f6:78:c0:8a:c9:72:e9:0e:da:dc:
d3:c6:fa:7d:ad:d0:a6:08:da:1b:e4:dc:f2:2d:3b:9c:19:02:
2f:cc:b3:e3:cd:c0:82:e7:b0:84:6c:37:64:fa:29:0f:cd:79:
ed:f9:f1:de:f8:08:04:4a:1b:3e:a7:82:71:79:54:f4:2a:de:
c1:1b:b1:73:8b:33:b5:c2:ba:be:dc:bc:ec:04:61:ea:9f:3b:
88:bc:ed:3b:8e:85:ef:ac:cb:5c:79:1a:f2:1f:eb:48:b4:dc:
72:25:e4:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:46 2025 by rpki-client