Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/76126f5e-e879-4f1f-9ac4-7903646a9f77.roa
File: 76126f5e-e879-4f1f-9ac4-7903646a9f77.roa (raw, json)
Hash identifier: Sz4g+VHEcCeaaF51o6TDYMbF46wDxCH3N0qXlRfKA3c=
Subject key identifier: 0E:C2:21:F1:BA:A6:2A:E1:6F:CD:18:3F:C7:19:08:A0:60:CE:60:3E
Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial: 57F68879CD7D15262C662C81F3704883E301CD5C
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/76126f5e-e879-4f1f-9ac4-7903646a9f77.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2606:f40:fff7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f6:88:79:cd:7d:15:26:2c:66:2c:81:f3:70:48:83:e3:01:cd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:35:0d:24:f4:50:20:9c:f9:78:90:84:8e:
9f:93:91:8d:51:b3:1f:e5:78:6e:60:34:7c:16:61:
33:1b:f9:f3:78:a4:1a:b1:e4:1c:0a:7a:6e:61:d8:
5e:aa:96:00:5d:b1:fc:36:f6:ba:2d:f3:e0:ef:bc:
be:39:5e:32:cf:af:7c:69:fa:f3:26:e3:13:4d:51:
50:50:54:89:12:57:c9:a0:e1:df:5f:96:d3:2d:80:
58:64:85:1c:21:66:2c:72:ef:ee:e3:da:fd:7c:8c:
fa:e5:9b:b1:67:19:9f:7d:f9:0e:89:e6:a3:1b:2d:
a8:94:e8:82:45:83:77:df:fd:b9:c0:74:79:36:da:
0c:4b:bf:09:35:76:de:b7:89:04:d7:8f:9d:5a:d4:
48:26:14:32:9b:63:db:b7:b7:24:47:33:75:5d:f7:
e3:e2:5b:96:10:2e:a3:72:5c:2f:b1:dc:86:b0:af:
d9:4e:9b:14:74:47:a0:9a:fb:70:83:57:a1:d4:3f:
69:7a:b0:b9:65:d3:f8:eb:29:4e:2a:7e:6a:4d:7c:
b5:48:b9:da:aa:52:c6:f4:60:9c:57:7f:f4:f4:41:
f8:f1:bc:08:f9:46:10:52:e9:f8:11:32:dc:c1:4d:
3e:a1:b4:5c:94:b6:07:a5:95:85:3b:f1:87:46:0e:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C2:21:F1:BA:A6:2A:E1:6F:CD:18:3F:C7:19:08:A0:60:CE:60:3E
X509v3 Authority Key Identifier:
keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/76126f5e-e879-4f1f-9ac4-7903646a9f77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:f40:fff7::/48
Signature Algorithm: sha256WithRSAEncryption
bb:17:59:76:86:f9:91:31:51:e1:ac:46:4b:e9:15:9f:10:62:
19:ac:8c:15:55:64:6b:27:11:4c:7a:83:74:44:c2:3a:0c:e3:
64:66:7c:17:bc:94:fb:17:2c:09:08:1d:e8:08:b3:2f:a0:25:
df:cb:8c:8c:e4:78:a8:60:ac:87:ff:34:38:85:17:eb:a9:ab:
36:53:55:5c:10:7a:77:18:7b:98:a0:03:84:a8:b2:11:04:f7:
96:e8:4e:cd:3e:49:de:af:5b:55:74:e2:66:4a:2e:82:bb:76:
8c:9d:06:60:48:aa:f2:af:b5:23:d2:a1:92:73:44:39:9b:5d:
7a:12:20:2e:d4:ee:30:8d:a1:0b:b9:d5:59:61:2a:af:c6:6d:
ac:6f:a2:aa:98:0a:21:66:6e:e4:f8:d4:f5:eb:6b:85:39:9e:
37:66:e8:00:d0:0e:76:44:e5:94:95:49:e1:08:4f:00:80:e1:
eb:72:cc:c6:0e:d1:03:64:ed:02:0a:9a:29:f6:63:70:21:df:
e4:a4:05:94:42:2b:dc:68:4b:d5:6a:85:ba:b2:d4:ba:e6:9f:
66:f9:ce:6d:17:11:07:65:08:33:d9:34:e0:13:67:2e:cf:47:
78:71:25:19:88:67:af:f8:9f:bd:e7:53:fe:46:fc:39:48:84:
8f:0a:0f:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:56 2025 by rpki-client