Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b9d7aa76-4486-4178-af60-adfa2d26fc0b.roa
File: b9d7aa76-4486-4178-af60-adfa2d26fc0b.roa (raw, json)
Hash identifier: WRMyDKHT8lqPVMMGhOguEkdHCSNdMPFWG8sQAcN7ucI=
Subject key identifier: 12:B9:C1:BF:4E:5C:D1:6F:D8:4D:69:9B:1A:7E:F3:BB:AF:01:06:99
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 335AAD717A2C9401462BE2053F1FDDACBA18D23A
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b9d7aa76-4486-4178-af60-adfa2d26fc0b.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:5a:ad:71:7a:2c:94:01:46:2b:e2:05:3f:1f:dd:ac:ba:18:d2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=4c09ace56f292a5ee0a14dd223977e6d164d9d77face23eaaccf70c3f9e2d173, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:79:77:5f:24:5b:5c:ee:59:c9:e8:b2:36:
88:9f:c5:9f:0d:ec:4a:94:b1:71:0d:31:e0:4e:dc:
bc:9a:8a:5d:dd:0f:3b:fb:4b:be:9c:0e:9f:ee:11:
bb:70:cd:68:43:8d:c7:c4:4e:73:72:9f:17:a6:02:
0f:9d:fa:dd:9e:60:12:a8:0e:07:ea:6b:e9:5a:5f:
ff:bd:10:c7:55:3a:51:58:53:ba:eb:97:bc:74:7e:
12:2d:e4:65:e9:b1:4c:68:10:fb:29:e7:92:5b:72:
62:6f:e6:08:67:70:4c:7f:bf:95:be:43:8c:d9:43:
3a:66:0d:ee:ca:53:05:3c:ec:b2:04:bd:96:bc:56:
15:be:1d:b0:ce:df:d4:1c:4e:ed:cc:61:e6:a2:a6:
2d:e2:fb:d1:68:30:c3:22:11:cf:92:48:f8:4f:72:
90:ce:ab:d0:a1:8c:49:fc:15:46:50:23:aa:e7:39:
e5:76:9a:37:c7:13:d7:91:e2:da:61:59:ba:d0:57:
08:09:4b:f0:ad:b6:42:e9:82:43:01:fa:38:a6:f5:
b2:bb:da:53:32:d0:64:90:5e:db:5b:87:57:49:fc:
13:2f:f7:12:a2:5f:80:96:07:0e:13:c1:2d:52:37:
82:30:21:e1:62:67:0a:aa:e5:7d:a1:af:72:35:a9:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B9:C1:BF:4E:5C:D1:6F:D8:4D:69:9B:1A:7E:F3:BB:AF:01:06:99
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b9d7aa76-4486-4178-af60-adfa2d26fc0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.242.0/23
Signature Algorithm: sha256WithRSAEncryption
17:90:77:c9:b9:d2:3e:bf:4d:e6:0b:a9:06:52:bf:e8:a3:eb:
d1:82:61:4f:54:5b:25:00:2e:0c:0b:e6:16:b1:13:1f:6d:2e:
1a:78:c9:cb:df:da:c4:f7:1b:5c:26:ed:29:65:59:17:f9:1f:
ad:42:3d:d4:f0:39:58:f6:17:fb:ab:36:30:00:df:d2:dd:ff:
61:25:a2:ee:0c:26:82:b9:69:ac:f2:10:66:35:57:d5:0f:5b:
ae:82:30:dd:be:05:c5:ad:3b:91:6f:de:d1:c4:37:e9:7e:33:
1b:22:ba:95:b6:1f:4f:3c:67:98:09:1e:99:39:cc:51:e2:2d:
1b:26:bf:03:48:ef:b5:5b:49:97:ad:59:bd:7f:48:a1:4c:01:
f0:84:bd:db:dc:d5:35:0c:6f:30:98:e3:f8:76:14:4f:a7:95:
e3:99:ed:d8:5c:2c:15:37:7e:de:25:54:e0:a5:13:5e:91:12:
28:3f:76:b8:9a:7b:be:72:b0:bc:7e:9f:09:5b:02:ce:ca:fd:
d2:52:ba:05:04:31:0b:24:70:8c:93:29:45:9f:ff:c3:74:3f:
e8:32:b2:a0:2b:2f:bd:db:aa:c9:ba:0c:f3:29:5c:18:f4:c1:
14:9a:c5:4f:fe:0c:f9:0d:d8:e2:f4:87:25:15:c4:b1:a0:4a:
6d:fc:a8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:42:10 2025 by rpki-client