Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f057f6e-1993-42bd-b822-ce2db15710b8.roa
File: 0f057f6e-1993-42bd-b822-ce2db15710b8.roa (raw, json)
Hash identifier: itGUekGmxDqLj08uW77Tuyk2mdQ1m5yr6+zp+Zdoeg4=
Subject key identifier: 62:7D:E9:AE:F7:0F:B2:3E:70:35:C4:06:89:A1:55:C3:BC:46:85:24
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0907C42B0B14C6461AE523AAD72BBACA08D65A1D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f057f6e-1993-42bd-b822-ce2db15710b8.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:ab00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:07:c4:2b:0b:14:c6:46:1a:e5:23:aa:d7:2b:ba:ca:08:d6:5a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=db8c852b9f6e0ece47e9278de29aa7520388b9f722e7957f5901932e85fc13c0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:46:04:c4:d6:4e:e8:f1:d9:6f:f0:6a:45:
df:9c:d4:53:6c:16:5d:a1:0a:53:0b:4b:76:f2:c1:
d7:15:8b:13:bf:ff:bc:0e:15:1b:da:02:d9:74:a6:
10:8c:b1:10:9c:0c:29:6d:4a:f0:d6:f7:be:ec:89:
20:f0:2e:89:85:4a:04:60:13:31:25:05:f2:e2:2b:
33:16:dd:0e:1c:9a:b1:12:d1:da:b4:8e:63:89:a2:
9b:ca:0b:ff:fc:35:e6:8d:8e:aa:e1:ec:43:b0:bd:
dd:c4:65:81:31:09:57:25:79:33:12:c9:6f:f2:72:
f4:96:e2:1a:5c:fe:e9:4b:8f:3b:66:33:eb:07:c1:
7d:fa:ee:51:bc:a6:7d:8a:60:b5:f4:19:1c:7e:2b:
1c:d0:28:a4:68:d9:81:a7:84:e0:6b:03:b2:81:0f:
56:de:06:16:4a:12:2b:11:c6:dd:c3:dd:c2:10:df:
ff:d1:72:9b:db:2c:47:f0:83:ac:48:06:56:c6:78:
f3:83:28:57:28:f2:f4:eb:aa:24:06:42:0f:ed:04:
7e:8f:90:b6:b4:fe:af:3f:63:34:9b:6c:87:5c:c8:
54:86:ae:54:63:da:8a:b6:2d:1e:04:7b:49:a1:70:
c3:cc:13:44:76:e4:c4:98:ad:22:b2:dc:c2:06:28:
00:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7D:E9:AE:F7:0F:B2:3E:70:35:C4:06:89:A1:55:C3:BC:46:85:24
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f057f6e-1993-42bd-b822-ce2db15710b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:ab00::/40
Signature Algorithm: sha256WithRSAEncryption
04:d5:6d:4e:48:b9:0f:ee:b1:37:af:25:07:45:4a:20:ad:e5:
05:c0:a8:fe:bd:ea:d4:bb:cd:83:55:b4:47:8e:8b:58:8d:1b:
66:7a:12:19:8a:8b:1c:5a:03:73:8f:51:c3:7c:73:19:db:d9:
40:69:fa:12:7e:72:bf:00:90:82:4d:69:da:61:b0:11:c4:44:
be:84:64:b4:4e:30:ca:b8:2b:bc:06:bc:54:80:0b:e7:c8:f2:
3a:90:70:f6:da:fd:c9:5a:96:c1:88:d9:f8:9d:7e:ab:50:1d:
29:a8:26:00:5a:36:cc:b4:89:c1:c1:34:f8:81:09:88:31:20:
60:4d:f0:74:69:57:a6:07:17:8c:db:a0:53:02:11:c3:2e:52:
70:80:72:9a:39:7c:a2:b2:8b:91:8f:9b:c5:f7:09:e6:6e:98:
b2:59:82:7d:dc:42:08:4f:10:a7:cf:fd:e5:fa:8f:46:9f:03:
b9:10:e3:0b:db:10:a9:49:a9:de:93:fc:52:d9:1d:ab:f0:dd:
f7:6f:c7:3f:c6:00:7f:ff:3d:6a:a8:e8:a5:06:4f:03:70:76:
7c:15:3a:5d:ab:c4:73:c3:fa:2f:d2:e7:08:cd:be:74:00:6c:
87:76:9a:72:0c:8e:f1:80:69:57:5e:2d:e0:4b:2c:4c:e4:5c:
f9:5c:43:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 9 09:20:24 2025 by rpki-client