Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e6b20dc-f618-426f-aa90-4d4838eaefa2.roa
File: 6e6b20dc-f618-426f-aa90-4d4838eaefa2.roa (raw, json)
Hash identifier: LdEbu4CBuqwSY7y73Dr9Zi1HK9rsKLaHhyiDfI7/7Eo=
Subject key identifier: 61:98:75:19:C3:4B:0F:31:D5:EC:94:18:B3:E7:CA:8B:4C:57:7C:7E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7DB1789CECB9CD0892F0FC3CCAC1374EE6501EBA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e6b20dc-f618-426f-aa90-4d4838eaefa2.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:af00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b1:78:9c:ec:b9:cd:08:92:f0:fc:3c:ca:c1:37:4e:e6:50:1e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:b0:eb:8b:ed:62:fb:e0:69:60:12:9f:cd:
5b:e7:e5:df:51:c6:29:82:da:7a:62:14:53:7d:81:
51:da:26:28:d4:e6:c6:39:22:31:3d:99:59:c6:70:
92:bb:e5:a7:72:9e:37:90:d6:83:37:87:68:91:05:
c9:83:39:50:59:f6:cd:30:d7:9b:5a:2c:07:7d:e2:
da:62:54:37:c2:0e:45:0d:c0:bb:90:ad:24:83:f6:
d3:e3:45:a1:86:5d:19:c4:07:70:00:85:3b:8c:57:
7c:c3:dd:f5:40:e8:9e:31:20:63:4d:2e:8b:c1:67:
80:7c:de:40:7c:a2:43:ee:c2:ab:c0:98:a9:ae:52:
1f:4f:94:f4:eb:ee:d7:c9:8f:2d:95:57:ea:ac:b6:
d9:30:0d:8e:27:36:db:b2:4a:7a:00:9e:42:70:23:
d4:05:81:55:d4:5f:8d:f4:b0:fa:1a:3b:2a:c6:b7:
8e:ef:7f:12:79:72:c8:99:f4:13:4c:a2:a0:10:7a:
a4:08:f4:f8:d0:4e:8e:e3:65:1d:2b:eb:d2:4c:cb:
52:ac:45:0b:4d:b1:e3:b5:e1:27:b8:1d:a8:1d:d5:
b5:39:ea:76:14:92:3c:0a:8f:cc:ba:a7:d8:5e:f9:
a0:0e:f9:81:f7:17:3c:fc:31:8d:87:fe:f3:32:41:
fa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:98:75:19:C3:4B:0F:31:D5:EC:94:18:B3:E7:CA:8B:4C:57:7C:7E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e6b20dc-f618-426f-aa90-4d4838eaefa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:af00::/40
Signature Algorithm: sha256WithRSAEncryption
63:5e:37:0e:df:d3:cf:d8:05:01:c8:02:0a:d1:2a:5f:0f:cc:
d5:26:4b:6d:74:46:06:8c:5c:48:75:dc:c0:a1:7a:b6:f8:0b:
cc:35:11:ba:0b:eb:12:80:cc:10:94:e6:5b:24:13:e6:c2:1c:
48:a0:c7:fa:01:7b:e4:a1:63:48:d9:7c:20:94:8e:ee:aa:c2:
c2:7e:8f:02:ae:f8:e6:0c:f6:4f:45:56:81:92:78:72:11:d1:
37:16:7e:00:6f:a1:64:c0:76:a5:0c:cb:41:0c:dd:89:b3:40:
b2:f6:9d:8a:ab:9c:3a:31:97:da:3c:5d:b4:06:ee:00:6d:ab:
c0:4e:b8:73:78:3c:3a:5b:60:a3:d4:56:db:e9:03:68:1d:c9:
37:ae:2e:f6:ad:a1:ef:da:fb:83:17:c6:f0:6c:b5:51:f9:1e:
9e:e8:3d:20:6a:ba:dd:df:0b:7e:aa:a9:5e:e3:3c:bb:9e:87:
4c:ed:fb:a0:40:7a:59:63:45:e1:af:20:e2:3e:c4:a7:8c:ba:
e0:e8:18:a0:cc:f8:ac:ae:f8:a7:28:c3:a6:97:14:f5:2a:b0:
c3:c2:28:8c:c0:f9:10:69:a7:eb:e3:60:06:5d:fb:48:49:18:
58:2d:18:a6:a6:d5:db:24:6b:08:d5:5e:d1:e3:52:3d:61:97:
0a:60:ec:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:53:19 2025 by rpki-client