Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cadcfa35-5b63-40b0-9a47-912e707a5001.roa
File: cadcfa35-5b63-40b0-9a47-912e707a5001.roa (raw, json)
Hash identifier: XR0AFoVdb24dgciV6Jp0gQAN6/eeR7lOkbtfsQEM9Es=
Subject key identifier: 57:B7:DB:5D:AE:96:FA:1C:B6:02:0A:F1:6D:80:9A:24:3B:F8:76:07
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 50233BE25F13EF957255EB5C4887EF9493B94C28
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cadcfa35-5b63-40b0-9a47-912e707a5001.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:a600::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:23:3b:e2:5f:13:ef:95:72:55:eb:5c:48:87:ef:94:93:b9:4c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:5a:42:e9:f7:60:08:db:f1:c6:38:ce:b0:
62:27:21:c2:7a:46:de:de:da:da:20:6f:1f:9b:7c:
7b:08:8c:ec:19:eb:65:02:52:8a:ee:d1:ad:7c:ca:
7f:2e:3c:7d:3a:92:07:62:88:e0:b4:e3:31:99:7a:
cf:98:97:24:76:38:5b:e8:25:64:d3:79:c1:fb:af:
56:68:05:33:31:70:ee:de:03:00:82:1e:8f:b8:f8:
67:19:62:3e:53:b0:79:84:fd:9e:d5:e1:02:16:1f:
29:e2:1f:99:9e:f2:ca:b6:af:07:5a:e0:2d:a4:e8:
23:cd:98:fc:97:c2:c4:20:4f:2f:96:79:ae:47:57:
32:fc:81:3a:b6:0f:65:e7:17:fe:73:66:73:18:e8:
6a:70:ba:e1:4a:bc:42:87:cb:ab:50:58:41:b8:2f:
e8:1b:81:fc:77:70:f2:ea:c3:0e:f5:f2:f4:4a:f1:
de:8b:c1:26:ec:b1:5c:f5:2a:da:14:8b:37:31:54:
1f:01:2c:ae:4d:5e:95:ce:9c:61:4a:72:66:30:e7:
29:52:a5:49:41:f3:85:f1:80:d4:9c:d7:0b:a9:02:
29:21:9c:41:81:b8:c7:30:9c:fb:f4:9f:95:09:69:
7d:e6:3a:9f:fd:50:58:ec:b4:44:14:49:3d:9b:69:
f4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B7:DB:5D:AE:96:FA:1C:B6:02:0A:F1:6D:80:9A:24:3B:F8:76:07
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cadcfa35-5b63-40b0-9a47-912e707a5001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:a600::/40
Signature Algorithm: sha256WithRSAEncryption
52:fa:7e:fb:ea:b9:32:3f:5d:5e:4e:75:80:bd:50:4b:1a:2f:
d0:16:31:b9:50:37:83:51:27:35:5b:39:20:0f:0c:b8:73:0e:
23:94:b0:87:3b:77:4e:e5:04:d9:7a:01:1b:1e:47:be:fd:a5:
76:7d:36:00:8e:5e:67:4f:91:c5:c5:65:e2:b9:7b:15:4c:77:
c0:f3:af:e3:1f:42:c6:c8:89:2a:c7:90:2b:33:a2:11:87:49:
05:dd:93:49:f1:f7:da:03:f5:52:32:a5:c6:01:83:1a:89:d1:
3b:7a:ad:3f:ee:fc:6c:a5:97:65:db:46:f1:a6:08:c0:6f:f3:
65:4b:4a:82:ad:4a:5c:dc:78:d2:c9:57:cc:90:ac:0e:6d:aa:
fd:b0:38:8b:3a:5b:ac:e6:38:89:58:92:91:0b:07:b4:1a:bf:
63:ec:a3:63:cd:dd:b7:de:8e:e5:3c:80:af:e0:9f:de:8e:ed:
0b:cf:6f:b1:12:5a:b1:a2:7e:75:34:df:d7:4d:8c:88:fd:69:
69:91:bf:f7:0c:69:53:84:6b:94:a4:c7:7c:36:cc:8f:d3:1f:
c0:03:23:da:6e:28:49:1b:4d:67:93:a6:6e:07:c5:1e:da:13:
59:19:d1:b5:ca:13:75:07:54:51:a4:ce:d7:2b:88:41:05:80:
49:8e:9f:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:27 2025 by rpki-client