Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2caf2d13-b9cd-4030-9e0d-30d6eb4340a1.roa
File: 2caf2d13-b9cd-4030-9e0d-30d6eb4340a1.roa (raw, json)
Hash identifier: /nwnUr7Wrcuk6WxcfffKG4w0FGMr1xn+wnV/Aza4U84=
Subject key identifier: 6F:B9:FF:10:1C:47:2E:23:69:E9:D2:03:9D:07:91:C4:F7:36:57:95
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7E0B57BFA416C3A37746F8255D140D4A50B51DFA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2caf2d13-b9cd-4030-9e0d-30d6eb4340a1.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0b:57:bf:a4:16:c3:a3:77:46:f8:25:5d:14:0d:4a:50:b5:1d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:0a:79:3b:b2:29:13:d9:76:28:7d:41:af:
a4:06:1e:56:5d:2e:05:61:1f:bb:a7:cd:0e:53:f2:
fc:c9:06:a2:2f:bf:73:49:f7:78:79:0b:1f:d8:9c:
83:6a:80:1f:e9:74:88:9a:c4:06:ec:90:97:64:c1:
7e:e5:b6:19:5c:dd:39:75:91:01:68:c1:4b:0d:5f:
60:c5:2b:fa:cf:81:70:3c:c1:66:ae:1e:2b:fa:84:
b0:ec:8c:76:1e:59:8e:f2:ef:27:d1:5c:c6:25:5e:
d6:00:eb:73:c1:6d:c2:3c:47:75:ea:65:a0:31:bb:
38:82:aa:e3:28:31:d2:41:53:32:a8:71:19:2a:8c:
7f:4e:7e:7a:51:90:ac:7c:a4:5b:54:c7:65:3e:53:
50:c1:38:ba:b0:c8:2a:ec:fd:d3:84:1c:35:1d:66:
7a:46:f8:51:ad:5f:30:c7:ed:d7:4b:d4:5d:11:17:
bc:6e:6a:f0:ec:07:7e:8f:75:2f:4c:41:81:24:fd:
e7:0b:8f:f1:d2:c7:68:20:b8:a7:f8:92:d8:d8:8d:
e1:2f:e0:b4:6a:b4:21:52:fa:9b:5f:14:5d:36:af:
5e:94:87:26:4d:2e:8a:24:d5:a8:db:79:09:5b:ec:
7b:c4:04:1f:16:bc:61:d0:05:c7:59:4c:31:3a:53:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B9:FF:10:1C:47:2E:23:69:E9:D2:03:9D:07:91:C4:F7:36:57:95
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2caf2d13-b9cd-4030-9e0d-30d6eb4340a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.141.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c1:36:cf:32:fb:b4:7f:d2:1a:60:3f:fd:7b:26:18:69:b7:
ea:73:34:5f:5e:39:69:d4:b4:6e:e8:39:99:b1:28:54:35:59:
3e:7b:de:e0:2e:2f:28:cd:16:9d:a8:10:10:83:f8:40:b3:a8:
32:8c:16:eb:50:a6:61:5b:fd:30:65:ed:17:80:a1:26:db:79:
a9:89:38:75:cb:20:82:65:d0:b1:8e:03:b9:e1:aa:94:f9:0a:
24:2c:aa:f2:1f:1b:8a:fb:1e:dc:43:ab:f1:32:2c:38:bc:7a:
dd:c9:31:0b:5f:1a:b6:80:fd:30:46:b1:df:73:ad:6e:65:be:
e4:70:50:5a:78:dc:f7:a7:44:c9:55:30:c8:37:b6:dc:c8:a8:
ba:48:4f:24:a5:d3:7d:28:a8:07:6d:80:58:2c:9f:62:72:96:
0f:34:09:c7:24:47:b4:54:b7:ab:26:6d:19:5c:c0:12:a3:5e:
5b:09:64:7b:11:0b:44:6f:34:a7:c0:6a:f4:c7:cb:64:7f:f7:
0a:98:b2:73:7b:6e:d2:ea:29:d8:07:ab:ce:da:34:51:a1:14:
16:7d:3d:c7:2f:bd:b8:a4:0e:a7:98:b1:ae:94:6d:ef:08:ee:
87:05:8d:fb:f2:f9:12:01:a0:8c:e3:54:1e:76:e1:6e:26:27:
7b:bb:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:56 2025 by rpki-client