Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30ac2c45-be50-46b0-8722-62cc76f46871.roa
File: 30ac2c45-be50-46b0-8722-62cc76f46871.roa (raw, json)
Hash identifier: OvjT0iMeF0GfNUG7KdMt89P+EbAvW6i9zU4cvEEQ8f8=
Subject key identifier: C9:F2:5E:B9:0B:3D:83:72:B9:D0:D2:44:78:6A:2D:47:E8:14:8E:FC
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4676B2F4214CFD66DD0D6B6E935E703E09ADFD97
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30ac2c45-be50-46b0-8722-62cc76f46871.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.221.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:76:b2:f4:21:4c:fd:66:dd:0d:6b:6e:93:5e:70:3e:09:ad:fd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:ea:6b:c2:6e:a8:3b:1a:99:dc:0d:88:4a:
81:0f:36:99:97:a4:db:82:13:71:70:98:d2:c0:8a:
e1:4a:f9:d5:57:31:cb:d2:bc:5f:e7:af:99:c5:ff:
c3:7b:41:7e:8d:a8:fa:cc:e4:83:e3:0e:e5:07:cf:
eb:f7:cf:e2:de:68:10:1a:9e:65:bb:9f:06:8d:89:
fb:68:08:30:af:67:a3:76:c3:7e:81:37:30:4d:f6:
d0:57:82:a3:f9:5c:19:4c:0c:d4:2f:32:23:af:d0:
d8:4f:68:f0:58:b0:16:60:e4:47:66:53:08:e1:b8:
68:9e:4a:1f:6f:81:b5:de:ba:4a:06:c6:32:59:80:
17:3d:b6:c4:c4:3d:ee:a8:43:1b:fd:06:5b:a3:d8:
f5:4e:da:1a:a7:a6:6b:94:e8:3b:42:f3:4a:4a:79:
b4:c4:35:79:98:0f:6e:35:49:c2:ae:35:f1:26:79:
ff:de:e7:f7:92:b6:09:79:37:28:f9:b1:09:88:89:
bf:36:c5:3f:c2:d8:9c:a4:49:d8:15:98:cd:b3:8c:
f1:f0:4f:b1:36:7a:6b:31:2a:85:2b:dd:8e:69:71:
e9:07:24:fe:da:e5:75:db:85:f1:b6:18:36:80:27:
0b:86:88:06:1b:62:d9:a3:e5:a9:fa:94:d8:9e:ce:
01:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F2:5E:B9:0B:3D:83:72:B9:D0:D2:44:78:6A:2D:47:E8:14:8E:FC
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30ac2c45-be50-46b0-8722-62cc76f46871.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.221.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:b3:32:a7:fc:d1:8e:f2:31:85:18:2c:77:1c:8b:c9:9d:54:
f1:bf:9e:97:65:ba:c9:47:24:dc:29:cf:89:5b:44:e1:1b:72:
6b:a2:63:56:2e:11:d5:3d:c7:1a:af:ea:88:d9:91:c1:91:53:
0e:49:03:3f:20:54:5b:3e:fc:bd:58:87:a2:f5:5f:a3:d4:b3:
ba:ca:23:c0:81:a3:89:e8:ae:6b:4d:df:70:b5:14:9c:3e:e6:
81:94:d0:eb:f4:41:43:c8:60:39:5a:43:85:4a:4c:9d:36:75:
2a:4e:0c:c8:89:02:37:61:af:cc:a6:83:6a:91:ab:47:85:88:
29:fb:32:4d:9a:21:e2:ec:4a:62:35:23:dc:e1:55:78:34:fd:
00:2d:a3:20:6f:67:f6:d5:06:61:a2:9d:24:27:d4:a9:cc:fb:
ae:49:8f:26:3e:a6:4d:2c:fa:cf:2e:3c:0b:64:93:96:b5:f6:
05:30:3f:fd:af:4b:c9:e7:70:6c:98:cc:3b:06:b7:b8:94:26:
43:64:c6:82:8a:89:aa:0d:fc:c9:20:72:17:30:55:1f:01:74:
9d:4f:7b:cf:32:bf:63:73:99:d3:cb:bd:51:b3:37:0d:50:a3:
0c:f9:3c:c6:09:d2:8b:cb:bd:e8:6a:4b:71:e3:0e:99:15:de:
2e:73:89:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:21 2025 by rpki-client