Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49489563-69ac-477c-8901-23c4d5efd0a5.roa
File: 49489563-69ac-477c-8901-23c4d5efd0a5.roa (raw, json)
Hash identifier: 7cd3wc28PgSQuI6/DnvvvJa0GNlhHNcM3/zJyhW17rE=
Subject key identifier: F2:2A:9F:2D:D8:01:33:76:E5:59:5F:16:58:C6:7A:F1:A3:75:16:A0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6CF1FBCB2EDCDE6EF706C748F033908600314C6A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49489563-69ac-477c-8901-23c4d5efd0a5.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.160.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:f1:fb:cb:2e:dc:de:6e:f7:06:c7:48:f0:33:90:86:00:31:4c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:f0:ff:1f:dd:aa:1f:b2:78:5c:0d:15:37:
32:b3:9a:7e:67:a5:38:ff:eb:63:4b:9a:64:53:f4:
65:ae:4a:22:f7:20:f7:ff:37:23:e5:ab:08:5f:b8:
53:25:58:df:56:32:e0:5c:96:1c:a5:63:7b:91:f9:
1a:10:a9:88:a2:c5:9a:ae:5a:38:1d:69:d6:36:c4:
d8:8e:f0:09:61:94:b8:dc:b3:25:44:6d:38:90:d5:
5d:7d:c0:9d:ee:71:58:ab:16:04:b5:8f:00:83:11:
97:f8:17:b2:50:0d:f6:82:25:03:86:7d:b6:a9:97:
2e:ed:33:68:3c:c0:57:a6:2c:63:cd:f6:06:44:4f:
2d:da:aa:f7:12:4f:27:ff:a6:76:65:62:79:1a:3f:
b4:71:70:9f:16:2b:6e:98:65:80:f3:6b:dc:8f:ab:
d4:53:7c:32:d1:56:bf:4d:74:61:f6:ce:e4:62:d6:
f6:49:b7:ff:e4:22:63:d9:e8:97:ff:c7:5d:7e:98:
fa:b4:ca:64:3b:f0:72:c6:a8:21:ec:a5:c2:79:69:
3c:a2:59:d9:e0:91:35:22:cb:d5:7a:42:91:27:50:
cb:4c:22:bf:12:fd:ce:31:d5:a1:69:9d:cc:49:6d:
19:28:4c:fd:66:6c:23:ab:30:95:fa:2f:52:13:13:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2A:9F:2D:D8:01:33:76:E5:59:5F:16:58:C6:7A:F1:A3:75:16:A0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49489563-69ac-477c-8901-23c4d5efd0a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.160.0.0/14
Signature Algorithm: sha256WithRSAEncryption
90:e7:2b:89:ac:1a:f5:4c:66:e1:53:de:eb:73:18:1d:a0:ec:
51:bb:99:cc:f3:d4:34:c5:1d:fc:0f:c6:88:d9:8c:1a:82:fa:
15:18:48:38:4f:81:ce:be:45:6b:80:f6:2d:b5:f2:04:a5:55:
1e:07:2d:79:6b:68:e1:cf:ca:a3:88:54:5a:1f:fa:be:2c:a6:
30:15:cc:df:f3:44:b1:e5:17:a9:11:81:a2:78:d2:08:16:fc:
53:48:e6:29:b2:d8:2c:f4:80:db:c7:4f:a4:ff:e1:59:33:61:
c9:cc:07:a6:8d:45:c7:16:c9:4a:bd:a0:c6:fd:ac:0a:55:0f:
39:d7:c1:95:54:8b:cc:24:48:52:83:15:8b:12:9a:0d:62:8e:
77:39:d6:86:86:7f:07:8c:3e:a8:21:00:b4:25:82:a8:cf:7b:
35:15:77:4c:e0:f4:cd:68:67:6d:ff:a6:cc:50:55:ca:24:64:
e9:f0:28:7b:aa:20:c0:f3:6f:79:ac:f3:89:17:99:9b:ea:aa:
a4:82:ab:dd:ab:98:1b:75:6c:3e:09:bb:16:55:90:fd:6e:18:
c6:ea:1e:19:9f:5f:e2:29:d2:f3:f3:6b:f0:62:56:80:81:b0:
15:ad:bf:82:b8:ac:18:86:0c:22:f4:31:f3:bb:82:4a:8b:80:
64:98:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:03 2025 by rpki-client