Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49b5528f-9820-49ed-9621-5506ab42934b.roa
File: 49b5528f-9820-49ed-9621-5506ab42934b.roa (raw, json)
Hash identifier: ML7Z3uODGlHqcSFy5rSi4WY6p5SUeIG0A/RipM4Xjj0=
Subject key identifier: 7A:B1:C0:D9:C4:EE:48:44:D0:82:64:E7:2E:1A:34:E1:F8:58:A6:87
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2D44468AF08ABFB344C43EEE5DFF3CEEA9F5F723
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49b5528f-9820-49ed-9621-5506ab42934b.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.240.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:44:46:8a:f0:8a:bf:b3:44:c4:3e:ee:5d:ff:3c:ee:a9:f5:f7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:04:6b:93:b4:8b:d5:4a:27:34:c8:d5:e9:
29:0c:5b:8d:8c:8c:3f:e1:ee:69:46:36:fa:28:ad:
ca:11:26:ec:ef:3a:f6:c5:50:80:ee:44:42:e2:ef:
21:e8:db:f3:20:24:45:cb:f0:5f:79:6e:08:4e:a2:
37:d3:fe:3f:17:da:a7:fa:ef:03:02:7e:4d:ad:b7:
37:8a:d3:89:ca:f6:44:21:6a:92:b3:cd:26:38:01:
64:20:a1:67:86:ae:ed:23:d2:70:6f:01:fa:59:e2:
f9:20:bc:9a:c5:fd:61:66:49:3f:34:7b:d7:4c:ec:
c2:c3:c3:e7:14:a2:1b:58:fe:83:e8:44:47:67:e1:
c7:cb:bd:ae:8d:00:6e:99:cf:35:7f:aa:98:cc:9d:
cf:80:1c:7f:e4:75:15:65:1c:db:8d:ff:02:cd:23:
b7:a2:63:a0:57:2b:82:93:6b:e6:42:98:11:ac:de:
ed:52:b2:76:35:9a:a4:75:a9:d1:06:36:cf:43:f1:
ae:60:90:f7:36:5f:a1:be:82:ec:fe:05:21:a7:6f:
1a:6b:38:73:44:38:48:83:d3:f3:18:bb:b8:6f:37:
ae:bd:c1:b5:01:7d:58:a5:77:1b:94:eb:5c:ff:d3:
f3:b1:5d:bc:08:d8:21:54:ad:83:6c:35:ce:8f:d3:
da:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B1:C0:D9:C4:EE:48:44:D0:82:64:E7:2E:1A:34:E1:F8:58:A6:87
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49b5528f-9820-49ed-9621-5506ab42934b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.240.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:2a:b5:e5:3b:47:1f:d1:f6:c7:91:a4:f3:15:ad:cb:db:9c:
b6:6d:66:8d:48:86:58:05:f8:00:09:df:16:28:07:b1:79:ed:
f9:0b:af:09:4d:78:03:a0:06:78:bd:0d:c9:e4:1f:7e:09:fa:
02:a7:71:4c:ad:c2:7c:ea:04:79:c1:a8:bf:22:33:07:15:11:
e3:a4:98:e8:0b:59:bd:17:b0:63:12:d6:e1:df:be:6f:b9:f5:
4c:7b:d1:85:e4:63:e8:28:11:9f:fe:7d:e3:ef:bf:ca:84:2f:
24:d5:76:46:dc:d5:88:b5:d9:27:89:a0:23:11:7f:65:29:53:
08:03:23:71:8a:3c:2a:18:ee:cb:a1:61:3c:ac:5c:2f:be:5c:
9a:f4:99:e5:ec:ce:04:4e:cb:3b:fa:6f:4f:ab:8d:c4:31:58:
6e:26:f0:00:70:86:7f:e4:d8:c8:c5:7a:fe:f3:b6:bf:ed:27:
a9:83:93:25:d4:d8:55:52:4c:4f:61:47:4b:e9:69:67:f0:4c:
9c:08:5a:82:94:82:c4:f3:92:f3:d1:1c:fd:d7:4c:b2:0f:e8:
fb:3b:ed:2b:d1:66:05:ba:17:79:bc:7a:e0:74:13:e2:00:fc:
58:4c:36:d8:1e:d6:9a:8c:03:c7:fa:2e:a4:77:4f:28:59:c8:
a7:0c:73:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:50 2025 by rpki-client