Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87d8c8e4-86b9-413a-b1b3-f4fad8de0ca8.roa
File: 87d8c8e4-86b9-413a-b1b3-f4fad8de0ca8.roa (raw, json)
Hash identifier: L/0K2PpyX45r6honrOhO+TLHCP24i26Gjq+gcQMoXp4=
Subject key identifier: 19:C0:E7:55:51:1A:36:F8:26:CE:47:9B:73:9B:6C:50:75:9F:4B:73
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7C7DDB9E9E33674871FFDC3AA62554E2E5C814D5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87d8c8e4-86b9-413a-b1b3-f4fad8de0ca8.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:7d:db:9e:9e:33:67:48:71:ff:dc:3a:a6:25:54:e2:e5:c8:14:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:6a:dc:0a:60:ce:e6:bf:76:1f:6b:60:58:
72:fb:54:ad:56:de:d4:85:42:a2:12:8b:6a:96:04:
a8:5d:02:dd:84:38:d6:47:2a:3c:dd:33:30:db:c7:
99:d4:4c:94:2d:f5:92:f5:e4:79:be:90:d1:60:16:
a7:6d:eb:dd:f4:13:9f:e4:e8:ce:68:53:c2:a3:f6:
ca:af:b1:bf:05:08:5b:47:f8:a7:3b:29:f7:8c:1c:
14:57:13:8d:a0:30:21:37:12:b2:77:54:31:c1:d0:
bf:87:68:35:98:9f:d2:ad:20:b6:d5:54:0d:05:f5:
8a:73:7c:2f:32:b2:c5:48:e8:0d:59:ec:4c:ce:76:
08:a2:1c:6b:5e:37:be:9e:25:58:07:1d:8b:c9:2a:
29:2f:ff:5a:43:3b:d0:e6:9a:e0:c7:d3:e2:7f:99:
05:18:62:12:37:53:94:3b:2f:93:00:f6:ff:0e:ee:
53:39:10:80:5f:ad:97:e7:37:76:5c:74:55:86:86:
21:77:07:49:11:9f:7d:e2:43:c4:a4:50:ce:2a:ca:
fa:be:5e:1e:61:f4:06:9a:6c:5d:09:44:85:5b:6c:
99:f0:d8:c5:71:eb:eb:99:cf:21:e1:71:93:6f:33:
96:eb:8b:b0:fc:6a:56:5b:23:05:7d:7d:4f:d6:25:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C0:E7:55:51:1A:36:F8:26:CE:47:9B:73:9B:6C:50:75:9F:4B:73
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87d8c8e4-86b9-413a-b1b3-f4fad8de0ca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.9.0/24
Signature Algorithm: sha256WithRSAEncryption
03:51:2e:ad:93:95:c1:44:18:b3:97:a1:6b:ce:8a:7c:02:1b:
84:1c:95:7a:ca:e3:35:4b:18:9e:cc:45:6a:ac:95:82:34:69:
94:8d:09:9e:de:d4:71:ac:28:66:08:d6:a6:94:6b:8c:32:c4:
3b:9b:52:3a:b0:da:ea:ef:c8:8f:4b:28:73:5e:2e:68:10:28:
27:70:33:f7:b0:3f:3d:70:e5:5d:03:47:32:60:45:73:48:a9:
af:23:f4:e9:27:fe:c2:a1:49:75:de:b4:70:ac:05:d8:4f:fa:
0b:5d:e8:6f:be:fd:10:bc:dd:be:53:c9:ca:c0:ea:8e:e6:95:
2d:01:da:00:49:06:88:26:76:d4:55:a1:83:75:18:e7:2c:55:
0f:34:fa:e0:32:10:63:7b:3b:0f:5d:70:d9:8c:97:7f:0c:ff:
3f:84:c2:19:8b:ed:aa:46:f4:a0:41:60:f9:bd:35:ba:72:b9:
09:0e:2d:b9:2a:70:9d:41:05:be:86:ad:f2:45:50:34:a6:e3:
a4:62:10:16:e2:d4:7d:8f:89:2c:38:f1:9b:cf:00:f9:62:61:
66:f2:e4:18:d7:b9:6c:5c:a6:e6:57:55:e1:89:73:3c:6c:72:
06:03:33:ca:be:74:e5:20:77:1c:38:ee:a0:a1:a9:15:e3:6c:
ec:6a:9a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:48 2025 by rpki-client