Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94e3d920-ffe1-4f8e-81a8-c16c58df46cd.roa
File: 94e3d920-ffe1-4f8e-81a8-c16c58df46cd.roa (raw, json)
Hash identifier: b0Bzg4gI/yVHUtC6CJstdRlvS8fWe3m09LHkvb0rnqc=
Subject key identifier: AF:79:56:0B:96:0B:FD:43:A1:E6:83:82:25:01:4B:60:A0:8B:B7:5A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 570871AC11722283DAEB2F3FE0CC6DA3361200E6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94e3d920-ffe1-4f8e-81a8-c16c58df46cd.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 18.137.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:08:71:ac:11:72:22:83:da:eb:2f:3f:e0:cc:6d:a3:36:12:00:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:1c:ee:8b:09:f5:e9:78:d0:99:ff:df:2b:
a1:1f:c4:5a:69:e4:17:2e:74:b2:da:3e:ee:c2:f0:
f5:61:7f:c5:b0:ef:89:94:02:ab:e4:ec:ee:03:d8:
22:46:d8:8a:d7:6c:dc:3e:c4:ed:2f:c2:03:f6:75:
bf:8d:b5:31:e6:30:8e:1d:cf:47:d7:6a:c6:26:54:
fe:a9:24:38:5d:5b:20:9c:46:49:36:9a:97:a3:ad:
f4:bb:39:3f:34:4a:a0:3a:3f:24:ea:b5:91:d5:bb:
26:76:7f:72:a7:23:8f:9f:b0:94:97:ad:0a:c2:10:
87:27:6e:31:ae:8f:37:d9:73:fb:a0:9e:5e:82:35:
23:fb:1c:2e:8a:52:8d:ac:9b:36:33:eb:ea:26:d2:
76:cd:1d:c3:b2:71:64:9f:a1:31:9a:1c:39:4b:aa:
79:84:5e:cf:26:e9:ed:61:21:13:45:f4:16:c5:93:
69:eb:09:4d:f0:46:58:8d:86:43:4f:e2:7c:5e:d4:
19:46:90:09:fd:eb:74:c5:c0:fb:e8:ab:43:2b:e8:
da:8b:d1:d0:9d:b8:83:45:3f:69:4a:1f:bc:95:14:
29:31:7e:c7:c6:e0:63:25:84:b2:af:ea:18:92:51:
f0:bf:66:2f:31:8f:2f:0d:23:38:b1:86:57:a5:53:
6e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:79:56:0B:96:0B:FD:43:A1:E6:83:82:25:01:4B:60:A0:8B:B7:5A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94e3d920-ffe1-4f8e-81a8-c16c58df46cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.137.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:4c:a3:bc:5f:af:47:f9:3b:ec:a8:90:7e:57:cb:d3:2a:0e:
7f:48:23:ce:1a:b8:b9:a9:04:e1:26:3c:f0:2d:a4:c5:0c:e3:
e1:29:8e:90:df:95:59:cc:a6:bb:ca:77:de:dc:98:a8:df:4e:
a5:61:05:67:d0:81:03:2d:fd:9b:91:6d:e1:8b:cc:63:c9:08:
7e:e6:41:4d:3a:d1:f2:aa:2f:41:6c:ab:24:ae:ba:9a:9e:2b:
7a:3e:47:38:1a:20:4d:a9:ed:5c:99:78:e6:11:70:bd:5c:38:
42:16:cb:b4:c3:28:29:6d:0c:a0:77:b0:61:11:65:de:d8:12:
9c:03:d5:82:26:b1:20:1e:4c:89:5f:b5:89:3b:9a:21:5c:bc:
47:a0:70:2e:91:1e:75:06:fa:9e:4f:ab:63:bf:a2:ea:f0:67:
1c:dd:f2:1c:cb:88:08:aa:04:5d:77:c6:78:de:6d:f0:d1:13:
4e:3d:60:15:08:6a:d5:c9:d2:56:fc:22:f0:77:44:dd:97:04:
99:ac:17:5b:52:76:55:83:54:dc:a2:b7:1f:c4:2f:73:a0:99:
0d:77:46:6a:5c:7f:45:be:5a:92:d4:62:90:5f:0e:33:a0:a2:
37:ce:c4:df:23:6f:d6:f6:68:1a:07:5d:d9:09:f1:36:db:61:
ca:34:66:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:44 2025 by rpki-client