Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aaece7b3-a483-4084-a731-1f122ac66077.roa
File: aaece7b3-a483-4084-a731-1f122ac66077.roa (raw, json)
Hash identifier: lZ4vUfOgqlEALedHhe+7BJ0MxnQLYBV1sSfyxBUmC7Q=
Subject key identifier: B1:BD:A9:41:28:FD:33:12:19:B3:40:61:64:30:C3:D6:B3:93:1D:B1
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2CB8E711F1545CA52257B96B5E9134EE0C07F0A4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aaece7b3-a483-4084-a731-1f122ac66077.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 18.254.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b8:e7:11:f1:54:5c:a5:22:57:b9:6b:5e:91:34:ee:0c:07:f0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:61:a0:71:2a:b7:dc:67:67:c4:0d:99:ae:
18:e0:35:20:f5:2d:a8:db:4c:6c:fa:6a:5e:6f:a9:
75:48:c2:23:92:e3:4b:1c:e1:36:b0:bd:fc:5c:04:
5b:dd:63:08:dd:25:97:eb:a4:4a:b9:5b:86:6d:17:
ec:22:dc:c1:8a:4c:10:51:6d:08:bc:b6:19:fd:43:
5b:76:e5:ef:7e:90:b8:db:fb:d7:b8:b0:61:35:c5:
6f:84:4b:67:61:50:61:28:cf:4f:f2:32:be:32:86:
e4:75:a5:3c:03:af:67:af:7b:b4:0f:37:9f:9c:bd:
0f:05:c5:15:f3:87:f8:75:a8:ed:a9:f6:e9:3e:d7:
e8:95:a8:02:23:71:18:00:09:7b:9c:9a:db:d2:a8:
0c:be:45:16:53:d0:96:7d:58:5d:4d:dc:f6:54:5e:
ea:0f:ee:2f:25:e1:7f:1b:5a:07:cb:71:8f:d0:74:
97:34:cd:a1:b9:44:14:bf:46:e1:a4:43:a4:48:75:
37:19:f6:91:99:0c:68:e6:61:d6:2f:da:bd:f5:15:
31:26:df:ed:38:97:af:3c:ae:7e:b7:14:8c:1f:7a:
7c:11:d5:63:47:66:36:82:d9:2e:b1:53:cc:80:13:
15:66:ba:7f:bf:a1:c2:e8:a6:df:79:7b:76:f2:88:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BD:A9:41:28:FD:33:12:19:B3:40:61:64:30:C3:D6:B3:93:1D:B1
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aaece7b3-a483-4084-a731-1f122ac66077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.254.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1a:f9:0c:80:00:86:30:bc:68:15:32:2e:ca:a0:aa:9e:71:83:
30:65:50:e2:c0:4c:1e:de:28:a8:c8:b3:4c:30:63:cb:36:59:
91:f3:b7:5e:1a:5b:cc:c3:4f:92:da:0c:67:4e:64:52:da:5a:
0a:4a:be:87:86:e5:56:dc:1e:a7:5c:79:a3:f2:cc:75:74:94:
f7:b0:75:82:99:72:11:63:ff:ff:19:fd:0c:fb:ae:61:80:8b:
77:fa:fc:9b:87:af:ba:d2:aa:88:fd:a9:b9:7c:74:e1:61:70:
91:6e:0f:9a:e1:ce:99:c1:27:37:b1:84:69:80:01:e8:aa:d0:
ff:7b:66:57:e5:eb:b5:bb:09:aa:eb:62:99:a3:11:1b:49:9e:
51:11:a2:2f:ed:52:cb:c1:f6:13:37:ca:ab:db:5c:ba:08:28:
e3:96:90:fe:30:1e:8e:ef:2c:11:99:60:ad:5b:62:c3:1f:ca:
c3:d7:2a:4c:81:79:36:4d:9b:48:9a:9a:d7:86:14:5a:f7:93:
de:b7:38:23:1f:f2:73:92:53:0e:c6:ad:14:0f:d8:d4:cf:84:
08:c8:c9:79:35:cd:ba:c6:a6:f6:6d:ad:78:59:9b:fa:cb:77:
45:68:7b:81:36:6f:31:ff:5f:4e:ef:75:6c:ca:55:61:03:7f:
2e:56:07:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:04 2025 by rpki-client