Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6df70a3-51f1-4629-9a3e-919dbc70f091.roa
File: c6df70a3-51f1-4629-9a3e-919dbc70f091.roa (raw, json)
Hash identifier: JCow1grbrqsoLAByN1Jei6WA2Dzi/viD6oAKdEX3/fQ=
Subject key identifier: 23:9C:8E:0A:68:2D:3C:29:73:73:6F:90:13:98:44:97:2C:5F:D9:4F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 02E723F137F71F6F7BD198435AB49A9378DA3C35
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6df70a3-51f1-4629-9a3e-919dbc70f091.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.144.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e7:23:f1:37:f7:1f:6f:7b:d1:98:43:5a:b4:9a:93:78:da:3c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:34:d3:bc:86:01:64:5d:4a:ce:12:eb:80:
d1:51:0f:ae:57:1e:75:3d:82:8d:60:86:88:b9:a7:
31:15:3a:13:00:17:35:1f:a1:93:66:83:56:85:2b:
c8:6c:5e:ef:a4:32:52:bd:22:47:c7:56:50:c6:d0:
e0:39:58:8f:c4:e5:b5:c3:37:bd:9e:b1:ef:81:ff:
c0:8e:27:56:ac:f3:6c:d5:6d:5b:31:c7:65:be:e2:
b9:50:0a:3f:30:8e:1c:53:ad:16:ea:8f:57:d2:4a:
08:7e:26:a3:dc:84:23:40:a5:16:49:53:71:15:2a:
d8:59:74:19:a7:58:0b:37:ee:2b:25:44:48:43:b8:
3b:d6:5c:0c:b9:f8:64:7b:16:19:c1:cb:8a:2f:e9:
06:72:1d:bc:cf:81:c4:c0:56:85:cb:76:40:42:e8:
4b:67:45:ad:a2:d2:81:5f:9d:eb:61:a6:78:5d:61:
23:26:ab:56:75:e2:67:09:33:96:2c:1b:87:d1:86:
8a:00:3a:0b:be:bc:13:1a:8a:47:cf:30:5f:da:58:
5e:0e:84:4a:97:65:89:72:9b:cc:4b:7e:5e:a8:78:
1d:60:c7:82:ec:5a:21:1f:0a:e1:20:42:c6:37:1f:
bd:1f:43:0a:7e:52:23:97:89:e8:e7:5a:5b:b1:14:
41:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9C:8E:0A:68:2D:3C:29:73:73:6F:90:13:98:44:97:2C:5F:D9:4F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6df70a3-51f1-4629-9a3e-919dbc70f091.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.144.0.0/12
Signature Algorithm: sha256WithRSAEncryption
a6:5a:8d:e2:35:d2:16:4c:25:8c:8f:28:16:80:61:87:5a:2f:
0d:ed:e8:7c:c9:5f:86:a5:1f:21:35:31:96:35:70:4f:24:0d:
49:67:5f:1e:5b:2d:ea:71:a3:22:49:00:49:2d:6b:18:19:90:
aa:4d:f9:9a:22:a4:7d:95:fd:22:d1:1f:bf:a7:e8:44:a5:19:
53:f4:40:de:b8:2d:45:45:5b:cd:44:fd:ad:dd:8c:a8:50:9b:
d9:4d:e1:78:17:e3:97:9c:59:51:c3:31:18:6e:b2:35:a1:78:
21:cd:84:6a:da:84:f3:ee:9d:43:54:f7:8f:ec:a3:04:73:00:
44:6f:37:ee:8b:31:94:09:39:43:cc:f1:cf:a9:6c:bb:8e:c8:
d1:57:b4:bc:9a:2e:d2:fb:6e:97:31:7d:b4:12:54:95:c5:ee:
73:fc:72:30:6f:a3:08:65:26:a0:50:1d:19:99:e4:4c:f5:af:
77:8a:54:33:06:d3:de:2e:f3:fa:ce:da:9c:7e:de:7d:a7:da:
5a:93:48:64:54:48:9e:69:34:fe:35:80:cb:d7:07:e8:0a:27:
8e:04:91:04:29:48:ca:5e:f4:b7:52:31:e7:00:99:c4:9b:72:
b6:eb:78:4b:56:3d:54:c9:b3:d2:50:bd:73:d3:f5:b5:13:d8:
89:45:fc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:52 2025 by rpki-client