Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb9714ed-3115-4edd-b3a3-5a8336cb153a.roa
File: cb9714ed-3115-4edd-b3a3-5a8336cb153a.roa (raw, json)
Hash identifier: roIumVOnMnTM7rAbgeLiLm+w/J/xM6bNDK+xLLBlCCU=
Subject key identifier: 96:29:B4:B2:29:40:FA:0C:C9:EE:5C:72:D3:16:40:94:8B:C4:C0:0E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6EC02ED3CEC22326A5F0AB58ED3F75FF33915882
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb9714ed-3115-4edd-b3a3-5a8336cb153a.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.221.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c0:2e:d3:ce:c2:23:26:a5:f0:ab:58:ed:3f:75:ff:33:91:58:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:48:2d:8f:53:e8:51:38:a9:aa:b8:3d:ef:
c7:6f:c2:0d:9a:b4:eb:c5:30:12:c3:f7:48:bd:e6:
98:22:84:fd:0c:14:de:05:d9:a0:16:66:2e:d0:b5:
41:0d:ac:58:c5:60:5e:e3:54:d3:dc:20:8a:a2:8c:
71:64:f1:ca:17:55:b8:c2:cf:6f:05:f9:00:ad:7c:
62:72:09:3e:70:15:03:96:c2:3d:c0:d2:39:44:f0:
48:72:1a:6e:09:e8:f3:01:00:dc:64:b0:7f:c0:8e:
2e:43:21:3d:9a:5c:da:5a:7c:d1:18:8b:00:c0:7d:
9e:9e:3c:c8:59:e7:8b:ea:8c:77:29:17:1a:90:bd:
48:7e:39:02:90:a2:d9:03:db:a8:93:33:2b:c9:dd:
0f:ac:fd:00:c0:49:fb:0e:f9:2c:dd:4e:33:32:82:
ae:48:6d:43:d8:7d:53:19:c8:aa:79:06:cf:be:27:
db:b5:b8:2a:cc:55:93:7e:0d:a3:bf:91:cf:11:79:
08:08:1b:20:4f:d5:23:d6:ba:57:7a:6f:44:87:9c:
f5:68:e2:bd:de:31:41:c5:83:8f:60:2d:29:84:dd:
5d:8b:ff:02:88:4c:54:c5:96:1b:23:04:43:be:f8:
de:27:b0:81:0d:a9:79:af:26:da:fa:3f:dd:07:e9:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:29:B4:B2:29:40:FA:0C:C9:EE:5C:72:D3:16:40:94:8B:C4:C0:0E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb9714ed-3115-4edd-b3a3-5a8336cb153a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.221.49.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:67:a7:41:61:32:74:6b:a0:89:db:9f:29:55:ab:cb:4f:91:
5d:e6:e1:ed:8a:f2:b9:fa:46:8f:6d:3f:3b:cb:89:15:b9:38:
24:13:fa:00:32:fd:10:77:46:3f:af:3e:63:aa:17:54:81:6d:
ef:6a:bf:67:34:56:4f:df:ae:d4:0b:0a:8c:e1:c5:59:89:a7:
6e:74:e5:0a:68:c0:b0:df:1a:9a:f0:2b:79:dd:44:ac:2a:53:
9d:bc:22:4f:a2:4a:ed:8d:b0:d0:9f:16:83:56:52:20:85:03:
34:9c:83:3f:c9:73:e4:08:b5:99:ae:e1:1f:22:3b:83:a3:d3:
c6:bc:a0:93:7b:09:00:c9:40:9f:45:16:ef:ff:18:b2:fa:4c:
17:a7:08:39:0a:de:9f:86:db:b2:4f:e9:cd:9b:02:6f:3a:59:
1c:81:84:f6:42:5b:39:35:95:7e:26:05:4c:e1:ed:71:de:77:
a3:f0:fc:7b:d9:04:ef:fe:72:29:45:78:de:7b:15:58:e4:87:
62:29:14:6e:ce:ae:45:20:76:9c:2e:c5:94:30:73:bc:52:ea:
9c:b1:85:64:47:14:5d:f5:21:32:12:05:33:15:27:e1:b3:d9:
f5:6e:b9:b8:d2:8a:d6:dc:de:cd:10:42:2b:78:6a:57:f1:73:
0b:c1:24:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:25 2025 by rpki-client