Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d1e1903b-7dee-4371-b2e4-ec3e14f7ac71.roa
File: d1e1903b-7dee-4371-b2e4-ec3e14f7ac71.roa (raw, json)
Hash identifier: WBv62edj7RKrJA6XivQDr82ColFQ3Qs8/p+YNgSdpSs=
Subject key identifier: 56:DF:2A:51:C8:AE:0F:93:08:B3:4A:DE:E2:B9:14:8A:69:33:BB:55
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 639BBA1109AEC4CA9BA0115E31D604CB8AA298F6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d1e1903b-7dee-4371-b2e4-ec3e14f7ac71.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.172.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:9b:ba:11:09:ae:c4:ca:9b:a0:11:5e:31:d6:04:cb:8a:a2:98:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:dd:c0:06:18:6c:fc:76:4b:17:be:9e:6a:
6c:66:b2:78:8c:ea:53:d5:ac:0c:7a:9a:a8:cd:a2:
ee:49:7b:1d:58:f7:be:0e:c7:6e:56:ba:1e:8a:db:
6d:86:33:5c:c7:4a:5b:8b:b3:00:f7:3f:dd:9f:bc:
42:af:00:5b:14:12:84:3d:84:6c:88:1d:4b:9e:a6:
44:2d:e5:f8:0a:75:e1:3f:1e:38:fe:57:4d:44:b1:
fe:00:ae:d8:92:fe:5b:f6:3c:0b:98:21:fc:41:69:
dd:74:25:81:09:3a:82:6d:e5:d0:21:cb:2c:cd:5d:
d2:24:f2:6e:4e:f7:2a:6d:8d:21:cb:6a:f9:d7:45:
35:ee:4a:a9:5c:25:6d:5f:0e:7c:ce:51:e1:bc:7e:
0f:4c:f2:06:c1:fd:90:04:75:c8:ce:64:cd:d4:eb:
69:03:40:60:cf:d6:00:51:7e:1a:72:9d:d7:7f:bc:
28:d5:b8:6c:5c:c4:5e:99:47:88:5a:69:06:54:37:
98:69:5a:ec:d0:84:c2:66:05:ac:3f:03:e0:c8:31:
56:96:ba:f9:bc:32:f1:8e:47:3e:90:ba:62:03:24:
1d:0c:dc:f4:ca:52:e5:66:65:05:b7:cf:64:96:19:
d2:e9:87:90:f7:6f:34:e7:19:20:9b:07:49:20:a1:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DF:2A:51:C8:AE:0F:93:08:B3:4A:DE:E2:B9:14:8A:69:33:BB:55
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d1e1903b-7dee-4371-b2e4-ec3e14f7ac71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.172.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:08:39:87:58:24:f9:ed:51:be:f1:56:8a:44:95:fd:b1:97:
89:31:af:c5:fd:05:0e:5c:69:ac:d2:d5:ea:4f:9b:ff:b5:f8:
03:d1:b1:6a:96:3a:29:23:d8:7a:2b:8c:d7:69:3d:95:d2:9a:
6f:38:87:89:c7:33:9c:85:73:3d:99:1c:d4:1f:b6:b0:ad:77:
36:13:5e:8c:f0:4b:72:94:d8:cd:83:0e:b8:83:ce:21:e0:62:
cf:8a:6f:92:43:cd:ac:37:1f:f9:ab:01:98:f4:89:cb:2a:1b:
7e:b3:2b:04:6b:61:d7:fe:bf:2e:d1:4e:8f:9a:fa:0f:09:5d:
da:45:71:e3:2e:c1:7b:09:15:f7:43:14:11:56:4a:2a:24:cf:
91:fe:e7:3b:6a:60:aa:06:07:d5:d2:2c:2b:b5:08:f9:ff:81:
cf:77:b1:5f:fe:2b:cd:cb:14:22:9e:99:0a:2d:e1:f9:e1:6e:
cf:e5:70:b6:06:3a:f5:e6:b9:07:99:49:83:bb:c2:67:6c:96:
e4:07:f3:c1:4b:60:d4:28:ba:75:7c:60:e4:f4:7d:ea:39:e9:
d4:56:6a:5d:1a:8c:ed:33:ce:2d:30:cb:f3:38:84:1f:70:31:
df:e2:ec:d6:0e:8c:bf:4e:9c:97:4f:e6:8a:b1:d6:2a:28:8d:
6a:44:35:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:49:23 2025 by rpki-client