Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9e52929-a362-4231-b6b6-60c3c854af38.roa
File: e9e52929-a362-4231-b6b6-60c3c854af38.roa (raw, json)
Hash identifier: q1aCzCZY2smawEs9RNPLlq7PogddWZSIiJUnf0R1ujo=
Subject key identifier: C7:3D:04:F3:04:43:5D:D0:62:D3:64:14:B5:C0:5F:68:2A:F7:8C:31
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 086E4A54A5701CB82E61E836AD9CF6B2AE8A8AE5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9e52929-a362-4231-b6b6-60c3c854af38.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.56.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:6e:4a:54:a5:70:1c:b8:2e:61:e8:36:ad:9c:f6:b2:ae:8a:8a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:a0:d8:fe:2f:da:65:63:9a:3b:14:93:7a:
5b:69:a0:ef:97:02:e3:23:0b:c6:bc:af:20:80:3b:
00:1c:d3:0a:29:37:20:97:c3:46:ea:2c:d5:5a:00:
b5:44:f7:6e:f3:ee:86:6d:23:99:2e:f7:76:0d:0d:
04:01:2f:65:71:71:34:b6:2b:d9:2f:2e:d2:87:99:
47:ec:ed:77:01:de:92:5b:95:d2:5a:93:fd:91:dd:
0b:75:2f:d1:2e:79:45:9a:b7:9c:ae:98:25:6a:56:
30:f4:47:88:d0:6f:e5:05:ba:b0:f8:2b:5e:55:bb:
12:1e:55:38:6c:37:21:98:da:23:a4:6a:51:5f:8c:
9e:cc:4e:d6:e7:03:66:af:22:e5:b9:b1:60:5c:da:
bd:dc:8c:72:3a:ad:01:5f:14:2e:99:9e:a4:29:c6:
ef:0d:19:8f:a8:62:74:be:3f:58:5f:89:ef:b9:f2:
fd:4b:58:eb:51:53:1b:f4:f7:46:f6:48:4a:0a:8f:
de:66:37:a3:fd:d1:94:92:db:28:ad:f0:fb:f1:72:
cc:60:f4:50:81:cc:9a:95:55:7e:c4:f2:42:32:3a:
fc:c8:e5:86:f5:48:16:82:14:a0:f5:35:15:cc:e9:
59:a3:5a:e9:f0:5d:34:f1:c5:66:a8:37:8c:f1:6e:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3D:04:F3:04:43:5D:D0:62:D3:64:14:B5:C0:5F:68:2A:F7:8C:31
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9e52929-a362-4231-b6b6-60c3c854af38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.56.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:d8:38:28:59:fa:b6:b5:e6:01:aa:84:13:48:63:67:e8:8e:
13:03:f9:18:93:42:42:1b:bf:0d:2e:a7:f9:77:b0:16:21:99:
6d:19:08:1c:74:a0:88:90:56:61:f3:09:74:ab:6a:66:3c:35:
75:ea:6b:b3:2b:74:64:60:bc:ce:ea:18:12:6f:d1:8f:4f:60:
1f:3d:f9:74:a2:f3:26:50:28:b7:d7:95:8e:0e:a1:46:31:88:
53:99:74:3d:29:45:bd:bf:37:07:96:5c:33:d1:9b:c6:24:70:
1f:96:59:02:3b:ac:19:dd:4d:a9:97:04:6d:17:ff:2a:c7:9e:
20:3d:00:c5:0e:6f:ad:8d:e8:56:f2:e4:23:98:df:78:3f:e0:
ce:aa:21:4a:48:c7:7b:aa:a7:4c:5f:2e:ee:fe:d6:01:54:9b:
6a:b2:2e:9a:c4:c0:27:46:0e:e6:26:1f:0f:18:6a:81:fe:6b:
15:66:0d:d0:ff:9f:30:21:a6:ed:e1:5c:b9:e4:f8:ed:6b:35:
38:f7:29:e5:3a:c7:f4:55:a3:0b:73:e7:d3:1c:62:33:7a:57:
70:a2:5c:06:b6:b2:2b:a9:9b:7b:04:09:48:34:9e:02:e1:5d:
ea:67:95:c9:96:f6:29:c4:a3:76:54:be:db:f6:1d:0e:2c:c9:
17:a0:ce:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:15 2025 by rpki-client