Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d74d290-d12e-4f67-a0ed-f2ad490fdd17.roa
File: 1d74d290-d12e-4f67-a0ed-f2ad490fdd17.roa (raw, json)
Hash identifier: dyJp7JlVgVK+O4+EzNDYPj1sY0dLTqmbRfRS477JsOs=
Subject key identifier: 4F:FE:94:F5:67:80:66:1F:78:D9:07:EE:6F:68:29:69:55:DF:8F:5D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55BDC43E133B8BBEA0BF6A6755A8FD336B69CEA3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d74d290-d12e-4f67-a0ed-f2ad490fdd17.roa
Signing time: Sun 12 Jan 2025 00:00:00 +0000
ROA not before: Sun 12 Jan 2025 00:00:00 +0000
ROA not after: Sun 16 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.25.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:bd:c4:3e:13:3b:8b:be:a0:bf:6a:67:55:a8:fd:33:6b:69:ce:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 12 00:00:00 2025 GMT
Not After : Feb 16 23:59:59 2025 GMT
Subject: serialNumber=682bf0a3341448c9b7bc693f2feb6bbb1b36cacf6c51b2cca5565a43aab0509b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f1:9f:ad:a8:48:75:04:68:06:e7:08:77:5d:
bc:8b:9b:7d:9a:25:f6:bc:d7:86:62:8b:12:5a:00:
df:c8:a1:80:f1:b7:08:87:d8:f9:a4:0a:bd:fb:dd:
12:45:c7:2e:36:18:37:63:e2:76:81:0b:3c:78:2c:
7c:27:29:7f:74:d6:ce:e2:bf:15:75:a9:f8:05:5b:
c0:25:56:b7:8f:12:7f:ec:b1:04:b1:c6:49:fc:71:
cd:47:db:da:ea:d2:28:89:25:5f:39:b9:32:8d:2d:
2f:36:cb:95:aa:18:52:e3:eb:3e:e9:a7:b4:1d:0c:
56:33:e3:78:f6:6f:db:c2:ed:76:33:71:39:1d:2c:
e4:6f:32:06:f4:48:b5:a7:7e:f6:0a:61:1b:38:b1:
6f:ab:f3:70:d3:b6:c4:b6:ff:fd:52:4a:53:2e:be:
74:2d:e1:fa:57:63:24:b6:0b:21:5e:89:6d:ba:e8:
6e:9b:b2:d4:9a:0e:c2:89:8f:7a:df:f9:fb:ae:69:
ce:46:62:94:14:59:dc:98:73:f0:37:b9:20:dd:45:
7a:b1:fb:0f:27:43:55:ee:f1:47:31:af:dc:b9:b9:
42:6c:59:ff:0a:7a:22:2d:7a:6c:d7:70:e9:67:e0:
7b:ae:48:2c:e3:9a:f4:aa:ba:3b:a5:ad:d3:00:88:
38:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FE:94:F5:67:80:66:1F:78:D9:07:EE:6F:68:29:69:55:DF:8F:5D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d74d290-d12e-4f67-a0ed-f2ad490fdd17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.69.0/24
Signature Algorithm: sha256WithRSAEncryption
97:12:53:bd:91:27:43:f9:9c:dc:66:3b:46:3c:b7:b1:20:15:
74:99:24:25:02:3b:c9:f8:16:b4:3b:c3:08:69:6a:c0:91:be:
44:9d:c7:2c:30:39:ff:0f:3e:ca:06:8c:29:9b:61:30:d1:83:
33:e0:dc:aa:74:a1:c6:70:87:41:30:43:bc:37:93:8a:9d:78:
8c:39:21:63:d1:0f:d5:d5:18:e2:85:4d:85:f6:97:44:b8:35:
98:28:1d:51:ac:1d:94:6b:42:1f:a0:e1:de:4d:91:2e:c4:23:
e3:3c:2b:e2:5d:d2:e5:4e:2f:81:bb:91:37:73:fd:07:06:28:
e0:d3:64:2b:22:c8:9d:a2:33:22:6c:8d:af:34:11:ab:99:33:
18:ca:4f:bf:73:7a:de:86:58:2f:05:bd:f2:d9:78:ed:6a:f7:
f8:59:14:e2:5f:f2:69:a5:6d:26:75:a1:39:ef:fe:6c:22:75:
b9:f5:8b:67:ce:6f:20:a8:77:cf:82:4f:6f:10:11:b3:af:9b:
a7:d5:e9:20:9c:34:9a:0b:df:29:72:9a:f8:c0:e4:25:4d:b6:
93:22:c0:7f:70:a0:95:a1:64:49:58:04:9b:c5:e6:b4:63:4d:
e8:d4:93:64:52:95:bb:50:bf:3d:6a:cd:ce:28:f6:2c:c7:e2:
8e:e6:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:54:43 2025 by rpki-client