Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7743d8fc-4d2e-496c-89b1-10ab6770df3b.roa
File: 7743d8fc-4d2e-496c-89b1-10ab6770df3b.roa (raw, json)
Hash identifier: ePDQzKIYedA73+DTAvu9O8gwLVDdcEKHhUYBfucTQLA=
Subject key identifier: C5:1C:AD:66:DE:73:C8:48:5A:B8:65:19:DD:65:F9:54:EA:E4:C3:A0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6DA578AEA38C82673E24EE949120F4F254400E65
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7743d8fc-4d2e-496c-89b1-10ab6770df3b.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.25.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a5:78:ae:a3:8c:82:67:3e:24:ee:94:91:20:f4:f2:54:40:0e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=284093cc1559700149fb67fc84bfdf4b2584cad4793f72f94e5417022fdbef4c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:fe:26:7f:8d:88:a4:a1:8e:8b:84:df:45:
2b:6d:e6:24:16:c4:15:00:51:be:3f:c9:a0:c4:be:
b9:94:02:93:d4:8e:6f:eb:f6:fa:31:72:d1:31:c8:
d1:85:d4:62:60:d1:77:5f:db:3e:4e:fd:ef:01:40:
89:02:7d:41:49:00:75:95:66:42:5e:3d:17:fc:b4:
c4:64:76:bd:b2:db:56:4d:1e:e7:b4:18:77:1f:6f:
02:26:b1:26:cf:87:2a:e7:3a:99:2b:89:c7:3c:9d:
0e:51:30:0c:1e:ca:4b:56:8f:66:0f:cc:4d:ee:61:
f1:a2:96:62:a8:e1:e5:0c:45:80:22:b3:11:20:65:
fd:90:97:f2:b8:70:37:a2:e5:60:6d:a9:bc:d6:d0:
41:2e:a5:61:7c:e0:14:5b:22:9f:6a:a9:6b:76:4b:
1a:01:90:52:d4:9f:bc:39:b4:b2:a1:ad:7b:0f:58:
bc:33:e3:30:ed:98:5b:72:56:98:56:33:4d:6c:2c:
5d:65:00:b0:a6:67:79:2c:b8:c0:88:98:a4:85:d1:
74:86:d5:a3:e6:3c:0e:50:86:1e:8c:9b:60:1b:34:
7a:6c:cf:f4:b8:f0:7f:7a:10:73:d9:df:11:2a:54:
91:a2:0b:e2:c6:52:af:8a:02:c3:d5:68:fc:b5:d7:
1e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1C:AD:66:DE:73:C8:48:5A:B8:65:19:DD:65:F9:54:EA:E4:C3:A0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7743d8fc-4d2e-496c-89b1-10ab6770df3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.70.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ad:0d:55:c2:fb:49:1d:8f:e2:cc:08:02:e5:12:df:43:39:
d3:82:82:b3:3d:f3:de:84:b8:5c:4f:ed:fe:a1:59:28:cf:96:
4e:7e:a7:ae:e1:0e:b9:0e:1a:71:fa:81:12:3a:2e:10:bf:89:
27:1c:f6:34:21:6c:5b:38:18:d9:a9:34:75:04:ac:7c:c5:0d:
e4:87:13:df:48:af:6c:0c:f9:29:ab:8f:5c:13:1a:23:2f:b9:
c2:2e:33:6a:11:44:0b:51:df:31:32:9c:90:87:ed:2e:c4:04:
f8:91:a8:47:ea:be:a9:5d:ee:8a:d7:ef:f0:ed:7b:1a:49:62:
7a:f2:c0:91:2c:fb:20:48:17:8d:5b:a6:a4:f7:4a:4e:57:5e:
aa:6f:e6:e8:3f:b1:45:95:25:e0:7f:d3:1a:32:03:9c:79:22:
20:36:6f:fc:f9:8d:fe:ba:84:f0:0e:1d:86:44:10:35:5b:80:
8d:b6:08:c6:43:0e:a3:fe:74:65:81:98:0a:61:44:e5:48:41:
19:9b:c3:5f:fd:c6:96:e6:0d:49:39:67:5b:82:1d:31:40:be:
68:43:67:71:70:e3:57:c4:39:87:35:04:8c:38:ba:92:62:5f:
29:6d:3e:43:76:ab:bf:8e:05:b1:8a:ff:72:9e:a6:ce:a6:51:
43:37:3d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:07:42 2025 by rpki-client