Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/850bf8ef-2384-4f9d-a8c3-fb7deb82891f.roa
File: 850bf8ef-2384-4f9d-a8c3-fb7deb82891f.roa (raw, json)
Hash identifier: M6o03iOY7se9g9rPcY8VDzTWjRISdLKMpuI99iyvmds=
Subject key identifier: FF:86:9E:64:60:DA:5D:B4:0A:B0:2A:2F:06:F7:C0:B1:ED:1F:EC:1D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 046BD34B398B209DED3CF397426EBB0BC7016E23
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/850bf8ef-2384-4f9d-a8c3-fb7deb82891f.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.25.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6b:d3:4b:39:8b:20:9d:ed:3c:f3:97:42:6e:bb:0b:c7:01:6e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=33d2fc4e7523b6eb7494f7a80286f2e8b819e6b3dc81bfc43213855a4d41f77b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:f8:e8:2f:ee:f6:72:fd:2b:e7:77:d1:3f:
79:8d:24:bd:48:0a:9d:b1:f2:80:9c:9a:19:51:6a:
7c:9d:f3:67:cb:54:14:e3:95:fb:c7:01:f4:64:c9:
92:dd:a6:6a:ae:3e:de:94:7d:a5:a5:8f:4e:6c:49:
ce:b2:f9:7c:e7:bb:a9:36:1e:8e:a5:52:7a:da:eb:
3e:4f:9a:f2:0a:67:c8:2b:b7:dc:6a:ba:ec:09:7c:
e0:d0:4a:04:fd:44:fb:ac:26:39:09:9a:a3:60:85:
3b:d9:25:0a:8d:8e:21:f6:48:ac:98:ed:0a:19:1c:
dc:a0:7d:e0:f2:08:d1:b7:94:c3:f5:fc:b1:cc:b4:
7c:02:e8:00:56:ec:bb:68:dd:0b:7d:22:c0:cf:bd:
b5:bc:6f:b9:78:b2:74:7e:9a:3a:ce:e8:fa:88:9b:
2d:03:81:a1:79:5f:a5:b4:8c:bb:6f:a9:62:e5:03:
55:38:ff:50:3f:5f:94:01:e1:7c:d6:1c:94:da:79:
dd:5c:10:58:d7:45:0e:52:69:bc:08:db:ba:0d:0d:
89:bc:5c:4d:c0:02:17:99:f0:88:fc:90:e3:59:85:
1e:5a:7a:4f:d2:33:7d:0d:6c:b1:47:01:b3:7c:7b:
d1:55:af:c1:3d:22:84:03:2f:cd:10:95:e7:7e:a1:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:86:9E:64:60:DA:5D:B4:0A:B0:2A:2F:06:F7:C0:B1:ED:1F:EC:1D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/850bf8ef-2384-4f9d-a8c3-fb7deb82891f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.69.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ef:d8:41:56:df:5b:af:38:48:32:7c:4d:88:6c:38:94:d9:
58:44:ec:c7:25:9e:6a:a9:d7:a6:af:e0:80:3c:13:7b:7e:bf:
89:79:d9:44:2e:b0:12:6f:68:81:42:2f:ea:19:8e:fc:fc:91:
4d:4c:e4:1a:cc:57:60:c9:a5:bb:fb:3c:8c:86:f5:e9:50:84:
7f:24:4c:04:ae:71:d6:5b:b5:b5:00:9d:01:55:23:a8:28:65:
1d:81:07:ca:05:b0:a3:c1:ac:e0:a0:47:73:23:9d:8b:48:e6:
87:25:b9:8e:33:86:36:f3:fc:b4:b8:3f:4c:ce:21:fa:52:33:
ea:50:fe:a7:4b:f7:e7:7c:92:00:6a:e0:51:10:16:19:a6:2f:
86:95:00:48:33:bf:41:68:c5:13:e7:23:42:b5:23:70:e6:5b:
20:de:fd:e6:fd:7e:b2:8b:08:5f:57:87:9d:b7:94:d2:a8:0f:
c1:67:e7:d3:00:a4:62:4e:df:ab:9f:d5:a8:41:20:ea:9c:6a:
c4:71:3c:a4:ce:f5:98:51:8a:a3:f1:74:7e:c7:08:fa:6a:58:
34:3a:14:7b:f3:88:d6:19:db:d4:08:a5:3b:b0:ec:be:ff:25:
41:15:3e:53:51:2f:dc:b4:04:e0:10:92:f2:cc:6e:c6:54:5e:
31:42:96:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:07:43 2025 by rpki-client