Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca48b82b-e983-4e4d-aa24-fb9d58241093.roa
File: ca48b82b-e983-4e4d-aa24-fb9d58241093.roa (raw, json)
Hash identifier: ki5pJRYJGpiHhsXi3OfeSiTS1Xyau95Fc0Fh1oiwRxQ=
Subject key identifier: 8E:1A:2C:EE:B2:FA:8D:A2:4E:F9:57:8B:50:89:95:1F:42:B7:D1:B5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3B3AC118899227015C576F97799EBF0D56AA45C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca48b82b-e983-4e4d-aa24-fb9d58241093.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 99.87.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:3a:c1:18:89:92:27:01:5c:57:6f:97:79:9e:bf:0d:56:aa:45:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=1b74092c655290dd0b2c769d0f35334eb21fa60d6ce49fd6f4159ddf5d3a81a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:f3:20:1b:64:28:60:b4:43:8f:63:bc:ec:
ae:f4:1d:ba:76:4b:08:14:51:56:9c:92:8d:8f:f5:
16:0c:19:eb:ea:6d:b6:16:dd:bd:ef:8b:45:37:a3:
19:1f:46:f4:6e:0d:34:1c:83:89:98:a0:09:87:69:
67:75:25:7e:9d:b3:e0:6b:a3:45:a4:42:10:a4:1d:
49:01:7e:0c:a7:42:9d:c9:77:b0:4e:f1:e7:13:2c:
99:e7:a8:33:c3:b2:52:cd:08:f5:9f:2d:f4:d7:4d:
3c:61:3e:54:d9:ca:3a:a4:23:e8:6b:5e:a0:6d:0d:
4c:a5:12:41:88:80:d1:fb:6b:54:b5:97:84:82:da:
ac:97:45:50:36:95:97:2d:23:22:82:14:94:e5:73:
4c:0f:16:f2:68:84:ff:a2:97:ee:84:9b:fc:31:29:
04:a9:f6:42:df:c6:31:1f:cb:f0:20:90:69:f9:2d:
bf:d9:39:b9:03:1f:c9:0f:ea:1e:82:8f:6f:fe:77:
1d:fa:21:17:f0:c9:c1:4c:f2:77:03:15:a2:31:ea:
ab:a8:32:49:7f:66:5f:04:21:1b:06:79:9c:0c:7c:
68:ff:fb:56:82:e3:81:0e:d5:d0:d3:49:de:b4:39:
3a:4c:e3:10:83:e8:a7:53:c9:9d:dd:1a:a4:a4:52:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1A:2C:EE:B2:FA:8D:A2:4E:F9:57:8B:50:89:95:1F:42:B7:D1:B5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca48b82b-e983-4e4d-aa24-fb9d58241093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.87.0.0/17
Signature Algorithm: sha256WithRSAEncryption
aa:69:39:43:41:b9:e4:16:aa:68:6b:05:fb:c6:07:fe:27:0a:
35:45:08:a0:73:06:15:89:26:2e:40:57:54:1d:e7:1d:d0:45:
05:a2:17:c6:ac:ae:d6:e4:eb:98:6e:48:ef:a2:8a:a4:90:74:
93:cf:19:bc:66:f7:e9:da:f7:13:3d:8e:48:86:47:d4:5c:50:
67:a5:e7:4e:5d:99:44:fb:d2:ec:1d:e0:d0:7f:ea:38:f6:43:
cb:e2:fe:12:13:4c:e8:df:01:78:14:9d:e7:ed:55:66:38:f5:
a5:a8:f1:28:11:b7:81:5b:21:5f:8a:fc:dc:15:be:75:82:fe:
5f:75:98:39:db:91:61:1a:4d:7e:d2:e4:5c:5b:63:62:2a:a9:
a4:e6:8c:4f:e9:ad:c9:0c:4f:0a:65:90:2d:d3:46:22:16:11:
02:62:db:a6:45:f0:c4:df:40:bc:4a:7f:1c:7f:e7:5c:43:fb:
49:e9:72:bb:f1:51:8d:e9:0c:a7:fe:ed:ca:a9:bd:61:bf:8a:
1d:04:dd:db:7c:b1:c1:f2:69:28:81:ea:62:a3:63:e3:06:10:
41:14:4b:56:7a:94:e7:6b:33:11:7f:52:30:16:a1:0c:e2:c4:
7e:d1:15:97:51:e3:45:b5:32:9f:61:7a:af:45:1d:a5:15:87:
5f:bf:9f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:30:02 2025 by rpki-client