Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8175b0b-6ddc-4c01-b903-2c28c1424ca2.roa
File: d8175b0b-6ddc-4c01-b903-2c28c1424ca2.roa (raw, json)
Hash identifier: l2Giw+Jbn+kk5paFWOJJqK6pVZHo3tgCTFVAzX0kKjE=
Subject key identifier: ED:55:2D:4A:70:E0:D7:0D:CD:87:1F:C2:1B:46:11:FB:85:E9:1E:37
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5F08A1973748055140C366839BAD8D6E0C4CE76F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8175b0b-6ddc-4c01-b903-2c28c1424ca2.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 35.47.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:08:a1:97:37:48:05:51:40:c3:66:83:9b:ad:8d:6e:0c:4c:e7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=6f584d081011f5802c1d94e5c13d8bbc34c8c204136b4367ea98e694e02a9f08, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:e8:e6:c2:54:55:79:80:18:5e:1b:ae:cc:
85:90:a4:7c:f0:25:6c:21:58:97:ff:97:1d:28:c3:
7d:61:4a:fe:c0:8f:02:f7:a8:20:1e:5d:72:e6:58:
bf:ed:eb:a1:27:07:e4:86:f7:e5:77:09:45:a2:d7:
d8:6c:bf:b8:1c:b2:83:69:49:de:ed:e0:b7:a9:e4:
4a:05:84:a4:df:88:08:34:83:08:12:79:1a:f6:13:
e9:d4:14:35:fd:e4:7c:63:51:d9:66:df:d0:c6:50:
1e:5e:de:9a:c1:8a:f1:d4:83:0d:13:be:23:a7:fc:
d9:a2:00:47:45:1b:d5:74:b9:3d:87:f6:75:7c:b1:
34:f1:24:5d:2d:b8:26:be:9f:70:ad:ff:be:bf:41:
bf:48:bb:b0:68:57:a7:75:3e:0c:bc:5c:ad:87:0b:
cb:ff:8a:49:f0:72:08:5b:96:46:08:23:42:30:51:
7a:a9:fb:14:2b:28:e3:07:e7:34:fa:c4:ae:76:b4:
0f:53:ad:36:0f:5e:ee:dc:fa:bf:7f:97:69:31:26:
f5:93:34:08:a3:c4:cb:29:91:10:bb:ce:52:44:d5:
4f:f0:d6:09:c5:ca:92:97:e1:03:c6:da:e4:fa:22:
a5:4f:9c:f9:db:ad:d3:36:5b:0e:87:7a:3b:97:d0:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:55:2D:4A:70:E0:D7:0D:CD:87:1F:C2:1B:46:11:FB:85:E9:1E:37
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8175b0b-6ddc-4c01-b903-2c28c1424ca2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.47.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:3f:46:3a:8c:0f:5b:0a:39:6a:6b:72:03:00:63:9c:85:fb:
02:56:32:64:b9:ce:0e:d9:c5:d0:25:a9:c8:78:84:9b:da:d1:
3a:97:f3:69:0d:6d:22:d5:54:3c:6b:b5:09:de:10:f3:c4:bc:
05:24:e0:c5:db:05:4c:d0:6e:27:4a:45:29:11:81:50:b6:98:
19:76:9a:7d:8f:b5:79:38:6d:31:8e:30:1a:0c:d0:53:ba:e9:
ba:3a:38:b2:62:77:23:a0:9f:6f:6f:ab:a8:62:c6:19:99:6a:
83:39:0d:62:b8:bb:c8:5d:6f:35:e0:c6:08:08:96:bc:42:66:
82:eb:d9:b3:9e:ab:f7:03:4d:f0:66:f3:b8:ae:02:bb:23:15:
d9:71:e6:85:81:b3:2d:e5:43:2c:03:2c:9e:43:22:c8:ce:8d:
3f:94:08:1d:f5:0f:13:ac:c8:27:4c:7c:f3:30:8c:41:29:a7:
78:fb:9b:b5:38:2c:3c:09:af:cf:25:1a:66:15:32:3a:03:e2:
fb:b6:f4:5c:0d:4a:b0:a3:3e:09:9f:8e:ab:a0:7b:79:9f:ff:
67:a1:76:c6:8c:aa:5e:bc:be:7a:ac:9a:73:61:4e:dc:61:c5:
bd:6b:03:9b:2e:6a:06:d7:25:a4:e2:f5:5d:a7:2d:fb:8e:20:
46:8e:ab:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:38:55 2025 by rpki-client