Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc07665d-8197-4a1b-8ce6-6bddcc9903a4.roa
File: fc07665d-8197-4a1b-8ce6-6bddcc9903a4.roa (raw, json)
Hash identifier: 2bLyQ2swjoEBCUiMawUT8jQm+/SCrMtJvgLbyUFZvpU=
Subject key identifier: 51:89:E3:76:BD:90:F8:14:62:3B:87:6D:F5:98:C7:44:66:89:50:55
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 592880B1C80F8739D04FE27D766330C6BA181296
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc07665d-8197-4a1b-8ce6-6bddcc9903a4.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.25.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:28:80:b1:c8:0f:87:39:d0:4f:e2:7d:76:63:30:c6:ba:18:12:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=bb6464c64afc1eefe42bb27fbd21588638f35a8ab62cd74df757d0396cae1322, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:40:8c:cf:db:ee:6c:f8:8e:51:e4:21:0c:
46:39:65:53:31:8a:f5:b7:41:4e:8f:40:53:f8:73:
08:9e:47:13:11:83:98:9a:4d:dc:d1:7c:0b:34:40:
3b:20:f0:de:21:bc:6c:e7:d5:3e:5f:6b:c0:f9:4a:
ea:db:b4:45:e7:50:ad:61:34:f7:a1:0b:d5:86:9b:
c6:fb:81:89:96:07:1c:89:f4:2d:7d:56:47:5d:8d:
81:d8:10:b7:5f:96:54:94:d2:af:7f:fe:dc:44:37:
e4:0a:7c:99:9d:43:8a:e8:c1:2e:1f:4b:79:7d:0c:
47:65:92:b9:f6:ec:dd:38:b5:8a:a5:84:1f:1f:17:
4a:4d:aa:ac:68:fd:15:a6:d6:9f:3a:78:a8:46:b4:
4d:39:87:bc:c3:2f:0f:51:87:ed:01:4a:26:57:09:
a6:d5:a4:15:4a:0e:1c:1e:38:67:4b:59:04:7f:14:
a3:04:4b:16:f3:b6:c0:12:34:51:74:4f:97:e8:29:
e0:6c:0a:3c:5f:08:65:67:24:42:b0:5e:3d:21:00:
bf:cf:76:4e:6c:09:9a:3e:52:23:af:98:11:c0:5f:
76:d7:5e:53:13:75:8c:cc:52:1e:f4:22:fb:d8:02:
fa:f6:13:fd:c7:fc:c0:21:9e:0a:45:7a:a3:37:d3:
62:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:89:E3:76:BD:90:F8:14:62:3B:87:6D:F5:98:C7:44:66:89:50:55
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc07665d-8197-4a1b-8ce6-6bddcc9903a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.69.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:1f:b4:b7:28:5c:c2:61:c5:46:2d:ec:c6:fe:05:43:64:f2:
45:e5:cf:06:af:b7:2c:a1:1f:d4:17:62:c5:c4:e0:60:b4:d6:
15:e2:8b:72:51:43:25:59:a1:38:18:c0:48:82:da:fc:b8:8f:
64:62:ad:cc:55:81:e7:df:d9:c9:7d:c8:17:87:7d:0b:2f:94:
4c:d4:b2:4f:7d:4a:7e:03:6b:4d:73:75:a1:cd:24:25:50:15:
db:01:4e:23:ac:51:85:4d:29:80:28:b8:33:1c:43:2e:59:b6:
56:97:12:92:19:9c:42:3e:a9:c8:1c:11:c7:4d:e4:cc:05:08:
b4:a3:c7:86:56:57:2c:79:10:92:67:e0:53:58:7d:4b:c2:a8:
51:8b:1c:1a:51:da:97:64:74:1d:b7:ee:8e:83:48:f8:5a:17:
29:53:30:4a:45:9d:7f:c0:a6:94:bd:58:00:4c:33:47:0b:9b:
59:55:16:c2:dd:67:73:3d:0d:a3:3f:c4:35:99:2e:a0:7d:b8:
ef:7c:67:bf:a5:71:9f:17:8a:53:37:5f:fe:c1:16:c6:31:dd:
e7:6d:5c:f9:a0:a1:67:ae:8e:42:d7:b9:49:c1:e2:56:58:fe:
f7:c1:30:c3:c8:d5:d8:3a:e8:83:25:bd:12:75:64:a7:e0:24:
39:26:f0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:44:02 2025 by rpki-client