Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c19fe94b-bc7e-4305-bcd1-928587943da0.roa
File: c19fe94b-bc7e-4305-bcd1-928587943da0.roa (raw, json)
Hash identifier: dsy4xY/c87rncOf+H7Cdg9Kisr0AvLwNIGT1d3IOQUU=
Subject key identifier: 46:63:9B:FB:04:F4:65:1F:78:5C:3B:60:3A:51:CB:74:36:42:B0:A2
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6EF415AEC9180CF69C02DFE6DA79A6074B11D80D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c19fe94b-bc7e-4305-bcd1-928587943da0.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.210.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f4:15:ae:c9:18:0c:f6:9c:02:df:e6:da:79:a6:07:4b:11:d8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: serialNumber=29b23b91494216fedff8158c3f8f05b70f5e221f9b16b9d64d70f089f2ddcae7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:70:94:5c:5b:fa:01:93:28:73:66:65:ab:4d:
80:4a:94:c0:7b:71:75:84:b4:64:63:2f:35:12:d8:
9d:08:52:19:28:61:99:d2:bf:3a:b2:79:59:00:00:
a0:0b:2d:57:f1:ab:ad:a4:19:39:25:39:e4:52:06:
1b:61:18:9a:6b:30:67:57:5c:3a:e9:71:22:c2:1a:
3c:30:5e:56:29:3e:45:79:93:a6:de:4a:64:54:0c:
80:da:01:c5:69:2c:ac:d1:8c:b5:4a:71:3d:88:bb:
7f:3d:e7:09:e4:6a:dc:fa:17:43:7b:bc:df:91:85:
75:78:fc:5c:86:46:a2:81:be:c4:cb:74:2a:e4:b8:
b8:6f:b7:a5:d3:04:12:ef:c6:44:15:77:66:26:07:
4b:c9:85:49:2c:1e:f1:46:19:42:2f:d3:9d:43:ce:
24:c9:e5:1a:76:61:55:f2:84:e0:d7:7a:3f:6b:e1:
a7:db:2b:2e:6b:7d:ed:75:90:e7:42:b0:5c:e8:e4:
d7:30:d9:9f:fc:f5:b0:3e:cf:b2:c5:99:c8:6e:1d:
50:77:e5:43:7c:f0:b3:0a:31:5d:e9:11:46:e0:1b:
9d:d0:45:fd:6b:81:0d:f9:c3:09:2a:a6:ce:34:8a:
8d:42:14:63:e7:30:ac:bb:b4:ea:07:15:34:d7:b5:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:63:9B:FB:04:F4:65:1F:78:5C:3B:60:3A:51:CB:74:36:42:B0:A2
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c19fe94b-bc7e-4305-bcd1-928587943da0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:82:d0:ae:5e:e6:07:63:8c:35:1a:42:60:46:8e:00:b3:ab:
eb:bd:65:d1:3c:09:23:7b:2d:6a:91:1f:b1:c6:83:ce:92:bd:
6a:93:82:28:67:16:3c:0c:cc:19:5c:ac:fc:36:76:2e:69:c0:
0d:a0:21:63:5a:99:35:8c:26:3e:81:ab:f2:38:0f:d4:57:69:
97:16:e3:49:b5:2c:6b:1c:a0:16:4b:b4:71:34:d3:17:05:b2:
93:0b:69:20:4d:82:34:05:28:6f:8b:cf:21:a6:b7:36:bd:43:
4b:19:cd:48:81:5b:01:37:ce:c5:63:ab:4c:f0:e2:95:20:5e:
fb:e2:29:58:6c:7e:d3:37:e6:8e:00:cf:22:c2:c4:c1:ce:bc:
84:da:90:7e:c0:a0:a6:f0:38:ff:6a:a3:b8:f9:43:29:75:db:
60:fa:a7:14:c9:8b:ee:91:28:ab:14:32:e6:fd:65:68:85:84:
7e:d4:a6:d1:8f:c6:4b:c5:38:dd:58:c9:47:7c:ac:06:8a:4c:
8b:b8:38:2a:bd:67:b2:b8:58:57:f6:3b:86:eb:c8:4d:e7:9a:
81:ca:fa:38:f4:bf:f5:af:30:b7:58:9c:9e:c4:bf:4a:1d:17:
d3:d7:ef:de:dc:ea:70:04:c0:4c:e3:5f:70:2c:b3:7b:51:8e:
c3:75:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:39:50 2025 by rpki-client