Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/056c0df6-8e61-4b13-ac03-0e747efa1dc2.roa
File: 056c0df6-8e61-4b13-ac03-0e747efa1dc2.roa (raw, json)
Hash identifier: gYGRRM8mzY4uwZCzG+ei7x0wbV6rV62+fJvT1lPQhF8=
Subject key identifier: 73:EC:CE:5B:E7:F3:51:08:4A:D9:6E:AE:5C:DF:26:8D:C6:E5:17:24
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 034AE1788DCEB6503C9C90C9A02D90983C966548
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/056c0df6-8e61-4b13-ac03-0e747efa1dc2.roa
Signing time: Fri 15 Nov 2024 00:00:00 +0000
ROA not before: Fri 15 Nov 2024 00:00:00 +0000
ROA not after: Fri 20 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4a:e1:78:8d:ce:b6:50:3c:9c:90:c9:a0:2d:90:98:3c:96:65:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 15 00:00:00 2024 GMT
Not After : Dec 20 23:59:59 2024 GMT
Subject: serialNumber=d3e97cdf12230f13c107434a17a01221c7ed4699de0ad983f935e295b74b43d3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:08:09:a5:e6:87:95:ed:5c:2c:31:6d:9a:
a9:37:4a:a3:ca:37:4e:86:7c:15:2d:16:dc:84:b4:
5e:41:53:48:ba:68:aa:ae:99:e8:a9:4c:83:79:56:
00:30:96:f9:af:d1:50:86:b8:59:e0:6b:2e:bf:6e:
97:1f:46:f5:d7:b2:93:a3:5a:33:95:4c:aa:35:6e:
aa:d5:96:d6:30:24:85:cb:f8:8a:50:c0:48:83:9f:
17:ec:8e:af:85:8b:bb:2c:92:21:9c:d0:58:23:cf:
b9:c2:0f:3e:6b:28:15:af:9f:f3:bd:cf:61:20:b3:
6f:74:29:cd:5e:63:fb:78:20:76:d1:4f:f0:85:a8:
89:34:63:9f:23:a7:2c:f9:b9:67:d6:22:d0:15:a7:
5b:48:58:d7:0a:75:48:43:1c:38:65:b8:5b:5c:23:
2f:0b:58:4a:c8:bf:13:38:64:18:d6:e6:06:8f:43:
b2:a3:93:d6:fd:0a:cc:22:13:95:6a:fd:9a:f4:b5:
dc:78:ec:de:37:21:9c:41:9f:c1:ee:da:2c:00:8e:
df:13:6e:d8:2c:7a:7d:7c:4c:ba:74:8c:de:25:80:
53:06:b5:7a:d3:95:df:5a:4f:6e:a0:fa:62:4c:83:
bc:dc:55:cd:94:7a:31:45:1a:51:ff:d4:f1:d1:35:
b4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EC:CE:5B:E7:F3:51:08:4A:D9:6E:AE:5C:DF:26:8D:C6:E5:17:24
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/056c0df6-8e61-4b13-ac03-0e747efa1dc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
43:75:2a:ab:67:5c:07:84:3f:f7:e3:7f:74:05:1b:b2:12:04:
dc:36:6c:02:25:ec:fc:2c:92:9c:8f:07:bd:82:dc:10:54:bd:
ab:03:17:13:d4:a9:fe:b8:cc:ef:4f:d2:37:ba:4e:bd:8a:0d:
05:cb:19:04:e6:b9:18:9a:93:a9:91:81:72:51:3c:16:13:23:
17:be:c5:51:48:da:d5:4e:31:87:82:00:7a:34:f1:51:d1:3c:
3b:e1:1d:3d:3b:c8:ee:4c:d2:a1:84:b0:59:7e:15:04:e6:b0:
bf:bb:d2:f3:67:a4:0e:eb:82:14:b0:6c:0f:38:82:99:94:84:
7c:5f:1d:44:3a:74:1c:0b:0c:1e:85:89:17:ab:d2:5c:ea:9e:
b7:65:7c:bc:25:8c:4e:99:51:8a:d0:c1:33:08:2d:16:a4:de:
bc:89:79:c1:61:1f:cb:0f:84:26:3b:c5:f1:0a:6c:7b:60:0d:
49:61:73:2a:3f:ee:6c:30:a9:ca:13:9d:c0:49:42:53:b2:d4:
12:56:be:c6:af:e1:bb:ac:f4:8e:6f:af:dd:41:8c:69:10:d2:
51:e0:96:6f:4a:50:f4:32:69:70:3f:aa:7c:e1:5a:7f:7d:56:
39:5f:e0:00:fa:90:3b:5b:f1:1d:e9:d0:4d:0c:32:7d:48:86:
0d:f5:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:38:19 2025 by rpki-client