Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0be8116c-0d2d-4d63-beb4-fa44a36764cb.roa
File: 0be8116c-0d2d-4d63-beb4-fa44a36764cb.roa (raw, json)
Hash identifier: 7EYnIn4PK7kgKLyha3p4eXT4vnpz8acWeY69XZ+3mj4=
Subject key identifier: 40:35:61:19:97:CB:48:4D:E1:1E:2E:98:24:5B:24:AD:50:4B:00:FD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2B787B6F90D53795FAE558F29C203A53C9F2643A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0be8116c-0d2d-4d63-beb4-fa44a36764cb.roa
Signing time: Thu 21 Nov 2024 00:00:00 +0000
ROA not before: Thu 21 Nov 2024 00:00:00 +0000
ROA not after: Thu 26 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:78:7b:6f:90:d5:37:95:fa:e5:58:f2:9c:20:3a:53:c9:f2:64:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 21 00:00:00 2024 GMT
Not After : Dec 26 23:59:59 2024 GMT
Subject: serialNumber=15cbab5711ae95ea3d2d10bf675b718516fea45cc8d27d52769e08bb104674b2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:89:34:74:14:00:d9:bb:ec:3f:c8:c0:5d:
a0:b6:52:85:34:45:b5:52:0d:58:49:64:94:1b:88:
75:68:8e:a2:73:55:3c:08:8b:ea:1b:6e:6f:77:5f:
f8:ee:5a:f2:1e:bf:9c:f2:eb:68:91:e4:c4:ea:6c:
40:34:96:7d:de:73:f2:7c:e2:3c:46:7e:03:17:15:
e5:2f:67:f3:6b:54:b8:ed:51:29:0e:31:48:f9:21:
83:b4:23:42:43:6f:ea:cb:4c:9d:ca:f5:c8:41:dd:
78:5f:36:59:26:5f:46:51:05:d6:0d:d4:f4:2e:16:
b3:b3:42:e4:c8:24:13:ea:a3:15:b6:4f:46:2a:08:
d6:c5:f6:de:26:95:8c:37:39:f8:87:ae:a6:87:ac:
5d:46:b0:c9:a8:82:db:ee:9b:32:5c:a8:70:53:4c:
cb:c1:e4:f3:3c:1e:0b:1e:60:47:39:fd:31:d1:93:
cd:ef:2c:3d:c1:15:d2:60:e6:d1:d5:7f:6e:fc:25:
33:e8:ae:23:0a:ad:2f:c0:48:70:e5:cc:7e:7b:1e:
8f:73:af:44:7f:c2:2b:42:b6:74:8d:e1:7d:54:ce:
f5:3b:a8:a0:de:0c:af:c9:97:13:14:b0:e6:ff:5b:
8d:1c:5a:b8:04:0a:e1:b4:9b:fa:3a:75:d8:cf:5f:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:35:61:19:97:CB:48:4D:E1:1E:2E:98:24:5B:24:AD:50:4B:00:FD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0be8116c-0d2d-4d63-beb4-fa44a36764cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
09:85:64:c0:b5:3e:e0:ca:cf:e5:2b:90:08:0a:dd:1e:5f:56:
18:48:68:95:a5:77:25:a2:82:a5:60:20:2c:57:1a:84:7e:25:
34:3b:0d:da:88:58:70:66:14:86:6d:b4:02:ce:96:3c:8a:56:
eb:26:2f:da:a7:35:32:50:9f:2d:1e:fd:39:4a:6a:0c:a5:e2:
18:e0:d6:88:9a:7f:1c:73:17:d2:a3:d8:d8:31:c4:b6:12:eb:
7e:87:0a:e0:6f:e2:67:6e:a0:dc:7b:d8:ac:e3:7a:9d:9a:40:
8a:3a:17:04:54:19:81:93:b3:86:4e:ee:15:63:84:b9:16:df:
3f:cd:30:ec:7c:7d:5f:4c:45:d1:d5:23:58:fd:91:24:ff:5f:
16:bd:b8:78:33:7d:22:65:9d:f1:ca:60:39:89:6a:d3:43:5a:
49:ad:01:b3:35:7b:e1:34:a5:93:53:07:0b:23:cd:fb:f6:34:
67:b3:2b:7f:59:85:9f:d4:bc:0d:42:66:ac:93:e9:82:31:1f:
aa:e1:26:80:ba:b7:74:26:39:d8:50:83:7f:45:e0:e0:ed:0f:
75:bd:51:44:34:35:c3:a8:62:3a:22:f3:b5:66:7e:15:fd:e8:
44:15:b3:9d:40:0f:d5:05:83:7c:2c:78:cf:3e:22:89:4c:e9:
f8:86:18:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:37:28 2025 by rpki-client