Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c49402c-a70a-4a1f-95db-b7e5dc3dc4d8.roa
File: 0c49402c-a70a-4a1f-95db-b7e5dc3dc4d8.roa (raw, json)
Hash identifier: MnNu6WGDeP7EkmqU3Sw7Jc3WoroNDDLxdOvM/h1x8B8=
Subject key identifier: CB:95:7C:CD:B0:76:F7:FF:D9:E5:88:B4:D8:1E:14:69:ED:71:C5:07
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 122D79AD655ED164E24F04432272F5073B97E40D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c49402c-a70a-4a1f-95db-b7e5dc3dc4d8.roa
Signing time: Tue 04 Mar 2025 11:08:21 +0000
ROA not before: Tue 04 Mar 2025 11:08:21 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:2d:79:ad:65:5e:d1:64:e2:4f:04:43:22:72:f5:07:3b:97:e4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 4 11:08:21 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: serialNumber=459b210e54aa6aab64ec7ce502199245bf8090912a57f5ac945318386d58fb83, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:70:3f:63:9f:7e:83:3d:ca:e0:08:45:17:
f7:8e:52:9f:d8:a4:11:fc:7d:21:93:9e:8c:ea:97:
7e:b7:5d:ea:21:a4:6b:5e:b4:af:79:db:a9:a9:d3:
27:f3:be:e3:7e:3f:da:75:e4:a4:d2:b4:78:d0:f2:
ef:82:ef:40:0a:05:03:70:63:60:54:43:e3:83:7d:
9b:af:11:0a:80:59:c2:87:03:7b:67:bd:e2:ce:b2:
9d:b8:4b:d4:3d:00:ea:ea:d1:40:be:9e:fb:ee:54:
31:63:b6:ba:12:8b:df:d4:61:9f:a5:cc:5f:b0:1f:
96:b6:46:09:f2:b4:d5:1e:3d:85:0a:67:ee:d1:0a:
5e:95:fb:66:12:b7:2f:70:16:6e:5d:5c:61:1a:72:
76:4c:0b:95:6a:19:bd:db:ca:60:43:c9:3b:04:a0:
56:2c:68:1f:42:16:51:9b:53:6f:ea:a5:57:9f:39:
d8:17:ed:55:9b:ff:fc:b7:8a:d0:9b:ae:ca:c7:49:
1b:85:ac:33:da:3b:74:b8:d8:09:e6:df:02:19:96:
11:81:c1:1e:be:4f:7f:08:44:5d:82:e1:a7:6c:32:
c8:c8:b6:4b:cd:a9:23:b4:01:2a:47:7f:02:25:cd:
d3:9a:6e:e4:6c:a0:55:bb:d0:ff:82:05:34:58:05:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:95:7C:CD:B0:76:F7:FF:D9:E5:88:B4:D8:1E:14:69:ED:71:C5:07
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c49402c-a70a-4a1f-95db-b7e5dc3dc4d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d5:07:96:19:d3:93:7f:49:ef:e6:d8:36:bb:2e:d0:45:43:
95:59:b3:da:97:b5:73:b0:da:1e:3d:8d:1b:8d:19:99:04:ac:
75:2e:66:06:c6:35:91:cb:aa:80:a3:aa:b8:f3:23:40:b1:9b:
ec:11:94:fd:9c:cc:dc:98:14:03:0e:82:8e:3a:23:52:af:0b:
05:7b:bb:36:4d:fe:f6:a6:de:0b:ce:7a:6a:3a:ae:48:b4:42:
a5:90:46:94:34:02:35:45:a2:3b:07:0c:bb:b4:bb:d8:9e:ae:
73:68:0d:7c:74:30:e6:06:4a:ed:f5:cc:c2:d6:5a:fe:50:6e:
68:ae:4c:d2:34:45:75:3c:08:71:c3:ea:3a:eb:2e:a1:62:27:
01:db:a1:71:9b:2a:3f:61:11:76:51:f2:0f:77:ad:77:33:7c:
2e:ab:32:d0:ef:2b:7f:3c:34:71:7a:10:bb:6a:1a:aa:6d:89:
92:62:d1:9a:06:0f:52:74:d1:f3:d0:d0:04:d4:4b:70:d4:db:
5b:95:c6:b9:ae:f8:70:a2:3e:c5:98:91:b6:32:80:6a:6a:f6:
e8:27:71:d7:e8:ae:d3:39:e5:58:6c:ec:9f:22:25:13:2d:98:
06:27:36:17:f5:80:f3:d7:e7:11:6e:3a:8a:fc:39:f2:36:01:
a8:bd:77:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:08 2025 by rpki-client