Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/10215796-6021-4d3b-a677-b705c1c7e547.roa
File: 10215796-6021-4d3b-a677-b705c1c7e547.roa (raw, json)
Hash identifier: vOWU1Cbri5cK0vIOVFMyXrdmx2zRra+/8eFs8m2+Bp8=
Subject key identifier: AD:5B:DF:5D:0D:77:45:E3:0A:1F:F2:37:74:4A:DD:95:DE:F9:5E:F0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 510FECA67355A4FB1F5464AADCA2DC011DACE70F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/10215796-6021-4d3b-a677-b705c1c7e547.roa
Signing time: Mon 16 Sep 2024 00:00:00 +0000
ROA not before: Mon 16 Sep 2024 00:00:00 +0000
ROA not after: Mon 21 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:0f:ec:a6:73:55:a4:fb:1f:54:64:aa:dc:a2:dc:01:1d:ac:e7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 16 00:00:00 2024 GMT
Not After : Oct 21 23:59:59 2024 GMT
Subject: serialNumber=a18f0385f60b1d4a91ad206ff0c89b9f49695bf9e07a6205782768f2b4161720, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:79:d5:cd:c9:54:bb:be:32:7d:80:3f:ae:
ab:3d:46:16:0c:f9:cb:64:17:59:4a:71:5c:e2:bc:
e5:1b:35:c3:66:c8:15:75:78:6c:72:e8:ff:47:b4:
31:b8:ba:3a:f6:19:76:a8:c0:55:c9:b0:73:0b:9d:
b6:53:2c:cd:6d:b7:dd:32:09:e3:37:22:38:23:f7:
9e:a5:eb:bd:9a:48:d8:29:16:40:68:55:61:08:ab:
35:0a:c1:b5:1f:0c:39:f3:cd:81:12:3d:75:24:f7:
fc:51:08:99:61:f9:65:3d:30:98:3f:60:df:a4:35:
c3:51:36:cf:12:cb:ab:93:b7:37:65:6b:fd:04:fa:
d0:04:24:a5:4e:5d:55:aa:0a:5d:2d:d6:a1:f5:91:
01:70:2d:bf:70:5c:97:9b:5c:80:0e:4e:2d:27:17:
92:85:62:aa:87:b5:2a:64:36:be:7a:14:20:80:fb:
82:46:b6:a8:b1:dc:0d:d0:6c:cb:60:68:9f:98:1e:
37:aa:42:66:cd:2a:9c:fa:76:26:83:0c:87:0d:c4:
23:18:6e:b5:0e:7e:00:c0:95:5b:77:5c:aa:bc:9e:
2e:fd:d8:d4:f9:7c:20:6c:1a:01:1c:d8:dc:08:94:
39:eb:b8:f0:36:9a:9a:ff:25:a1:38:ca:94:95:8e:
98:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5B:DF:5D:0D:77:45:E3:0A:1F:F2:37:74:4A:DD:95:DE:F9:5E:F0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/10215796-6021-4d3b-a677-b705c1c7e547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
49:42:57:4f:b3:30:29:75:bd:ee:48:8c:a5:8c:14:95:ba:31:
79:2b:eb:ac:b6:c7:3b:60:c3:1d:3a:56:a8:87:88:fe:1a:89:
d8:1c:6a:f7:c1:3b:5e:07:b5:b0:7f:23:79:38:e0:dd:4e:eb:
f5:f0:af:46:56:b4:f8:41:7b:50:7e:ce:11:68:21:00:e2:61:
96:4d:e3:ab:ba:fa:57:a8:4b:08:9b:66:72:a8:6e:56:41:fa:
cd:05:b6:e1:31:5d:53:2f:1d:d4:ae:c4:32:34:be:6b:cd:22:
24:23:88:ed:25:d9:a8:95:fd:bc:45:d6:2c:12:4a:54:d2:d8:
15:7a:e5:78:43:1e:b4:e0:90:cb:2a:d6:06:7f:b2:d8:79:59:
59:2d:0c:42:b5:c1:c4:6e:af:a2:0e:3a:53:20:34:98:9b:8d:
1c:1b:48:82:3a:c2:bb:8c:b7:60:82:fc:1b:f0:9f:01:95:ce:
9e:f7:00:e3:47:87:86:30:47:7c:d1:b8:1a:b0:4c:2a:f4:4d:
37:80:c3:7a:14:37:e3:72:ad:c0:38:8e:63:8d:de:9d:94:9d:
b8:17:0f:f9:b7:d0:3b:9b:dc:04:7d:f2:ce:76:ec:73:31:02:
a0:21:b8:6b:33:97:3a:c1:0d:83:cb:c5:b6:42:d4:28:a7:01:
04:96:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:26:55 2025 by rpki-client