Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/14e5477a-8a98-4aa3-8e15-f0fe08d95882.roa
File: 14e5477a-8a98-4aa3-8e15-f0fe08d95882.roa (raw, json)
Hash identifier: MUTwyJmd+MJHbzn/THtNpjK4XHDtdvzfa/lJPGSIraU=
Subject key identifier: 7D:B5:CD:47:63:A6:22:89:2A:E6:C1:9E:14:B6:3F:D0:E5:07:48:6C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 668643E16017C685E3CC406AA20B1603BB102D1C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/14e5477a-8a98-4aa3-8e15-f0fe08d95882.roa
Signing time: Sat 09 Mar 2024 00:00:00 +0000
ROA not before: Sat 09 Mar 2024 00:00:00 +0000
ROA not after: Sat 13 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:86:43:e1:60:17:c6:85:e3:cc:40:6a:a2:0b:16:03:bb:10:2d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 9 00:00:00 2024 GMT
Not After : Apr 13 23:59:59 2024 GMT
Subject: serialNumber=45eed75430e3fb4f1bf9fcd8794d35b5dbe3b776846a8e6ba54c848ba7acdd2d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:9c:ab:16:e6:2d:d1:04:4c:eb:77:be:95:
b1:6d:bf:e1:0d:db:3d:88:78:4c:16:3c:52:08:91:
08:6c:bb:ac:de:5f:e4:cc:9c:bb:39:df:87:4a:93:
9c:4c:a1:e8:f4:4c:b8:79:1a:57:2f:3b:f5:ad:5a:
a6:c6:05:0a:a1:24:3f:19:b1:fd:fa:f3:37:1f:a2:
8d:30:88:31:3d:91:fa:cb:61:d2:db:ad:3f:0c:84:
32:07:8d:4f:4f:dd:b0:12:06:9a:73:94:42:33:37:
49:dd:98:ac:23:6d:d5:64:bd:37:fd:1c:aa:74:e0:
b2:3d:0b:00:87:73:15:fa:73:55:d1:86:96:f2:ae:
3c:6f:f1:ec:ef:02:40:d1:8f:a2:8a:19:74:34:a9:
f6:8e:c5:a0:bf:7f:2a:32:64:ee:2b:4f:7f:a2:d5:
c9:11:8e:53:3c:50:2d:5f:f5:f1:df:95:56:16:ec:
6c:63:72:d4:75:22:63:27:e1:d2:fc:a2:03:45:26:
ef:6a:7d:91:27:0b:4b:fa:b0:a1:c8:45:b6:30:67:
2d:81:23:a8:ec:ca:39:c9:62:9a:65:12:f9:4d:ae:
2b:a5:12:3b:48:7c:d3:da:cf:27:33:09:b9:74:2a:
54:4f:ce:a2:01:f0:4f:16:25:97:b4:aa:33:d2:75:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B5:CD:47:63:A6:22:89:2A:E6:C1:9E:14:B6:3F:D0:E5:07:48:6C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/14e5477a-8a98-4aa3-8e15-f0fe08d95882.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
56:6f:ab:b1:90:be:61:6c:a1:b7:57:2d:ce:d4:87:12:cd:19:
1a:dd:cf:f8:6e:88:6f:18:2e:dd:64:f3:7f:73:30:a4:13:aa:
0d:a0:44:f6:29:54:e2:9a:df:ec:45:6e:c8:18:88:f3:b5:3d:
dc:02:a1:f2:d6:37:0f:85:5c:10:38:98:e2:b5:9a:07:dd:3a:
9f:a6:5d:5b:a0:09:2b:3a:4a:64:c2:c9:d6:1a:1c:25:f1:f2:
51:33:5d:18:45:0f:3a:c5:65:a7:39:f5:87:43:cc:e1:46:ff:
8a:fc:eb:2d:85:5a:f9:15:40:38:6f:fd:ee:eb:4b:99:2b:9b:
36:f5:d1:68:fa:9b:06:3a:bb:67:0f:f0:4a:5c:40:8f:35:77:
b6:dc:7f:eb:40:f0:40:c5:d9:09:31:b9:74:e8:0b:22:51:97:
62:5d:0f:14:ba:b8:b2:a6:3b:61:fa:cd:f2:27:8b:1c:9e:c5:
56:19:2b:2c:c8:c2:d3:a2:40:7e:fd:d8:90:d8:3d:78:ad:df:
9b:ff:9c:24:23:6a:73:e3:9d:e9:46:d6:76:a1:f6:c1:31:d9:
84:60:77:c9:37:79:46:b3:bb:35:42:61:d6:12:98:d1:bd:7b:
1c:13:85:e9:71:23:fb:df:9f:d1:bf:d5:45:46:34:36:7d:11:
c5:a1:2a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:02:16 2025 by rpki-client