Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/161b0934-4299-4649-adeb-7fc08cd4705a.roa
File: 161b0934-4299-4649-adeb-7fc08cd4705a.roa (raw, json)
Hash identifier: uNsNT3p735LA+DTh7NOkdnw/+Vg1n6m+E1UQEe/I4mY=
Subject key identifier: 63:35:A0:E7:F7:7B:28:37:0D:D3:13:37:18:3B:1D:A6:9A:FD:18:B9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3918F5FCA0C41BCDBD1048C8770B8F0A63408E7C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/161b0934-4299-4649-adeb-7fc08cd4705a.roa
Signing time: Fri 01 Mar 2024 00:00:00 +0000
ROA not before: Fri 01 Mar 2024 00:00:00 +0000
ROA not after: Fri 05 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:18:f5:fc:a0:c4:1b:cd:bd:10:48:c8:77:0b:8f:0a:63:40:8e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 1 00:00:00 2024 GMT
Not After : Apr 5 23:59:59 2024 GMT
Subject: serialNumber=87d209ba8fee570208611585824db8d988aa4ceb7460a7c9dd983bc7debe3a97, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:a4:29:8c:e6:47:a4:e7:b2:b3:4d:40:99:
37:94:a3:3b:58:12:a6:b6:eb:62:7f:e5:0b:2e:ee:
a3:7a:a5:3c:c4:84:0a:44:04:ef:09:63:34:b3:08:
d8:21:de:bb:56:e1:2b:21:db:5e:ab:56:1d:a7:38:
8b:83:a6:53:e1:a9:be:75:0e:3b:11:c0:3c:58:36:
a6:d0:fb:f7:01:e2:7f:17:2c:82:e1:4d:4c:8e:b1:
2a:bf:be:22:18:34:5f:43:d4:0d:7d:d3:30:66:eb:
2a:af:ab:4d:ca:62:18:30:ab:97:59:d6:eb:53:f8:
b3:73:44:96:6f:8a:fc:ac:53:a7:05:3f:7f:3b:4c:
0c:7c:90:b8:60:f9:e0:9f:f1:d2:4d:c9:7d:63:28:
f3:fc:47:63:d6:dc:69:54:7e:53:47:99:66:08:46:
9a:9c:60:a4:9e:27:24:0a:33:e1:33:29:e1:08:85:
4e:6f:3e:97:b1:97:8c:50:fb:f1:88:28:3c:da:d6:
61:4c:da:45:b2:71:3a:18:82:bf:ca:5a:b3:db:a9:
9a:da:06:2a:bc:c8:1b:b4:9e:96:e2:46:83:98:ab:
de:ff:97:8d:24:35:a0:19:cf:a9:94:ec:61:3e:e1:
f1:d1:ae:94:05:fe:ee:13:1e:db:8f:dc:eb:2a:df:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:A0:E7:F7:7B:28:37:0D:D3:13:37:18:3B:1D:A6:9A:FD:18:B9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/161b0934-4299-4649-adeb-7fc08cd4705a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
34:af:83:96:68:1d:31:ac:31:eb:10:2c:86:88:a5:ec:85:0a:
3e:25:b3:28:7c:c3:b6:a1:13:1b:25:e7:b3:80:ff:6e:3b:2a:
9d:50:a8:00:b7:00:da:18:54:82:ec:97:3c:73:09:43:67:7c:
ab:7e:b3:91:db:cb:0f:7a:d4:b9:dd:f6:71:56:88:03:b4:37:
71:7e:37:80:ea:ee:17:81:ab:61:83:98:57:c2:18:67:1b:0d:
83:39:c3:b4:24:96:1b:fe:3f:76:c8:02:a3:60:b1:90:84:a6:
6a:07:b6:ad:07:00:c4:14:d6:ad:c2:96:ec:c5:0f:a3:d9:e3:
65:9d:bf:27:9e:b8:13:ba:89:70:ed:4d:d9:0c:e8:1e:bb:1b:
e1:97:a0:1e:81:e1:aa:88:fe:1a:c2:54:8c:60:b9:69:89:ae:
9c:95:ed:fa:a9:11:10:7d:f0:de:81:d6:e5:df:ed:ed:7e:2e:
78:13:13:ba:5d:61:6c:4b:f2:fd:ab:98:92:45:2d:37:54:26:
49:40:2e:cc:1b:a1:6a:36:cb:38:54:0f:95:af:0f:38:3f:84:
9b:44:63:20:59:9d:da:2a:9f:20:15:fc:06:88:80:ee:84:a0:
ea:53:41:b1:be:50:ce:ca:f4:df:32:95:ee:dd:10:8f:48:ec:
49:73:15:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:26:45 2025 by rpki-client