Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1a9094b7-2256-40b9-b25f-1d0eb6c0a6f2.roa
File: 1a9094b7-2256-40b9-b25f-1d0eb6c0a6f2.roa (raw, json)
Hash identifier: M9+w8ibHI9rh5+W3e1isoBuTDUVK8Ka5gv00RISXJSE=
Subject key identifier: B2:24:CB:4F:C6:44:06:B9:DF:5A:48:C7:AD:65:62:C3:09:E3:0E:9B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1B0188C997F900AFB2F0E8142C6E4BE9DF00B5B4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1a9094b7-2256-40b9-b25f-1d0eb6c0a6f2.roa
Signing time: Sun 09 Mar 2025 10:33:12 +0000
ROA not before: Sun 09 Mar 2025 10:33:12 +0000
ROA not after: Sun 13 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:01:88:c9:97:f9:00:af:b2:f0:e8:14:2c:6e:4b:e9:df:00:b5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 9 10:33:12 2025 GMT
Not After : Apr 13 23:59:59 2025 GMT
Subject: serialNumber=eb0029aedd6eb9d1b049a08d51fc5c12d56670bed4a2b4b15ab55cb21de5f30a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:66:bb:45:9f:3c:c9:63:12:7e:d6:41:83:b0:
ee:5a:b9:6f:4c:88:b9:5d:66:8e:77:c3:57:d5:19:
f5:6c:7b:9a:82:67:92:49:ff:11:b7:fd:db:3e:a0:
33:dd:7a:c6:ce:14:ed:45:53:7d:41:45:eb:01:5a:
b9:39:8d:dc:08:7f:5d:19:ce:3b:4d:83:bc:9c:78:
b6:90:0c:8b:51:e2:b6:93:83:8d:51:93:90:3f:83:
ad:6f:61:0a:54:38:0d:d6:3a:24:2f:20:40:07:8d:
c7:0d:90:f6:55:8a:56:3b:58:88:94:93:1f:9a:80:
63:27:9d:84:28:f5:d9:08:ce:36:da:7d:77:5c:65:
bd:2e:d3:e5:39:87:aa:81:a1:de:dc:dc:17:3e:ab:
a5:af:d5:8f:5d:7a:86:b5:1b:27:3e:ce:7e:72:47:
c4:3c:ec:44:b6:74:36:af:fc:05:9f:87:cd:f8:76:
57:cd:21:ed:85:9a:44:c9:62:1e:bf:11:a2:93:1e:
23:9b:a6:6d:2a:80:c0:5e:f3:5d:90:98:cf:7a:7c:
f5:c5:2b:ea:1a:5c:77:a9:0b:06:23:2b:41:a5:47:
b3:50:f8:ac:6b:e0:6b:be:3c:d0:f4:44:fb:42:d1:
23:8a:38:a3:98:87:c0:a1:6e:bd:3d:a0:cb:5c:3d:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:24:CB:4F:C6:44:06:B9:DF:5A:48:C7:AD:65:62:C3:09:E3:0E:9B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1a9094b7-2256-40b9-b25f-1d0eb6c0a6f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:bb:af:3d:51:d5:13:aa:14:b0:53:9d:44:8e:9c:ef:80:2f:
3b:c6:ca:dd:b2:90:84:6c:9f:ca:37:d1:00:65:7d:0f:e7:de:
15:6b:70:ed:37:fd:f5:3f:98:a9:9f:f2:87:db:1c:dc:98:ad:
7a:e6:3a:9e:7d:bd:aa:c8:1d:72:f7:21:f5:4d:76:7c:41:12:
c2:f8:79:a8:c8:76:46:fa:77:7c:10:59:9b:fd:5b:35:2d:f6:
86:f8:af:82:1d:5f:a3:c1:ed:55:da:87:cf:d1:fc:73:43:24:
26:e7:a6:8b:50:aa:67:d2:5f:50:24:46:9d:9e:da:97:2c:bc:
e5:fa:7a:fc:3b:87:37:96:5d:2f:ed:3b:d1:02:ae:db:bd:b8:
75:a3:1b:d8:35:20:b0:f3:42:a7:9b:44:fa:75:db:cf:8a:7c:
b5:01:90:a8:a5:cf:ed:ec:d1:1a:cf:99:e5:31:dd:2b:16:d2:
59:ca:45:d1:39:d3:7a:06:97:94:20:71:1d:a7:e5:b1:af:e2:
e3:08:c3:74:2a:e5:2f:7c:3f:e8:ff:1d:5d:76:bd:c3:d7:9b:
6a:aa:30:15:5e:e9:b0:bb:52:81:6d:fc:40:ef:9e:e6:be:cb:
33:ed:ed:08:6b:71:48:b4:2b:10:85:3a:97:9e:76:84:0d:ff:
f9:80:93:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:52:09 2025 by rpki-client