Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c26c06e-4f7f-4015-a99b-1a09675b08ba.roa
File: 1c26c06e-4f7f-4015-a99b-1a09675b08ba.roa (raw, json)
Hash identifier: ck4eGYGqh5mc+C5BCdtxAI88jF0XlltOx7ATJB1WCtI=
Subject key identifier: 84:1A:29:F7:3A:6C:C7:ED:13:85:3A:DF:34:9F:9C:C7:EA:18:0B:AE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4B8D5E2376D302F607697EC6D573531539CA0679
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c26c06e-4f7f-4015-a99b-1a09675b08ba.roa
Signing time: Sat 07 Dec 2024 00:00:00 +0000
ROA not before: Sat 07 Dec 2024 00:00:00 +0000
ROA not after: Sat 11 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:8d:5e:23:76:d3:02:f6:07:69:7e:c6:d5:73:53:15:39:ca:06:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 7 00:00:00 2024 GMT
Not After : Jan 11 23:59:59 2025 GMT
Subject: serialNumber=930b33c32ec6d0cba67117a6fc018957659f8c6742a7d3a5f190ea6c5b114499, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:8c:ff:27:ca:50:51:f3:c4:72:61:16:1d:
19:d3:16:36:75:f3:2c:ce:2e:72:bc:53:70:5d:37:
82:96:92:83:22:a2:7c:5b:42:38:c5:38:d5:3b:14:
12:8e:a7:83:f1:a5:cf:db:b7:17:d5:fc:59:3b:7a:
a7:15:37:1b:f5:35:4d:f4:2c:bf:fa:3d:f8:4a:81:
9d:48:b5:00:79:05:68:14:91:a7:c4:cb:0a:ff:39:
a4:c7:85:8e:ff:26:dc:4b:d3:db:76:bd:c1:65:80:
b2:07:4d:b6:e3:59:01:09:ce:9f:45:be:25:1b:cd:
f5:54:26:da:25:d1:21:f3:f6:1b:db:24:c9:af:21:
c8:c7:3f:fc:70:ff:36:aa:d6:ba:9f:11:8d:86:83:
77:a7:10:07:ed:a4:c8:66:3e:a2:ce:fd:d9:ad:04:
28:e4:ff:a8:be:1d:a2:71:2f:5b:ab:dc:65:4f:f1:
46:d4:f8:17:3f:16:08:7d:a4:6b:b1:d3:1e:57:bf:
a4:c4:07:07:ba:d8:db:08:df:f2:c3:06:e7:e1:d4:
e6:4d:db:05:58:f6:cf:19:05:57:49:df:1f:d6:7e:
da:e3:d1:ca:49:d2:86:c7:be:9e:d7:53:32:33:77:
78:e9:2c:08:ee:3e:8f:9c:67:1f:ff:35:7c:a1:cf:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1A:29:F7:3A:6C:C7:ED:13:85:3A:DF:34:9F:9C:C7:EA:18:0B:AE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c26c06e-4f7f-4015-a99b-1a09675b08ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:2b:c2:64:cc:78:a1:d5:cb:84:b0:a4:85:84:3f:5c:a3:81:
91:5a:4f:8a:99:1e:a6:33:ec:ae:fa:5d:39:41:11:ac:2f:3b:
4c:6a:25:4b:78:cb:58:33:7f:b7:c9:fb:73:73:e0:61:6c:a6:
04:38:8f:e0:68:a0:33:a0:43:e3:e3:63:58:a6:d3:b5:1d:16:
82:d0:19:c8:a2:fe:43:e7:ed:19:92:51:d8:cc:3b:80:fa:02:
99:f1:42:34:59:16:75:65:57:66:a6:4e:c6:d5:53:f5:8d:82:
ae:4e:17:f3:68:49:1f:37:b5:5b:6c:a4:59:9c:eb:03:e8:e9:
e9:84:88:dd:33:8b:b5:83:bf:9b:1e:34:93:8b:ac:55:22:7c:
eb:45:79:68:e2:50:69:5c:0c:eb:e2:11:e8:5e:e4:c3:82:9c:
fa:c6:09:d6:cd:38:a4:61:20:34:2b:9a:b2:0e:66:c3:7c:90:
67:71:8f:33:c7:76:ec:a0:8d:50:3f:64:4c:8a:d2:6c:f3:9e:
d5:0c:83:97:6b:1f:db:fe:d8:c3:64:8c:8d:44:59:ea:16:27:
9e:f2:85:73:ad:4b:dc:12:6a:61:ac:e2:48:f8:67:8c:f9:56:
97:d2:a5:1d:14:31:28:20:9c:1d:32:97:ec:20:7a:00:75:4a:
e9:08:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:40:15 2025 by rpki-client