Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1db3082e-51c3-42cb-a3bb-23d5568a33c9.roa
File: 1db3082e-51c3-42cb-a3bb-23d5568a33c9.roa (raw, json)
Hash identifier: bDRjjHRKLhE/mSakh+iJNxpdfQERTb3arGGIILfQkYk=
Subject key identifier: 02:3F:68:A6:71:2C:FA:B3:7B:B5:0D:AF:45:CD:49:FC:AF:91:79:48
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4A8094BBF76AD0959975C36966E92FD1B4A9EE6D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1db3082e-51c3-42cb-a3bb-23d5568a33c9.roa
Signing time: Fri 18 Oct 2024 00:00:00 +0000
ROA not before: Fri 18 Oct 2024 00:00:00 +0000
ROA not after: Fri 22 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:80:94:bb:f7:6a:d0:95:99:75:c3:69:66:e9:2f:d1:b4:a9:ee:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 18 00:00:00 2024 GMT
Not After : Nov 22 23:59:59 2024 GMT
Subject: serialNumber=59e3574b10060ea718a5841c9526af50363527fbd38e1b8e220c7ed74874429b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:74:8b:c6:59:fd:f4:06:0e:57:f4:ff:d9:
ec:81:b3:72:94:1b:18:8b:9c:19:bb:55:0b:ab:0e:
5a:43:d9:1f:bc:01:5e:be:00:25:b1:1f:0e:25:7a:
bc:d7:19:3f:3c:32:10:18:88:65:37:e9:35:b8:83:
08:c8:77:a2:69:b6:4f:32:86:08:96:25:f7:a6:02:
2b:57:9d:ae:ff:7f:aa:54:c9:1f:a4:09:f9:b9:23:
9e:cd:54:b1:a0:50:e9:67:b3:02:39:e3:84:ec:f6:
d2:2b:74:ab:a0:e8:3e:20:69:23:5d:ec:7d:06:ac:
46:cf:37:7a:2f:b0:00:dd:14:ee:0a:24:80:2c:96:
ab:8c:22:88:e1:65:e2:c9:8d:6c:f4:49:07:70:4c:
de:0b:ee:0a:31:ec:06:01:72:82:e8:f6:87:fc:3f:
3e:15:bc:4f:7c:a8:c5:97:75:69:7b:7e:3a:cf:7a:
e5:4d:5a:9b:c2:d6:26:15:8c:65:b2:24:7a:98:67:
34:2b:49:8b:f0:c1:eb:9f:54:92:09:a7:e4:60:b7:
ae:08:1c:04:cc:4e:5c:9e:15:88:56:e2:85:f5:06:
89:3d:8b:00:72:17:13:48:aa:d9:16:a2:c6:bf:de:
d1:20:3f:36:71:f2:52:e0:2c:d1:c9:81:2a:af:50:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3F:68:A6:71:2C:FA:B3:7B:B5:0D:AF:45:CD:49:FC:AF:91:79:48
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1db3082e-51c3-42cb-a3bb-23d5568a33c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ee:44:a2:da:fd:20:d6:ea:f4:c2:1d:12:06:9a:19:05:03:
09:50:23:b4:3e:ca:3e:83:09:92:f2:d7:af:d8:66:85:49:5f:
de:19:4a:ad:77:09:41:5c:9e:2e:24:6f:16:30:21:ac:6c:ca:
5c:df:1e:c6:2b:e1:98:fa:e2:5f:15:1e:5b:e0:f0:84:e0:a9:
58:50:31:5e:ab:64:b7:38:91:5a:b3:aa:75:04:76:34:da:bc:
75:a7:eb:04:6e:84:04:48:b9:7c:9a:93:32:e3:53:a1:f7:ff:
0e:38:e0:17:de:d6:29:62:7a:47:d6:65:16:68:0e:dc:0a:2e:
24:91:a4:28:12:87:9e:db:2b:72:98:d0:07:8f:4b:8e:fd:4a:
06:5f:bc:a1:d1:03:a3:0a:9d:28:a5:80:8a:b7:cf:ae:9f:69:
94:0e:a7:23:a8:5f:da:75:85:dd:e8:d5:2f:e5:37:84:a9:9c:
4f:8c:34:34:6a:82:d3:36:e9:b3:24:b9:14:4c:27:e0:d4:32:
37:d0:82:c4:45:78:87:b5:13:e3:dc:d5:96:96:2f:01:bf:c8:
01:4b:b6:dd:3f:3b:ba:45:0e:88:d9:9d:34:b7:0c:c6:27:f5:
9a:ec:8e:ea:63:1e:4b:0b:bf:80:d9:8d:b0:74:4b:d9:ba:e3:
cc:a1:fb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:13:29 2025 by rpki-client