Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2319e867-8144-45ce-91f3-207c28b57e9d.roa
File: 2319e867-8144-45ce-91f3-207c28b57e9d.roa (raw, json)
Hash identifier: AKhT5GZ8EGXXVghu6DTFss4uhYUYVaeuzltWGBDoHq0=
Subject key identifier: 9B:56:36:1D:4E:00:82:D2:E8:BE:A8:8D:67:F0:0F:87:E2:A1:90:41
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 41D34FFB32805D6CD2F3A0CB745BB5C3B56A5F36
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2319e867-8144-45ce-91f3-207c28b57e9d.roa
Signing time: Sat 23 Nov 2024 00:00:00 +0000
ROA not before: Sat 23 Nov 2024 00:00:00 +0000
ROA not after: Sat 28 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d3:4f:fb:32:80:5d:6c:d2:f3:a0:cb:74:5b:b5:c3:b5:6a:5f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 23 00:00:00 2024 GMT
Not After : Dec 28 23:59:59 2024 GMT
Subject: serialNumber=8e3b27102b7b50370617a357ac46939708afd0c6516b7a00fe7ecff46a6d14d2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:fb:66:59:f8:d2:6a:8a:b2:de:fd:4f:b5:
5c:6e:c2:52:01:dd:4a:9a:1e:75:2a:fe:22:05:f9:
b7:84:3b:2a:f3:20:5a:0a:b9:fc:d8:1c:5e:bb:25:
c7:58:93:5f:37:34:f6:4b:f5:3c:37:a4:85:f1:82:
1d:08:80:e4:1c:34:c6:01:71:dd:d6:22:9e:83:78:
26:a8:8a:ea:c1:01:b8:1b:5f:12:40:92:dc:b2:a6:
dc:55:b3:ed:0f:5c:8c:37:47:62:e1:43:5c:82:3c:
39:2f:24:6b:8c:dc:b4:c2:fc:b7:de:e7:6f:69:e7:
3a:a7:1d:e0:2b:85:f1:88:79:8f:24:65:87:4c:04:
7e:bf:d8:9a:24:d6:45:c0:8f:3c:c7:82:bf:60:0c:
2a:fd:e7:70:3a:c4:ad:c8:28:ef:da:e0:73:24:5a:
51:2a:ee:cc:e5:08:5d:b2:34:4d:5c:6f:bb:8e:b6:
68:ce:2e:a1:21:5e:48:e7:36:3e:ff:c3:94:e0:bf:
9f:a0:24:94:d5:79:31:5f:61:27:ad:f4:a1:bf:99:
89:f2:bc:d9:a4:a1:3a:cf:00:90:eb:a1:15:45:af:
1a:52:64:78:93:ce:d3:e1:85:f4:64:cf:96:0e:b4:
6e:f4:87:78:e6:cd:26:c2:85:62:43:63:ed:88:09:
b3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:56:36:1D:4E:00:82:D2:E8:BE:A8:8D:67:F0:0F:87:E2:A1:90:41
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2319e867-8144-45ce-91f3-207c28b57e9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:32:93:4b:ac:b7:36:c5:04:f4:09:9c:00:6a:3c:82:8a:e6:
13:33:36:e4:ab:47:0f:3d:18:cd:7a:65:d0:00:fe:27:a9:43:
50:4d:02:ec:aa:4f:79:49:39:06:85:e3:35:51:b1:97:af:e1:
f0:68:a8:5d:8a:fd:b6:8f:6f:6a:43:3d:8b:2a:71:3a:8e:2c:
f7:e5:b6:97:aa:a0:01:5c:03:1b:9f:57:da:b4:d5:b4:ce:cb:
d5:23:fa:53:02:5f:b5:40:33:d9:ee:07:36:3f:a8:98:93:72:
1b:18:df:79:73:c1:8d:ba:41:23:d9:bf:19:b3:68:1e:16:e2:
ee:08:d2:4a:36:da:8d:4b:d6:3f:aa:e4:35:27:95:c3:ef:fd:
8c:83:22:ba:a0:e4:71:0d:a3:8f:6c:b9:78:76:3a:3d:11:b7:
0e:83:24:1d:fa:f4:04:cc:10:e2:20:3e:78:a9:d0:be:74:53:
96:36:ff:91:b7:63:48:5e:b3:7a:87:f4:7b:5f:f9:c9:6a:1a:
7d:53:e6:ad:d1:08:19:42:41:81:d6:e2:40:98:b4:c4:0a:45:
e5:50:9c:01:2b:05:19:b2:5e:10:7d:f4:a8:ea:8b:16:17:e0:
17:41:48:b0:cb:91:96:65:79:7c:7f:80:0d:85:de:75:5b:96:
5e:2d:1d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:03:54 2025 by rpki-client