Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/24a8c29c-c474-4acd-ac91-bbe8015491b1.roa
File: 24a8c29c-c474-4acd-ac91-bbe8015491b1.roa (raw, json)
Hash identifier: BEvE2Pf+k5TV3Q8lwDRscuwcmHK8Me3hJfptqzSjho0=
Subject key identifier: EB:95:F9:D4:AE:E2:8F:B7:BF:5D:99:FF:99:7F:66:77:49:F5:0C:BA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 151678A2B6E9B00201D5417D0781CF8B250C1DA6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/24a8c29c-c474-4acd-ac91-bbe8015491b1.roa
Signing time: Fri 10 Nov 2023 00:00:00 +0000
ROA not before: Fri 10 Nov 2023 00:00:00 +0000
ROA not after: Fri 15 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:16:78:a2:b6:e9:b0:02:01:d5:41:7d:07:81:cf:8b:25:0c:1d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 10 00:00:00 2023 GMT
Not After : Dec 15 23:59:59 2023 GMT
Subject: serialNumber=745ea9c3ca20250a64ac9018f6f5d60e23a643c0ed4543b96692041f270e3b41, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:a3:d2:cc:bd:65:89:c9:20:f4:55:03:00:
92:c7:7d:d4:ac:7c:48:38:f9:c2:ac:72:31:84:24:
b3:4a:6d:85:03:9a:84:79:3a:2d:32:71:a3:44:3c:
a3:1b:8e:59:28:61:d6:28:da:82:7b:c8:db:f3:bb:
d2:84:69:0b:52:23:83:83:91:2f:5f:2e:d6:d4:55:
86:06:bb:e0:7b:eb:a1:7d:a4:19:03:2a:cd:38:30:
78:d2:90:f6:36:bb:a1:6e:bd:f5:18:36:ff:66:1f:
48:08:30:d6:b8:01:17:dd:f9:e9:d2:d2:31:93:ba:
68:a5:df:94:d7:c3:46:bb:6f:3f:0e:a4:ee:39:3e:
95:48:c0:ca:60:92:78:e4:b2:02:6a:b3:9a:08:0f:
fc:87:af:93:bc:e5:58:2f:38:7c:e0:8b:24:71:ee:
f5:27:40:9f:6b:7f:8e:12:a4:de:9b:b2:41:b6:0d:
ad:10:81:71:0a:e1:7d:a3:f0:4d:87:1b:13:0a:bd:
a5:94:91:f0:3f:e8:d4:6c:13:07:54:bc:87:28:ed:
86:b2:ae:b6:ce:de:bb:b2:04:3f:62:e4:e8:8d:c0:
56:e8:2f:be:98:b4:72:af:7c:df:f3:d1:bf:cf:f3:
e8:e3:dc:4f:eb:e5:26:ff:62:aa:1f:62:e8:b4:1f:
47:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:95:F9:D4:AE:E2:8F:B7:BF:5D:99:FF:99:7F:66:77:49:F5:0C:BA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/24a8c29c-c474-4acd-ac91-bbe8015491b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:1d:72:30:c8:06:52:b3:ef:0a:d5:4f:3e:cc:b7:cc:c1:8a:
b4:48:82:51:07:03:1f:ff:9f:87:32:7a:8a:30:cc:69:4c:4b:
45:cc:8f:42:5e:15:ed:81:74:7a:48:0c:76:73:83:e7:ed:db:
76:e1:8b:40:85:86:20:92:ac:b5:4c:61:8b:5d:00:a0:56:67:
99:df:99:9f:eb:f3:03:9b:7a:85:02:e4:b9:5e:75:4c:9f:ca:
98:5e:8e:53:db:d2:5b:73:47:a2:a8:5c:9a:b8:e8:9e:76:a2:
bf:2f:2c:f9:be:0e:a7:e2:b9:74:4a:58:a4:f8:7b:96:73:04:
51:99:7f:f3:59:7a:9f:1e:ff:44:70:e8:6a:1e:fe:fa:e7:d7:
bf:3e:0c:a5:3c:68:0e:02:7e:9b:b7:d9:bf:df:91:0f:52:55:
d4:27:9e:f5:c7:a4:81:5f:58:c5:0c:af:54:f9:8b:2c:da:49:
c4:0a:f5:6c:df:b6:57:7c:42:b6:41:6a:e1:1f:fd:55:4b:af:
03:99:96:03:48:98:14:af:aa:12:6d:a4:13:74:4c:e2:fb:4c:
05:a0:58:af:2c:37:2b:87:c1:f0:31:80:31:f7:e5:f3:3c:b3:
fa:5a:2d:06:22:ac:10:a9:c0:da:53:15:45:c8:24:e2:9f:42:
60:90:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:00:29 2025 by rpki-client