Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/25fd57ad-64a7-4bfe-928b-24fbde54c82b.roa
File: 25fd57ad-64a7-4bfe-928b-24fbde54c82b.roa (raw, json)
Hash identifier: hnfVirlTohKStqGk/yntaMS+khZFSg5cuL4VINeU2e8=
Subject key identifier: D1:CD:98:B7:90:DB:B6:FC:65:ED:24:91:67:A4:A5:E4:BD:1D:FE:DB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 75949659CEBACADF4EB8084FD1D0CD27D52C9E5E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/25fd57ad-64a7-4bfe-928b-24fbde54c82b.roa
Signing time: Sun 25 Feb 2024 00:00:00 +0000
ROA not before: Sun 25 Feb 2024 00:00:00 +0000
ROA not after: Sun 31 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:94:96:59:ce:ba:ca:df:4e:b8:08:4f:d1:d0:cd:27:d5:2c:9e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 25 00:00:00 2024 GMT
Not After : Mar 31 23:59:59 2024 GMT
Subject: serialNumber=885347648ad40bc39099c1500cbab41d98a1ed609777788d6a64b7e448b8c785, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:e1:a6:e1:79:3f:22:27:e0:17:40:00:31:
3d:95:39:16:fa:ac:05:f8:72:ea:99:d9:f0:e7:eb:
b7:b7:1c:d5:0c:b6:c4:8c:23:f2:57:13:d2:4a:1e:
d0:23:e6:ca:0c:a2:c8:da:51:ec:7d:56:e3:9b:7b:
81:e7:c1:37:89:2f:45:bd:81:b4:41:4a:23:80:5e:
f6:74:ac:81:91:c6:6d:e4:17:73:75:ce:26:59:af:
0f:1f:ae:f0:b2:97:e0:70:9f:bd:d0:da:7e:dc:05:
59:db:2d:a2:bf:bd:64:f0:15:37:45:2c:72:ea:01:
cc:14:ab:56:bb:cb:9b:24:f6:fe:11:13:32:2a:27:
15:df:9a:25:0e:6c:0c:18:d5:08:bc:82:94:60:a4:
f8:45:ba:b6:48:ce:a6:ce:30:55:b3:fd:72:1c:a4:
1d:11:03:1a:bb:59:a2:0a:51:ac:f1:f2:bb:13:3d:
5d:e5:11:67:dc:3b:47:e1:6e:1b:0f:2a:1d:88:bb:
6e:09:c1:6d:db:cc:0d:4f:79:dd:5a:70:67:80:65:
76:17:d1:fb:3d:f7:4b:d0:fe:fd:bd:98:e5:bd:49:
25:eb:57:43:53:03:5f:f5:94:4f:49:40:8d:47:e3:
82:2b:d5:44:55:8c:7c:f0:d9:16:41:0f:4c:cb:ef:
8e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CD:98:B7:90:DB:B6:FC:65:ED:24:91:67:A4:A5:E4:BD:1D:FE:DB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/25fd57ad-64a7-4bfe-928b-24fbde54c82b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
22:0a:ea:d9:44:9e:0e:f4:cf:a9:ce:ec:2c:9a:53:5c:24:38:
d1:c1:09:a4:ac:dc:41:50:b8:5e:e7:69:b8:56:83:7a:dd:a3:
77:17:13:a7:cc:37:e4:95:9a:06:7d:f9:65:a1:ed:ab:cb:92:
ac:c5:83:bc:7f:71:17:e1:18:3f:64:d9:45:43:0b:c6:af:d3:
9d:c1:6a:6f:34:88:eb:66:88:4e:37:bd:54:27:48:b5:a2:f4:
fe:b6:58:d7:08:94:07:85:8b:fc:4d:30:49:20:c0:a7:80:5e:
fd:46:71:89:d8:4e:e4:c8:a2:68:31:a1:60:c8:41:13:b7:d9:
8e:ef:6e:95:84:49:97:c9:cb:c2:f5:d5:36:b4:a1:75:fd:7b:
71:cd:d8:fb:11:54:51:ee:45:f8:ee:c1:88:77:a8:39:9b:73:
f5:da:5a:da:27:5c:ab:da:f8:84:db:61:4f:a8:82:44:df:53:
ab:3a:67:19:a3:c1:83:b2:7d:0d:0c:ec:51:75:b0:5e:f3:c3:
9f:2a:74:32:9f:56:3d:80:b3:ae:78:8f:42:68:1e:af:92:29:
15:b0:b9:ef:84:dc:0d:9b:02:13:ba:a2:d6:c6:5d:43:af:12:
36:a0:6d:da:78:19:5e:00:c1:df:a6:a0:eb:49:f7:9b:53:7d:
b8:13:50:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:25:25 2025 by rpki-client