Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/262861fc-0b75-437f-a2c8-be5a7862f01c.roa
File: 262861fc-0b75-437f-a2c8-be5a7862f01c.roa (raw, json)
Hash identifier: qSBLb1MBxwThTmZfMEEKrTFhaACKJby8z0rguuAh3c8=
Subject key identifier: E4:5F:CE:D1:A4:65:2E:2D:C6:BB:8B:64:BF:9E:77:40:3A:6D:0A:5A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 41F92D24B39913A78BD35582D5579316A81C0F1F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/262861fc-0b75-437f-a2c8-be5a7862f01c.roa
Signing time: Wed 05 Mar 2025 14:33:20 +0000
ROA not before: Wed 05 Mar 2025 14:33:20 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f9:2d:24:b3:99:13:a7:8b:d3:55:82:d5:57:93:16:a8:1c:0f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 5 14:33:20 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: serialNumber=2847292c2f58a621c85a1c9010984b7be2767cf23bc2ef7117c284eefc255510, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f0:e7:bb:17:a0:ad:da:82:d8:48:a9:c8:c5:
40:2f:a6:e1:ae:d0:b7:0a:ec:d8:b5:ca:4e:f0:47:
e5:f7:f1:f0:0d:20:d2:82:1e:1c:64:13:f2:01:c6:
71:ec:47:b6:90:24:bd:41:19:b0:0b:93:88:73:c7:
3d:b4:6f:77:9a:89:a0:d8:21:f7:6e:04:be:84:b3:
be:24:93:4f:dd:46:f2:f4:2e:7e:8e:cb:f2:05:ba:
26:9a:a0:6a:5f:f4:c6:04:fe:5b:31:0b:ec:f5:81:
b7:69:49:77:84:0d:96:22:01:40:01:f4:d9:b9:20:
14:20:1a:08:41:77:01:ce:e9:36:e7:4d:be:14:ec:
47:da:61:de:f2:af:20:81:e2:1e:ce:2b:1b:e2:26:
11:07:17:20:8e:cc:57:e9:ea:0d:4d:44:ed:c0:10:
c5:47:7d:78:4c:e1:26:50:a6:f9:7e:55:0f:1e:c1:
81:88:d9:26:56:46:48:e3:b2:c0:7d:3f:2b:68:b6:
d7:d4:50:c3:75:e8:7e:8a:3a:8c:27:6a:ac:7a:a2:
b3:0a:fd:fb:d0:cc:a8:11:23:ff:b9:8c:f9:d5:ce:
f9:2d:b9:ee:4a:bc:fc:6c:e4:d4:39:58:30:d8:36:
4d:6c:42:9e:14:e7:95:e5:07:ea:5c:5b:ee:5a:e2:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5F:CE:D1:A4:65:2E:2D:C6:BB:8B:64:BF:9E:77:40:3A:6D:0A:5A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/262861fc-0b75-437f-a2c8-be5a7862f01c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
18:55:27:9c:a3:77:ae:2c:fd:ca:10:65:5d:ae:65:fb:4a:e4:
4b:0a:b9:58:0e:ba:c4:ad:15:a8:9f:7c:30:2b:72:18:da:32:
bf:4f:27:5b:55:21:3b:a5:c1:d9:c0:b3:96:24:cf:0d:7e:73:
5c:45:68:54:bc:fb:89:c0:67:67:f1:4b:1b:86:a4:3f:40:3d:
a2:7e:63:40:09:b1:d6:55:15:7d:03:c8:0f:d9:fc:8a:d9:c1:
d0:a7:6a:96:1c:5b:a6:3d:5b:9c:b9:76:c3:2f:bf:36:e2:22:
cb:d2:20:16:7a:bf:32:6b:49:dc:35:31:59:79:85:38:ea:60:
ed:62:f4:c6:db:25:0a:5e:06:5b:2c:97:93:a3:d8:d5:10:f0:
9c:99:51:80:45:e5:71:bd:85:75:8e:32:32:b2:7a:29:62:ad:
55:7c:73:3c:93:3d:1c:95:c3:6e:72:bc:36:e9:80:02:37:85:
95:55:b1:c6:95:d2:ad:68:41:cb:38:34:c7:eb:de:f3:8c:cb:
62:ff:ca:99:fa:52:ba:fa:4b:5b:42:ba:bd:5e:99:2d:34:0b:
47:c0:8d:10:b8:61:06:0b:86:12:fe:b9:4c:08:f3:a6:0f:d0:
a4:b8:70:08:76:1d:3d:72:9e:6c:b0:b9:b7:79:1d:7d:d9:41:
c1:de:d6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:38:41 2025 by rpki-client