Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26ab06c6-8a56-481a-9114-4d517180178f.roa
File: 26ab06c6-8a56-481a-9114-4d517180178f.roa (raw, json)
Hash identifier: SwDWp7dM9jK/kdEhqj5DcX88mAMEHwx8c7fszz6Rs2s=
Subject key identifier: 23:DE:78:32:10:14:AC:B9:56:84:66:62:45:90:4E:AC:8B:87:58:F1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5CCE962E49FA61A7490ECC53FAAF1447BECF85EB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26ab06c6-8a56-481a-9114-4d517180178f.roa
Signing time: Sun 05 Jan 2025 00:00:00 +0000
ROA not before: Sun 05 Jan 2025 00:00:00 +0000
ROA not after: Sun 09 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ce:96:2e:49:fa:61:a7:49:0e:cc:53:fa:af:14:47:be:cf:85:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 5 00:00:00 2025 GMT
Not After : Feb 9 23:59:59 2025 GMT
Subject: serialNumber=70f66d09f09a09bb5770d3139f13c5484fef78a9b74cf7f73701c21e7096c85f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:87:b1:33:4e:da:aa:9f:78:e6:f9:12:81:33:
0e:18:b2:3f:84:f8:7b:67:1f:3c:fb:8f:54:66:c7:
fa:b9:d5:b9:d7:db:43:bd:2d:49:7c:a0:36:a8:ea:
8d:df:f0:f9:f2:3c:21:ed:3d:90:43:00:d3:02:c0:
42:5e:ce:3b:b4:ef:af:fc:c1:47:d5:6f:84:80:68:
56:ee:8b:c4:60:54:54:a0:48:59:96:05:c2:5e:84:
b9:ab:80:b9:8a:d2:5a:06:1b:c3:25:02:fa:f1:00:
05:af:5f:ad:06:67:eb:1f:de:cb:88:15:94:70:80:
30:5e:b0:10:08:74:a8:b0:db:9b:cd:14:d6:08:55:
ea:0d:9d:90:64:a8:68:db:27:f9:63:d5:76:da:c9:
9d:99:1e:48:c9:b0:77:2a:90:8d:68:d0:ee:b4:e3:
28:6d:a4:14:ee:bd:72:38:80:86:c4:cc:c5:b7:f2:
b5:bd:70:28:e9:29:56:f5:60:a6:f1:73:51:50:3a:
a2:03:c0:ff:1e:9c:3a:b0:2d:fd:ff:37:47:e6:a3:
4b:18:38:5c:7c:ad:45:ed:e2:7b:c4:20:a4:95:f8:
ec:78:f4:c0:cd:ca:3a:8e:6b:88:2a:59:92:9b:06:
e1:28:b9:22:e2:3d:b4:64:3f:35:1f:71:a2:e9:a3:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DE:78:32:10:14:AC:B9:56:84:66:62:45:90:4E:AC:8B:87:58:F1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26ab06c6-8a56-481a-9114-4d517180178f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
26:19:c6:1f:7d:5a:fe:7e:62:59:90:71:c8:a1:f7:d4:fa:21:
16:87:9e:fc:90:8b:5f:65:24:72:ec:48:5a:a0:16:5a:ef:56:
72:0a:ef:82:bd:56:05:9e:5a:51:fc:dd:14:ab:c2:79:2a:79:
e1:6e:ac:9d:3b:35:78:bb:20:ce:fa:cf:1c:d9:dd:2c:39:75:
25:ef:29:45:6e:b1:1b:4b:4d:08:f6:68:c9:28:76:ff:7a:a9:
99:33:cf:3e:29:17:41:0a:c8:da:78:33:3f:13:d1:3b:b1:c0:
c0:ee:5b:e1:5b:a8:e9:5e:39:ae:36:23:4c:38:f4:d6:71:7f:
05:5b:6e:fc:83:09:0b:a1:f6:d0:7c:7d:6a:89:14:92:af:74:
26:1f:ff:41:a2:34:36:ad:ca:62:29:19:fe:94:cc:38:9a:bd:
1c:c0:f3:20:83:52:3e:8a:d3:c9:9f:91:6c:85:19:57:23:1a:
52:c9:95:d0:1e:2a:f2:66:03:d7:f1:4c:f8:96:ce:ca:45:7b:
df:33:f6:59:ea:2e:54:6c:74:f2:f0:09:88:53:09:aa:e1:fc:
40:b8:6f:18:ba:2e:5a:aa:68:b1:96:f6:7f:33:11:59:7e:87:
42:58:d6:8f:88:d4:19:c1:4e:48:52:df:a0:e1:16:5f:be:c0:
ad:14:63:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:52 2025 by rpki-client