Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2c43d4eb-09b6-465a-bae7-a1b73e03a968.roa
File: 2c43d4eb-09b6-465a-bae7-a1b73e03a968.roa (raw, json)
Hash identifier: cxsCzxBgXUK9rfWbXVNW1HjAB9KGRo369s7jfUYyqJo=
Subject key identifier: 5A:5E:89:66:50:D7:24:AC:2C:07:E5:EC:ED:CB:47:AA:66:70:E6:11
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 24875DE5DAD7B3A1BDC92BD15848758DCD6647E4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2c43d4eb-09b6-465a-bae7-a1b73e03a968.roa
Signing time: Fri 05 Jul 2024 00:00:00 +0000
ROA not before: Fri 05 Jul 2024 00:00:00 +0000
ROA not after: Fri 09 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:87:5d:e5:da:d7:b3:a1:bd:c9:2b:d1:58:48:75:8d:cd:66:47:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 5 00:00:00 2024 GMT
Not After : Aug 9 23:59:59 2024 GMT
Subject: serialNumber=66cb55711a0d0c3a9edabe29f7dc9d48a505a1e44de368826161a20fbe758fc6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:9e:6c:ee:e1:10:e1:f3:a8:81:61:cb:12:
b2:68:1b:fd:49:3e:b3:df:c9:5d:1e:9e:6a:ec:28:
fe:dc:9d:b6:86:c7:fb:30:43:a3:b5:3a:0e:8f:0f:
82:52:42:6c:6c:5a:a8:9b:7d:9f:1f:e6:19:0a:93:
2d:42:71:de:11:22:49:3b:ff:f2:c9:9b:e4:ef:aa:
80:6d:5b:6c:04:ab:0d:71:11:eb:68:65:40:27:43:
9f:0f:12:93:fe:24:4f:7a:a0:98:6a:c3:13:db:f2:
22:14:8a:b3:72:3e:b6:2b:2e:9c:10:33:84:7a:62:
18:17:d2:6a:d1:48:56:e2:f6:79:89:7d:87:da:9d:
d3:8e:48:69:e2:4a:bb:39:cb:51:37:cd:fa:e2:fb:
47:1e:85:ee:a0:77:39:e6:7c:b1:34:88:96:6d:7e:
27:d5:09:f8:4e:57:2c:8a:cb:65:da:17:ea:99:0f:
be:cc:4b:08:12:5b:c1:81:5f:4f:b1:4c:33:51:24:
27:1f:95:9e:96:2b:97:90:47:ca:e0:59:80:b5:97:
33:a3:16:10:8e:0b:f1:6e:1e:61:aa:2d:db:33:b6:
49:b4:13:6c:08:7d:e0:e1:f0:ca:9d:df:06:ca:4d:
67:2c:ad:09:5d:86:cb:cf:b8:04:c3:52:d8:2f:58:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:89:66:50:D7:24:AC:2C:07:E5:EC:ED:CB:47:AA:66:70:E6:11
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2c43d4eb-09b6-465a-bae7-a1b73e03a968.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d4:3b:36:9c:24:8c:43:b0:f2:f3:61:04:54:41:00:a8:ed:
79:c1:af:b4:fa:81:96:85:a6:f3:bb:6b:bd:3a:8a:51:01:ec:
5c:86:d0:a8:65:6a:a5:0e:7d:85:38:f2:66:a8:56:8f:a9:86:
d7:b6:b3:10:fe:13:e7:ae:43:96:bc:f3:05:57:f5:89:87:24:
73:8c:1f:88:3b:cc:7a:fd:24:1c:3c:52:cd:7a:0f:06:e3:2f:
9d:fa:8a:a8:27:fa:f8:b4:85:b3:a9:00:9c:fc:3c:41:84:31:
b0:83:8e:92:5a:d5:89:48:ba:04:79:5d:aa:32:67:5c:46:f8:
60:60:7d:32:ae:cf:3a:d8:30:26:6d:1c:8f:bd:03:6b:91:ce:
09:ec:5c:22:c0:c1:71:7e:e8:4e:19:ac:67:c0:ac:5e:dd:c9:
c0:68:93:be:94:4b:59:b9:c9:09:39:33:d1:26:44:f0:f5:06:
aa:36:72:86:34:66:72:a3:08:36:d6:45:df:3b:c1:21:72:dd:
4a:98:7b:74:71:14:0a:60:9b:e3:a3:0c:9e:8e:13:4c:8d:83:
14:1a:19:46:87:46:ea:e2:53:a1:a7:09:64:63:00:5f:d2:5c:
65:4f:47:70:3a:a4:b7:96:85:44:10:48:5b:83:72:28:07:b7:
61:48:04:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:53:31 2025 by rpki-client