Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d797106-00e1-49cc-a90a-3dc0ccb46cd8.roa
File: 2d797106-00e1-49cc-a90a-3dc0ccb46cd8.roa (raw, json)
Hash identifier: vrKpSw2JCaJ5ls415ntovmHpSVv7lrZD0KobjE2FqaM=
Subject key identifier: 8B:35:B2:62:06:C9:AF:77:AD:71:E5:B9:A2:D7:D9:E4:1C:90:CF:DA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 119588DBFD187B8EBD9C30101FFDDB7655CFED85
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d797106-00e1-49cc-a90a-3dc0ccb46cd8.roa
Signing time: Mon 04 Mar 2024 00:00:00 +0000
ROA not before: Mon 04 Mar 2024 00:00:00 +0000
ROA not after: Mon 08 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:95:88:db:fd:18:7b:8e:bd:9c:30:10:1f:fd:db:76:55:cf:ed:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 4 00:00:00 2024 GMT
Not After : Apr 8 23:59:59 2024 GMT
Subject: serialNumber=37824cf7cef7d5dff35e74c2e6372a1ae7c83b848b914e7ef7f3164e417eceb0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:44:79:5d:58:d4:0a:29:0a:24:79:12:fd:
95:f1:f1:f8:35:1a:df:6e:8c:7d:67:99:2b:93:0d:
9e:a2:ea:ee:c0:43:f2:d1:d4:4b:7c:f9:44:dd:75:
a0:40:af:71:a1:cb:81:1a:b5:49:43:3e:d5:cc:5a:
4c:9e:79:6b:fb:06:d6:c5:bc:eb:4a:a8:48:16:47:
91:7b:7a:8e:5c:70:33:1a:44:c0:e1:d2:a6:d7:72:
97:17:d3:db:22:9c:a1:91:13:e4:28:8c:ad:4c:5c:
fe:ac:68:b6:4a:a3:1e:fc:0f:0f:9d:1c:b5:1e:c3:
d7:9a:29:70:b4:10:25:10:38:2e:9b:21:79:39:19:
89:d1:0f:ff:15:c1:ce:3b:77:6e:05:74:78:a5:f9:
6d:5e:30:89:96:38:37:e6:09:29:7d:59:be:c4:bd:
44:67:3e:05:fe:da:74:36:d4:5f:03:9e:1e:dd:a5:
84:51:57:13:bd:e1:69:10:31:69:a8:84:75:4b:07:
9e:48:b8:63:a3:a0:33:8d:ae:1e:94:0a:f7:b0:64:
62:09:a4:87:b5:72:b0:46:44:c0:11:43:c8:1e:1f:
7b:26:91:36:65:9e:f8:b8:9c:60:d9:14:2b:bf:9c:
a8:c1:88:36:5d:7d:d5:ba:32:84:25:7d:69:49:71:
b9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:35:B2:62:06:C9:AF:77:AD:71:E5:B9:A2:D7:D9:E4:1C:90:CF:DA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d797106-00e1-49cc-a90a-3dc0ccb46cd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
64:1c:33:3a:52:2d:6c:71:66:57:0d:ac:f0:d9:e7:f2:c9:c5:
70:b2:e0:4a:73:bd:12:74:d9:cf:db:c8:cf:35:0d:bf:6b:1f:
fd:a3:11:3a:57:d5:e2:09:0d:f8:62:3f:b2:df:36:fd:65:4b:
d5:eb:ad:da:15:cf:79:4d:1f:7c:90:02:9a:48:a9:bb:20:62:
e5:4a:1b:d1:9c:aa:1d:b7:15:49:08:24:a2:ad:65:77:ac:47:
b6:3d:49:d4:91:be:ff:67:60:c6:cf:d7:20:e1:9a:88:54:ad:
50:78:06:82:01:bd:15:b8:35:d6:08:85:00:61:89:14:c2:8a:
df:e7:92:cf:38:8d:fa:21:4a:94:52:69:4e:49:91:e1:c0:4b:
38:b0:85:e5:4b:21:ef:57:aa:f8:3e:34:83:3c:48:e2:f3:9f:
b4:1d:d5:2d:91:be:59:a5:af:03:26:bf:71:bd:1d:d5:ae:41:
a8:11:65:8e:00:ec:1d:05:fe:3c:6b:fc:84:3c:d9:22:bc:9f:
d2:0a:8a:38:48:8c:76:22:87:59:fa:cf:80:e1:b7:9e:f9:57:
a3:1e:29:a9:8b:22:1f:51:0d:31:62:db:4c:dd:79:26:6b:9b:
62:db:c3:c7:37:00:86:b2:26:5f:2a:39:aa:c8:b2:76:37:64:
f9:8c:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:21:32 2025 by rpki-client