Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/32e58116-3596-4356-a6cb-6073a0e029b5.roa
File: 32e58116-3596-4356-a6cb-6073a0e029b5.roa (raw, json)
Hash identifier: ertyLV0NxLaaayXuLBRAzMPWUB5TIcY0stLkkvDit6A=
Subject key identifier: 57:21:6B:28:F0:2F:04:C4:DB:3F:9E:9A:73:9A:5F:B2:FA:C3:42:5E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3571EC061E1CE9E9FDDA62CDBD34A572FF4391CE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/32e58116-3596-4356-a6cb-6073a0e029b5.roa
Signing time: Fri 29 Mar 2024 00:00:00 +0000
ROA not before: Fri 29 Mar 2024 00:00:00 +0000
ROA not after: Fri 03 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:71:ec:06:1e:1c:e9:e9:fd:da:62:cd:bd:34:a5:72:ff:43:91:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 29 00:00:00 2024 GMT
Not After : May 3 23:59:59 2024 GMT
Subject: serialNumber=1fd85c24015a1fdc74f0bdbef478f10b2f7e3aa59a67a41ff8d9bd05dffd64e9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:19:ee:e3:ae:54:32:ed:ee:e2:98:9a:2e:
70:55:4a:ff:8e:54:0e:30:de:2e:f9:91:f3:c9:58:
e8:80:28:83:76:cb:73:fc:fd:f3:ed:cd:eb:4c:80:
b5:91:35:7b:40:fa:b5:96:40:ed:29:13:c4:35:ac:
c0:ec:d3:e9:70:3f:3f:f3:bc:86:b5:06:ed:44:a7:
0b:70:37:88:6a:1e:ea:7c:df:88:35:cc:d9:c5:fe:
0f:d4:a7:88:f1:c8:e4:09:0c:f7:f5:0b:87:54:14:
a7:65:d3:0b:e5:84:b6:cb:44:0b:1a:24:ec:35:bf:
27:59:1c:ab:d5:85:ed:04:13:12:ff:0d:4d:f7:a6:
9e:b5:1a:e2:f1:e7:54:d2:50:12:97:50:79:f1:b9:
a1:e7:b2:93:7a:61:a0:dc:73:35:1e:b6:43:98:fc:
88:a8:95:4c:e8:4d:93:8a:94:46:54:3c:ab:d6:46:
24:47:fe:3a:37:9d:39:9f:7e:e3:64:cc:56:81:94:
20:d8:41:0c:f5:74:8a:e7:8c:02:fd:15:17:cf:8e:
fc:f6:a4:cc:22:dd:86:12:90:94:1e:f3:1e:f1:f0:
8a:0b:75:4e:ae:8f:62:6a:00:18:b8:f6:d0:ba:88:
b2:a0:7b:c6:f7:3d:99:53:a5:97:f0:8e:f5:03:8e:
6d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:21:6B:28:F0:2F:04:C4:DB:3F:9E:9A:73:9A:5F:B2:FA:C3:42:5E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/32e58116-3596-4356-a6cb-6073a0e029b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:4e:94:48:c9:13:ce:a5:e4:c4:f3:0a:c6:58:e1:51:67:f3:
6c:a1:f8:72:8a:e4:1a:29:2d:b2:2d:00:2f:2f:0a:a4:12:01:
ba:c2:9d:c6:df:93:f6:fc:7c:9a:93:30:f0:cc:fb:87:fe:ba:
04:58:73:8c:1b:95:7b:ad:b5:db:33:7e:1d:59:14:3a:94:e0:
1c:0c:79:0b:f0:23:ee:29:50:9b:42:fb:f6:6e:c9:9d:5c:6c:
cf:ec:8b:8f:87:6a:65:e2:ad:9d:be:c5:3b:05:da:1c:7e:cf:
ed:91:45:b8:2f:d8:11:28:87:cf:bf:eb:1b:c5:20:68:ea:5a:
90:0e:fd:d9:c5:f2:e6:81:36:ce:9c:8b:dd:a4:60:93:a0:91:
aa:9c:72:bf:1b:17:5b:fa:cb:f0:b1:2b:15:9e:ac:9d:85:02:
23:ce:bc:f4:76:92:63:28:22:f8:cd:bd:ff:0a:ef:2b:29:dd:
73:8f:40:25:15:0d:49:d9:86:8b:5f:db:f0:03:c8:61:3f:9d:
b1:76:82:56:91:37:b8:da:9d:3a:cc:dd:b5:d3:12:51:34:ac:
9e:c4:23:0c:ae:30:d2:81:a9:4d:7d:a4:36:9b:91:d7:98:99:
50:0a:50:7e:25:cc:c2:a6:f5:7c:40:48:25:83:35:fb:99:c0:
7d:dd:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:52 2025 by rpki-client