Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/33c55846-476a-4d33-84c4-c7ebe842fe5c.roa
File: 33c55846-476a-4d33-84c4-c7ebe842fe5c.roa (raw, json)
Hash identifier: OGBMyGgFpFBQmGpKajDurKUixaDNyu4wnuxaqFls82A=
Subject key identifier: AD:08:C6:21:33:34:EE:F0:27:F7:A3:5A:C6:66:48:71:01:A9:B6:58
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 09DDC781F31578A82841FCFD11A2999ABD44FD0A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/33c55846-476a-4d33-84c4-c7ebe842fe5c.roa
Signing time: Sun 28 Jul 2024 00:00:00 +0000
ROA not before: Sun 28 Jul 2024 00:00:00 +0000
ROA not after: Sun 01 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:dd:c7:81:f3:15:78:a8:28:41:fc:fd:11:a2:99:9a:bd:44:fd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 28 00:00:00 2024 GMT
Not After : Sep 1 23:59:59 2024 GMT
Subject: serialNumber=087c2017116f5774c38af43989405ed5d4c53c441ed4efd4d2000f9a233bbfb4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:7d:b5:5a:36:ce:3f:d3:82:d6:0c:45:11:
b8:61:9c:d1:ff:56:85:5a:22:90:92:6b:da:42:70:
ab:db:ba:d6:66:bc:b2:7e:1a:2b:4a:c6:15:f8:fc:
ec:a4:38:8a:e4:77:5d:11:8c:c8:f9:00:b5:0a:bd:
83:26:fc:38:51:fe:55:9a:52:09:82:54:ca:9b:b2:
ea:b9:c9:9f:4d:e6:21:1d:68:98:59:1b:d8:1c:b3:
25:40:5d:52:10:41:25:4b:86:db:70:c4:fc:73:7f:
40:ef:13:e9:2b:97:f1:e0:a5:91:d6:01:27:a1:fe:
8f:3b:fb:d2:c8:9d:fa:17:a3:2b:ed:eb:bf:27:47:
58:b9:4f:32:7d:fd:d2:83:49:93:90:7f:7e:a0:65:
cf:af:c5:a5:c6:ec:93:1f:9e:fc:74:b6:9c:07:be:
9c:fa:bb:5a:90:ab:4b:ac:5f:2d:f1:ed:71:ba:22:
9a:a4:26:b3:82:0b:53:51:33:eb:71:10:62:e0:db:
e3:37:87:f0:e4:42:ce:9d:01:2c:e0:69:bf:aa:d6:
f7:5c:a6:f7:be:8c:88:e5:6d:ab:3f:e8:1a:2a:de:
5c:ca:1a:22:6a:e1:3c:0e:37:84:26:49:ce:32:37:
f2:49:dc:41:00:8a:42:36:77:6a:a2:b2:7c:0e:0b:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:08:C6:21:33:34:EE:F0:27:F7:A3:5A:C6:66:48:71:01:A9:B6:58
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/33c55846-476a-4d33-84c4-c7ebe842fe5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:05:7a:6a:be:bb:a7:ff:de:94:30:26:27:e2:0d:74:d1:9f:
77:ed:e7:44:de:16:07:54:29:73:f2:94:52:98:1d:0a:d0:3b:
bc:a1:1b:76:a0:59:39:78:03:c6:28:41:26:07:e8:10:8c:94:
86:e2:83:d8:07:8f:8f:32:4c:ed:19:17:5e:42:5a:b0:1e:8f:
ad:19:ab:27:7f:01:c0:07:42:71:e6:a8:ab:08:1f:16:ca:3c:
63:a2:c4:f4:b4:62:5c:28:f5:d0:0e:9d:98:af:92:7e:ec:3e:
4c:87:66:a1:4a:4a:90:cc:e6:d7:a5:04:49:4f:18:b5:e9:36:
19:67:a7:2a:27:41:d5:a7:fe:66:b0:4d:0f:ec:53:39:d5:e7:
e9:f8:48:c6:b3:41:dd:09:70:45:a4:8e:a9:0a:3c:a6:b4:a1:
c5:34:6b:04:56:ec:6d:ea:e6:15:26:00:0e:ac:61:21:40:f2:
4e:b6:54:44:80:60:97:b0:a8:b9:61:dc:0b:07:b1:32:a6:93:
70:61:52:49:3b:6d:b0:d4:e7:db:61:f8:05:00:15:bf:b7:64:
e0:ed:bb:c7:8f:0f:1a:c0:c5:6b:9e:ed:40:9c:9c:3c:8f:9b:
79:aa:7d:ad:6c:7c:d9:2c:2f:f6:34:1b:d0:d9:cd:da:61:60:
4b:9f:cd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:15:55 2025 by rpki-client