Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/35293898-8f2f-4418-ad6b-4050c067d3dd.roa
File: 35293898-8f2f-4418-ad6b-4050c067d3dd.roa (raw, json)
Hash identifier: 0ZeyxDMzs/kPSmuiGcX4kmDmxU/J6NI7sQ1TyEhmgsw=
Subject key identifier: 5A:4F:AB:67:4D:69:AC:07:B0:E1:15:18:35:E6:22:89:99:DC:F6:1B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1A514B82C234E81CC1B67344C5836C740DD6625E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/35293898-8f2f-4418-ad6b-4050c067d3dd.roa
Signing time: Thu 06 Mar 2025 01:53:19 +0000
ROA not before: Thu 06 Mar 2025 01:53:19 +0000
ROA not after: Thu 10 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:51:4b:82:c2:34:e8:1c:c1:b6:73:44:c5:83:6c:74:0d:d6:62:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 6 01:53:19 2025 GMT
Not After : Apr 10 23:59:59 2025 GMT
Subject: serialNumber=98833e6ca06b7893b5bb07fc70301aede4007bcd9167e9d252e8bc8f6cc4f1e9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:06:bc:24:47:9e:fc:bc:0d:2f:e4:37:e2:
50:ef:a4:86:82:af:ab:e4:ee:58:a1:a0:24:49:85:
ec:a6:e4:02:e6:b5:57:83:79:a1:5e:e2:bf:1d:55:
67:75:78:2f:ca:82:4f:35:0d:be:1c:6d:8c:dc:ad:
e2:11:c4:3f:de:78:ed:f7:b8:33:f7:ce:6b:81:f9:
4d:5e:21:48:51:33:06:20:0c:e4:90:95:5e:73:18:
7e:5e:9e:de:11:38:9f:94:bf:4c:4e:0c:1a:79:44:
a0:27:09:7e:ee:fe:5e:1a:a8:ce:26:91:54:37:9e:
71:06:f1:97:4d:66:59:22:35:6f:60:12:2c:c9:51:
ff:01:52:d7:41:27:22:7f:1c:ad:47:89:45:c8:6e:
fa:d0:08:75:71:9b:75:a9:9a:cc:f4:52:4e:59:fc:
98:dd:6a:82:22:13:07:4c:21:a1:54:96:55:f0:69:
d9:7f:af:fc:f3:40:4c:cf:a7:cc:e1:4f:5f:cb:d5:
e5:b7:8d:a1:32:89:48:51:5d:a8:86:a1:07:bc:60:
20:c8:5a:da:1f:02:92:9c:b3:99:81:ce:0d:2b:1c:
6c:ef:a5:d5:f3:06:03:35:33:c6:ef:63:8b:e0:1f:
f0:48:e7:e6:c8:2f:00:e4:0e:34:85:df:4f:8f:cd:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4F:AB:67:4D:69:AC:07:B0:E1:15:18:35:E6:22:89:99:DC:F6:1B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/35293898-8f2f-4418-ad6b-4050c067d3dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b2:1a:d8:e0:4f:d8:bf:1f:3f:e4:05:73:39:db:ee:9e:19:
95:7f:7e:ac:51:5c:ac:bd:79:3d:67:96:e5:27:05:15:bf:f8:
76:f4:7a:fb:31:38:26:f3:a5:23:7d:2c:94:02:11:61:2b:a2:
e7:81:c8:71:dc:cb:40:48:0b:52:54:4d:04:bd:fb:5f:04:ed:
c8:50:ba:9f:c2:37:5c:0f:af:e2:4c:8f:76:81:63:fa:2a:36:
3f:95:1b:18:26:6b:57:61:7d:e9:e7:60:ff:eb:59:78:fd:4d:
11:af:3a:ee:3a:23:97:02:a1:3c:c0:1f:1a:9b:db:27:bd:10:
e6:e3:78:22:48:da:5f:d9:80:57:d7:f2:5e:0b:c8:4a:88:fd:
36:18:75:6d:b6:d0:c8:59:73:66:0c:91:3a:c0:aa:da:18:c2:
b4:00:70:40:cb:1c:58:37:4c:22:2e:79:a8:85:5a:ec:eb:90:
f4:52:21:f6:43:6f:49:b9:29:0c:5f:a5:87:ac:62:26:b5:94:
a5:82:3f:45:77:2c:0e:02:c3:3f:b3:68:96:94:85:1c:5f:72:
42:0e:f0:2a:74:6e:4f:fb:4a:cd:1f:74:16:db:33:f0:72:54:
21:2a:17:80:45:eb:74:1f:f1:6e:79:35:91:b3:01:e9:a2:73:
f4:b5:c9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:11:23 2025 by rpki-client