Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/369e1761-7af5-47af-9f3e-b9c76e5784f6.roa
File: 369e1761-7af5-47af-9f3e-b9c76e5784f6.roa (raw, json)
Hash identifier: GNRPNfOMSkfrMh3Po4DO7xUaDAyXiavlIffIKvaf8o8=
Subject key identifier: D8:37:58:A2:D7:9D:D7:BB:B8:DE:A6:36:C5:42:46:79:1D:D4:D0:36
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1DF78FE0B203476940D2CBC84DAE5D38F88C9DC1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/369e1761-7af5-47af-9f3e-b9c76e5784f6.roa
Signing time: Fri 21 Mar 2025 05:18:18 +0000
ROA not before: Fri 21 Mar 2025 05:18:18 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:f7:8f:e0:b2:03:47:69:40:d2:cb:c8:4d:ae:5d:38:f8:8c:9d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 21 05:18:18 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: serialNumber=a5f484717654ed02f52b39485b19989094fb70f2139f289d885cf660daa280ad, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:f3:2d:25:91:3a:33:53:c2:a2:4d:c5:f8:
09:b1:3a:3e:57:79:84:8a:ad:f3:f1:18:44:ea:f9:
2a:47:20:31:99:3d:02:8a:da:e9:4d:ca:6b:1f:c0:
b5:49:38:a6:ee:a6:4b:f9:ea:2a:f1:9b:e5:bf:fd:
9d:3c:9d:d0:f8:21:1e:69:34:a4:f9:38:ef:46:c8:
fc:18:b5:73:85:ca:34:ba:a7:62:d6:60:95:df:d8:
d0:46:64:92:9b:9b:12:00:9e:f0:dc:a6:51:2c:e8:
da:de:47:97:18:e6:61:eb:e2:43:f5:20:34:4a:74:
ca:a5:e0:dc:f6:93:9e:fd:e4:7f:83:f3:37:70:d5:
2e:e3:ae:d0:56:f7:d6:31:10:42:de:76:e7:4f:16:
3a:4c:8d:53:6b:7e:20:41:51:88:e0:c0:4d:b0:d6:
7d:08:e1:34:6c:bc:53:6e:f2:37:7f:a4:09:a6:54:
ec:0f:c9:0c:03:7e:03:c5:bc:96:e2:30:8e:f0:15:
8c:41:9c:9a:e4:9f:89:3c:d9:3f:bc:4f:4d:bd:4a:
b4:a9:df:d8:87:37:18:45:db:29:9f:8f:e7:0c:08:
5c:38:97:84:c8:34:5c:8b:75:2c:d7:ab:2d:48:eb:
52:6e:f0:44:02:70:75:60:2c:26:60:fe:23:49:22:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:37:58:A2:D7:9D:D7:BB:B8:DE:A6:36:C5:42:46:79:1D:D4:D0:36
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/369e1761-7af5-47af-9f3e-b9c76e5784f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
55:20:90:36:69:30:3f:91:b4:32:e6:ad:bf:75:40:ed:36:cd:
a7:33:8b:5a:b3:bb:30:37:50:97:c2:0b:31:64:3b:77:52:35:
2a:4e:49:ee:4e:c2:79:a6:77:b2:5d:24:9a:3f:71:b0:60:32:
45:28:04:fd:b9:4f:1a:ce:7a:2e:c5:c6:4b:a0:3a:8f:14:0b:
45:56:85:cc:a7:e1:09:35:9e:36:86:f6:17:9e:d6:0a:3d:5f:
50:47:94:5a:b9:a0:d0:58:76:78:56:e1:6e:0a:92:19:75:cd:
d8:b9:c8:40:cc:36:db:53:37:e3:ab:62:3d:9e:e9:0f:09:ea:
db:0a:c8:08:fa:45:59:d3:ca:90:5b:44:d5:38:5c:5e:ac:dd:
db:a6:bb:c2:4e:1e:e4:3e:11:a4:a2:47:d8:3f:4f:aa:5d:1d:
27:b2:93:cc:e3:ff:7c:f3:f7:f3:5c:27:52:89:42:6d:b7:42:
50:f9:22:40:43:53:56:40:2d:05:10:99:ac:e2:30:d8:1f:3e:
5d:8b:ca:fd:9f:96:18:aa:13:d9:4d:c5:59:fb:b9:e5:77:41:
79:2b:9f:4b:cb:7e:a0:94:7b:46:fc:68:5a:d6:3c:88:cd:47:
31:57:f3:c4:04:5f:e2:f6:40:03:df:86:8c:55:b5:37:a8:04:
55:50:36:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:55:13 2025 by rpki-client