Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/36fd68fe-aaa5-445d-86d5-d65c310c80e0.roa
File: 36fd68fe-aaa5-445d-86d5-d65c310c80e0.roa (raw, json)
Hash identifier: GyNlf4+j4HanEJoryIPVIxBx7jLUk+5GuozNtvSXA8w=
Subject key identifier: 5C:B4:AC:A5:3A:8B:57:11:E7:BE:EC:F3:AB:61:D6:96:2A:2E:6C:AF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7D7407DFF35EF876ED13D9444A4FD5766FF740F9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/36fd68fe-aaa5-445d-86d5-d65c310c80e0.roa
Signing time: Thu 09 May 2024 00:00:00 +0000
ROA not before: Thu 09 May 2024 00:00:00 +0000
ROA not after: Thu 13 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:74:07:df:f3:5e:f8:76:ed:13:d9:44:4a:4f:d5:76:6f:f7:40:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 9 00:00:00 2024 GMT
Not After : Jun 13 23:59:59 2024 GMT
Subject: serialNumber=b21c12f41b07ed8f2ffff1140aef48118a3d2b0946ccc9150135b5dc40ff0a66, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:54:46:9d:6c:98:0f:d4:88:0b:e9:5d:40:
f6:58:95:6d:ef:36:8f:d3:60:2b:43:c3:64:a9:ff:
1a:cb:52:b9:2e:c5:27:e2:36:a3:d5:46:73:62:1e:
bd:ad:47:da:7d:1b:58:16:68:40:81:aa:ca:41:d2:
69:17:6a:5e:82:d4:37:1c:2a:bd:e4:75:cf:eb:7a:
8f:4e:e3:1e:30:21:c9:44:22:4c:f8:9b:3a:68:e0:
8a:cf:c8:6e:03:17:29:5c:5e:44:8d:23:b7:da:fe:
b2:fb:6c:77:20:24:9f:04:cb:d7:0e:5e:62:f1:e3:
4d:f3:38:20:69:6c:03:b8:42:f4:da:80:31:37:63:
19:74:c1:4c:1e:80:7a:9c:69:2e:bd:0a:9b:32:ec:
5c:9b:5c:ef:93:c9:0d:21:64:c2:77:cd:f1:fe:6c:
02:44:ea:1b:c2:a6:e8:8a:4e:b1:45:2b:61:be:ea:
2f:9a:7a:3c:75:3a:38:6b:b0:74:e9:68:71:51:e1:
b6:a9:9d:95:3a:99:ab:d8:1f:71:53:c8:37:21:f1:
98:51:a0:a9:4d:c6:4b:b7:f0:c7:ca:e7:25:ae:3c:
7f:d7:65:6a:db:91:cf:73:a6:b1:bc:dc:7a:9e:f8:
24:78:db:64:6b:41:a2:43:a1:de:7a:1c:ef:1d:ea:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B4:AC:A5:3A:8B:57:11:E7:BE:EC:F3:AB:61:D6:96:2A:2E:6C:AF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/36fd68fe-aaa5-445d-86d5-d65c310c80e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:08:35:e8:fe:64:05:48:6f:e0:1e:d4:15:91:90:18:d8:aa:
53:a6:03:d3:fb:61:12:9f:3d:0f:0a:be:21:8d:a5:5c:8e:25:
88:7f:7a:79:81:74:6b:71:f7:f8:fe:84:67:53:fa:76:49:b3:
6d:f3:29:7d:0c:d9:4c:7d:52:1d:9d:57:2e:4d:6f:68:46:01:
b2:92:36:da:57:7e:c6:b1:48:e4:89:25:0e:c7:de:3c:85:32:
6a:65:2d:ba:3a:d9:b1:54:7b:41:12:28:16:3f:1a:9e:1b:ce:
d6:4b:44:62:bc:4b:bb:53:0d:bb:f9:cd:62:d9:44:92:b1:7c:
73:f1:e0:6f:03:ea:ac:a5:8f:47:2f:b7:7e:e8:b0:48:2c:af:
f3:d0:ed:1e:c0:9a:17:93:a1:a8:4f:8c:b5:54:30:f7:fc:07:
aa:30:bd:f8:27:e3:ba:50:b3:c9:a5:9d:70:cb:86:ff:b9:4f:
b2:04:50:5e:05:c0:af:65:c9:1b:53:5b:ae:c9:e8:5a:ec:8c:
16:90:7b:c2:25:09:53:0f:af:7f:e3:7a:47:df:d9:6f:78:1e:
2d:6a:a9:67:13:8f:9d:af:23:cb:f2:08:80:23:6d:f7:42:0f:
f0:31:db:42:8d:b4:22:3c:ed:35:3d:1a:df:6b:f5:77:da:23:
a4:74:a0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:40:51 2025 by rpki-client