Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3951dca5-5ac5-4003-b1ba-072e1362051d.roa
File: 3951dca5-5ac5-4003-b1ba-072e1362051d.roa (raw, json)
Hash identifier: 8/MfG0lMl55Dvhxf2krCT+FUZVRJHZbuvN+TOkP2dHY=
Subject key identifier: F2:5A:AC:22:64:C7:E5:37:34:53:5C:BC:90:7A:67:B0:48:C2:02:B1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5E911AAD7A3A2601E4D24CB2C42EFE0186EF94FF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3951dca5-5ac5-4003-b1ba-072e1362051d.roa
Signing time: Wed 05 Mar 2025 15:38:23 +0000
ROA not before: Wed 05 Mar 2025 15:38:23 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:91:1a:ad:7a:3a:26:01:e4:d2:4c:b2:c4:2e:fe:01:86:ef:94:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 5 15:38:23 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: serialNumber=59656f165e80e287f1a1ba54ad8bd6a2848b2eecbaef75a9ff507c2c43b65a15, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:42:f8:74:23:9b:85:27:f1:6e:72:19:bb:
88:12:94:2b:7c:4b:ea:5e:6d:dd:07:38:19:c8:3c:
f2:1d:59:1a:a6:d7:03:78:23:b8:83:38:76:08:f6:
57:9b:35:ba:bf:26:b1:c2:46:a4:af:66:ae:1a:71:
4c:12:b2:87:13:9e:75:81:b6:1e:33:3d:54:ef:2c:
08:e1:6a:3f:8d:3d:0b:5f:f9:f1:be:39:73:82:9e:
3f:0a:75:17:5a:66:c3:54:08:05:e9:94:c7:f9:27:
4e:01:55:9c:02:2d:68:95:e1:aa:40:d0:11:46:98:
93:10:2a:ad:1d:8f:c8:0d:5b:e4:fd:86:2c:b9:ac:
80:aa:5d:10:79:4b:3c:50:f0:c1:d9:84:46:8c:ce:
04:45:93:f2:2f:bf:61:6e:80:90:eb:70:46:c3:08:
b1:a6:21:37:c4:7e:14:53:75:b4:39:51:93:24:da:
60:bf:97:86:4c:8b:f0:c7:f0:47:36:9d:71:24:ee:
f5:ff:4a:14:08:0f:ff:91:78:5b:81:4c:7c:6e:95:
5b:20:c8:00:e9:db:6f:f9:46:da:4e:9a:fb:47:d3:
d9:23:25:01:29:6e:51:cb:5c:72:8e:23:ce:c1:42:
6d:c9:a7:99:c4:dc:69:36:67:cb:e0:ea:a4:bf:4f:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5A:AC:22:64:C7:E5:37:34:53:5C:BC:90:7A:67:B0:48:C2:02:B1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3951dca5-5ac5-4003-b1ba-072e1362051d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:85:3b:50:3f:09:eb:ca:5d:76:4a:da:fe:88:71:e6:8e:91:
5c:a0:fc:cd:b4:93:3f:79:d2:0b:53:8e:d1:84:f9:ab:cb:65:
57:9c:2e:cf:65:05:94:e0:1f:a2:9d:2e:06:38:11:c9:0b:d9:
fe:27:8f:95:f6:20:70:bb:40:26:12:a0:33:1e:0f:75:8b:86:
fa:5c:a1:7a:9b:2c:db:39:5a:66:94:1c:46:a2:b5:03:fa:17:
d6:a8:5c:bd:9a:ec:79:84:fb:f8:92:72:54:2c:b0:9b:34:06:
d8:ba:73:5b:d6:7e:e4:45:ec:eb:3b:8a:0c:1b:41:c1:f4:43:
01:ff:67:02:1e:a9:ef:55:5e:5b:02:cd:b5:e2:a4:e7:13:67:
0c:49:8e:05:c2:d3:17:f6:44:19:58:b9:b2:79:e6:4f:78:49:
24:a0:31:f6:c3:af:1c:c2:5d:af:28:c9:55:49:97:b6:44:f6:
be:fc:d7:51:36:17:ba:04:19:2c:81:bb:c1:a2:77:c3:fa:62:
76:07:75:5f:d0:4e:02:de:d8:dd:95:e5:cb:48:35:e9:1d:23:
fb:95:8f:5b:a4:f5:7a:f0:e3:30:cb:0c:85:7d:cf:d8:1f:6f:
89:f5:b1:11:7d:e9:28:51:3b:ae:0f:1c:3f:64:5b:32:7c:5f:
94:b9:26:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:26:44 2025 by rpki-client