Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/39834a6b-8842-4efd-bab1-34a5c0281ec6.roa
File: 39834a6b-8842-4efd-bab1-34a5c0281ec6.roa (raw, json)
Hash identifier: eg7lb8q7vir96sJdIv+B4Q7KuEBj77WZm3gy7BeQGzo=
Subject key identifier: 38:FF:15:4C:98:AA:6F:AE:B2:1D:62:17:04:13:A7:BB:E9:14:2A:17
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 047CD142F9AF6CDD5821554013A54F0739565012
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/39834a6b-8842-4efd-bab1-34a5c0281ec6.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:7c:d1:42:f9:af:6c:dd:58:21:55:40:13:a5:4f:07:39:56:50:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=b9afc7be7904ea43653bd56e9d06513ab8da674305c0ebf210b2f7b06c4e6fdf, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:51:52:df:34:89:2f:ab:34:2f:e1:11:2e:
a1:36:98:b7:c6:85:09:6e:87:85:61:20:98:19:58:
73:18:84:0f:3c:21:25:5b:6d:94:ba:18:d9:c2:1e:
93:b7:8c:0c:7e:7c:d1:94:9f:cb:dc:32:47:e1:a3:
f4:e6:34:70:61:c2:d5:d5:ba:0c:6c:38:27:b1:01:
4f:ed:2c:8c:4c:20:a3:24:36:3f:a7:7e:04:d2:cc:
46:0f:14:8f:4f:73:1d:4f:0c:ad:e7:b2:ff:de:5d:
aa:7c:a7:ce:94:6d:4a:b2:83:61:75:92:d3:c8:68:
45:fb:4d:4c:2c:2b:85:ae:70:73:51:51:21:66:39:
c8:87:ff:58:91:e1:79:a4:95:78:b7:12:e6:06:8d:
33:80:1a:11:b9:fe:a3:c1:85:73:cf:64:1e:d7:ea:
2a:e8:32:1c:dd:a3:53:19:11:c3:3e:f1:fd:53:04:
27:12:93:cc:71:4c:ac:95:51:60:b3:a8:f8:30:18:
6a:68:13:38:fc:a7:87:01:5d:d6:98:2d:2a:73:2d:
45:87:32:c6:51:a6:0a:42:24:3d:be:0e:87:c9:13:
d9:b0:af:04:51:e1:ea:52:de:79:2d:fc:6c:c7:09:
62:2c:67:82:1b:74:6e:09:ac:c0:70:f2:bb:d8:5f:
9f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FF:15:4C:98:AA:6F:AE:B2:1D:62:17:04:13:A7:BB:E9:14:2A:17
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/39834a6b-8842-4efd-bab1-34a5c0281ec6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
13:13:77:18:f2:d0:cd:49:9a:06:6c:7b:2c:59:54:2c:58:3d:
a9:14:7b:77:57:9f:c6:7e:19:32:00:78:2b:74:eb:53:28:33:
1f:95:a4:96:2a:8d:2c:bb:e8:0e:15:0b:21:8d:7a:a1:1a:d9:
3a:34:c4:87:f4:ac:3c:34:69:d9:83:67:cf:3b:c4:99:50:13:
c3:1b:95:f3:a3:2c:b6:11:1d:5e:e9:26:79:1c:0b:37:38:62:
64:52:79:04:e0:67:b6:03:8b:44:d2:71:e4:94:3e:86:bd:8d:
dd:7b:67:8c:eb:63:51:f8:d0:2f:fe:b6:e2:67:fe:3f:69:93:
4d:be:f8:e6:06:e0:4d:f3:ab:82:ed:04:70:db:08:79:9e:e6:
94:c2:12:ce:c7:3c:d9:92:00:c6:52:d3:a9:a0:a5:87:e0:b6:
ec:2a:06:e9:53:e7:de:ac:08:f5:bb:dc:d2:37:2d:82:4e:1c:
a5:77:62:3e:b7:8b:6f:30:c1:48:c6:cf:57:2b:01:e4:ba:e0:
0e:63:1e:61:f0:d3:42:c9:7e:d4:0d:1a:5f:b0:f3:c3:f6:2e:
51:bd:75:c2:8f:a5:3e:ad:34:cf:34:84:20:99:70:29:01:90:
4c:fe:a5:40:0c:37:17:45:8e:a3:0c:36:6e:a5:1c:7b:8b:d4:
32:0d:4f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:07:38 2025 by rpki-client