Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/39e44638-c9f3-42a6-a1ce-35085c6d6a3c.roa
File: 39e44638-c9f3-42a6-a1ce-35085c6d6a3c.roa (raw, json)
Hash identifier: l5/jED637WGXiTkvzEFiIiTzY6IXCcrRb0RtpOxd4Ww=
Subject key identifier: 29:B0:94:6C:52:BD:0E:CE:EC:34:0D:DB:25:20:1D:9C:24:D6:3B:9A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 539F393CDDD2138BBC66374691530D8EDD5D15B9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/39e44638-c9f3-42a6-a1ce-35085c6d6a3c.roa
Signing time: Thu 09 Jan 2025 00:00:00 +0000
ROA not before: Thu 09 Jan 2025 00:00:00 +0000
ROA not after: Thu 13 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:9f:39:3c:dd:d2:13:8b:bc:66:37:46:91:53:0d:8e:dd:5d:15:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 9 00:00:00 2025 GMT
Not After : Feb 13 23:59:59 2025 GMT
Subject: serialNumber=fd2b9f9252326edbb54ab3c0a84210c8774b02ca7793b42da5ddb20d46ab14e1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:73:3a:49:df:1d:b8:8c:4e:58:05:e7:1c:
42:88:df:26:fb:b3:ca:66:d5:ac:0a:48:08:26:fd:
42:9a:48:4e:0d:c5:1a:d6:16:34:32:4e:fc:05:9a:
39:db:27:c7:b1:14:41:f9:95:78:d3:83:27:cf:a3:
21:31:97:db:09:47:31:97:e1:d5:cb:75:b5:b3:71:
65:59:54:0d:25:a8:85:77:30:00:06:ee:0b:c8:a0:
89:13:a7:72:b9:26:f0:a7:b6:89:b4:2c:56:16:49:
37:b4:45:d1:4d:72:d5:c9:1d:04:80:e5:1a:c7:f0:
c3:fc:1f:d9:3e:d7:cf:4f:34:b9:99:0c:36:a3:af:
35:e4:ec:99:a1:50:b4:26:fa:89:34:16:1a:b8:38:
a1:66:34:14:7e:41:70:5f:cd:e5:33:34:e1:c2:c3:
30:0a:3e:a0:66:b0:5a:5d:06:27:f1:96:34:c1:5f:
83:73:f3:fe:36:b8:a5:14:ad:27:2e:55:58:9f:e1:
ea:42:84:2c:16:c6:17:d3:40:a6:e0:f0:bc:5d:00:
05:0f:98:1b:c0:68:40:32:48:11:b8:fa:5a:49:8f:
04:d8:0d:93:de:d3:54:96:ed:9d:ea:00:e8:51:2a:
50:ba:22:ea:f7:a2:67:0f:c2:c6:7e:f1:6b:3e:66:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B0:94:6C:52:BD:0E:CE:EC:34:0D:DB:25:20:1D:9C:24:D6:3B:9A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/39e44638-c9f3-42a6-a1ce-35085c6d6a3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
46:65:d3:3b:82:2a:9e:56:b5:6b:a9:2a:64:ef:48:8f:be:d4:
fa:69:bd:97:3a:07:f6:2d:f3:d1:c8:bd:d6:56:c5:56:c4:27:
12:4c:b0:3d:36:99:d5:e7:6d:e7:3c:de:49:d7:d0:59:3d:47:
93:f9:67:6e:9d:d7:02:3e:53:56:53:3c:83:35:42:ea:fd:00:
15:8b:c0:af:62:eb:49:d0:26:35:e1:a3:5d:68:25:19:82:4a:
14:07:99:39:5c:94:db:79:35:f7:23:f3:39:9e:32:94:03:b1:
ea:df:5c:0a:f3:57:e9:c0:f8:7c:0a:e8:68:a1:e1:7f:67:49:
73:85:d7:e1:76:6d:96:dc:28:c1:b3:f5:35:c6:4e:38:41:a2:
77:a0:bf:97:d7:17:ae:40:1f:1a:44:93:21:ab:b7:cd:5e:50:
91:e8:8f:85:cc:e1:05:b9:fc:89:15:6d:64:6b:5d:24:34:9c:
56:e8:c6:58:23:bd:67:f7:33:47:9d:12:ce:24:62:01:f0:2e:
20:11:fb:0e:2b:5c:0e:cf:24:99:42:db:56:3c:94:e1:ca:4e:
ec:b4:ee:67:b2:be:8d:d0:f9:9d:ed:8b:55:68:47:e3:ab:6a:
6b:b1:e7:7b:1e:8f:8d:47:4a:e9:23:1a:7c:15:c9:91:52:b7:
f9:19:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:31:46 2025 by rpki-client