Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/39f9cd2c-f2a4-42ff-8245-4a2da098a888.roa
File: 39f9cd2c-f2a4-42ff-8245-4a2da098a888.roa (raw, json)
Hash identifier: V1Tqxj+UkghgPtMQqNiP4zuJpa6ZNhfcapIL518WVH8=
Subject key identifier: F3:92:7F:E7:E6:11:F7:6B:1C:97:FB:C7:43:72:66:66:85:C7:56:42
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 471DD46F6CEC5E2FBF734C4F882D76E8B38FFA89
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/39f9cd2c-f2a4-42ff-8245-4a2da098a888.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:1d:d4:6f:6c:ec:5e:2f:bf:73:4c:4f:88:2d:76:e8:b3:8f:fa:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=2a2e86f7f53ea9f5cbdd57788d582f2824ce8bc1a3d60a481ada87431d8dd74e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:85:7c:da:13:77:be:ab:98:b2:3d:bd:15:
c4:49:ce:d6:b9:c0:9b:f7:27:fb:96:68:ed:97:04:
5a:f0:ea:d9:27:ad:48:e2:58:66:9d:f4:6e:2a:57:
fe:5f:d1:84:27:9d:7b:34:45:5f:1b:fd:a9:98:8b:
e9:23:3c:39:86:2f:d7:9b:60:97:b8:c9:e0:36:a1:
39:30:e7:f3:fc:e8:c2:28:94:4f:9a:74:63:4a:90:
9d:e4:75:10:6a:26:e6:8e:9e:b2:37:b1:64:4f:e1:
97:bd:28:79:27:0e:d0:65:22:f0:95:fa:4a:c0:01:
55:ac:d7:45:cc:8b:f6:d8:a5:d7:34:c4:13:29:6f:
b5:59:61:fb:ea:4b:ee:55:9e:18:3b:1a:5f:69:dc:
6b:5e:e3:dc:36:07:a0:60:0d:39:cd:a3:9e:f0:b7:
16:1b:78:c9:d4:51:7f:13:82:c6:af:5d:81:d8:a3:
2e:91:22:3e:e8:f0:ba:bc:f2:79:63:27:ac:df:f3:
37:49:e1:3d:9a:40:84:46:87:52:f5:84:24:b4:ad:
73:f3:ba:1c:ef:1b:c3:fd:4d:1c:72:07:63:84:bc:
25:0b:fc:f8:9e:58:84:6d:47:90:31:88:a7:47:0b:
fc:bc:a1:1f:52:c8:44:1e:08:e0:3c:6b:d0:03:df:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:92:7F:E7:E6:11:F7:6B:1C:97:FB:C7:43:72:66:66:85:C7:56:42
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/39f9cd2c-f2a4-42ff-8245-4a2da098a888.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ad:4c:51:4c:a7:fd:30:33:ea:a9:e8:ca:31:c4:d7:49:dd:
c6:3b:ae:bd:55:ca:53:c8:61:e9:e1:b2:6c:0b:c9:4c:d1:e8:
79:75:a8:fe:5d:ab:f7:d3:20:70:8d:44:97:ed:c2:0a:77:8b:
17:d8:f7:46:31:6f:4e:69:be:0a:46:3e:a5:76:ef:dd:cb:2e:
c9:70:e5:52:6f:68:e0:c6:74:1c:77:75:f8:a7:14:8f:47:10:
1e:4b:e2:cf:49:4c:af:1b:44:31:0b:81:fd:97:9f:d1:47:3e:
98:cc:de:fe:29:99:9a:ca:c7:16:5f:9b:b6:9d:3c:c3:3b:02:
c7:3a:99:de:d3:9c:2b:9a:77:83:8d:71:4d:c4:56:33:31:29:
3c:2e:9c:51:32:d1:06:4e:8e:a4:01:51:5a:30:b7:2f:f5:33:
1d:77:25:6e:45:cd:ae:63:73:6a:a0:b0:0f:2e:7f:c4:22:c2:
09:c1:d3:6c:68:14:a1:16:87:4d:6d:d4:17:5b:b5:65:6c:83:
31:93:3a:e9:cd:20:87:51:8c:46:29:35:03:71:cc:46:0c:6f:
2d:ba:fd:23:86:e7:c9:ed:5d:91:ef:10:33:c2:81:11:7a:f1:
95:e9:38:9d:43:cb:56:eb:59:cd:4a:c7:8f:5a:02:18:a4:53:
68:da:3a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:20:07 2025 by rpki-client