Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3cb214e5-681a-42f2-8aa8-1a89ab323eeb.roa
File: 3cb214e5-681a-42f2-8aa8-1a89ab323eeb.roa (raw, json)
Hash identifier: hgikAM4Ea4GI+ON0g1NY3PqXvMdoCDe2MOvnzmprHJA=
Subject key identifier: CE:D2:FB:6D:B7:37:4E:A0:52:4F:47:34:87:30:E0:CA:BF:58:F7:52
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5B8386DA32FB650719FCA541AA799EFB1BF21354
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3cb214e5-681a-42f2-8aa8-1a89ab323eeb.roa
Signing time: Wed 05 Mar 2025 08:23:20 +0000
ROA not before: Wed 05 Mar 2025 08:23:20 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:83:86:da:32:fb:65:07:19:fc:a5:41:aa:79:9e:fb:1b:f2:13:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 5 08:23:20 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: serialNumber=5f7ae6d8725b168ffd6b774438873ea4064ec632d61dfd3a5d113d92652cf9c1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:34:75:7f:cb:c2:b9:48:09:56:a9:ea:e9:
9d:e3:05:85:0b:89:4a:e9:7c:d5:d7:13:21:11:b1:
84:e4:55:b7:c2:9c:5e:d3:12:9f:20:85:38:af:d2:
c7:fd:ad:1c:e7:fe:88:48:9f:51:27:53:14:36:38:
58:c6:6a:3a:23:9d:4e:6a:ca:42:24:2a:d4:f5:47:
c1:80:f5:a8:ba:76:78:db:17:a8:da:8f:e5:8d:e5:
95:2f:b1:e7:b3:84:c1:87:81:5c:7a:c7:08:95:27:
9c:0d:c6:89:01:50:7f:74:a0:ff:0d:4d:d4:18:50:
3f:fd:4b:5c:a8:b2:61:9a:b3:f1:af:d6:0a:cd:0c:
aa:6e:df:6a:8d:60:39:59:df:da:e1:92:62:0f:3a:
31:f3:2f:a6:4f:67:a4:79:3b:e5:3e:52:1e:01:13:
05:84:c9:a8:b0:99:94:42:e0:95:ed:c0:a9:ca:3e:
c6:a2:5e:ef:19:8d:2f:35:e6:c3:05:94:10:5a:3e:
f7:5a:24:ed:67:d0:68:86:82:48:85:bc:2a:b1:3c:
df:12:c1:c7:ce:e6:c0:5e:de:00:ae:cb:f7:29:8e:
2a:c8:d6:e3:14:e8:20:fd:90:15:0e:ed:75:91:5a:
a3:7d:fe:86:28:20:da:9f:53:e6:37:f6:e1:3f:9e:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D2:FB:6D:B7:37:4E:A0:52:4F:47:34:87:30:E0:CA:BF:58:F7:52
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3cb214e5-681a-42f2-8aa8-1a89ab323eeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
73:3c:c5:b9:f7:c8:52:60:98:d4:8e:44:ea:88:3b:28:5c:9f:
67:ee:0b:48:f1:2a:c6:6f:a7:d6:11:97:07:22:97:4e:1c:f6:
6c:97:14:aa:0f:b3:29:ee:06:ca:09:03:ff:99:14:c8:0c:ce:
71:a6:2a:9a:97:ca:4b:c5:f6:77:ba:ff:5b:9e:b6:9d:e3:a8:
00:08:e3:f4:bf:bb:73:fc:c0:a5:b3:67:fe:bf:d6:01:62:3f:
3b:36:9d:2d:74:ad:5d:63:79:b3:54:6d:45:82:92:7a:5b:59:
49:c6:dc:9a:ab:95:14:4c:52:50:03:b1:cc:cb:cf:17:03:1e:
02:5f:4f:7b:6f:21:69:bf:e4:e3:7e:8a:14:6c:d9:a4:06:2f:
82:62:72:0f:e1:bd:7d:7f:68:0a:73:df:c0:b8:19:87:17:bc:
de:8f:bd:d9:e6:70:1e:bb:16:fa:f3:20:fc:9c:dc:ac:60:13:
60:e3:7a:b7:76:ac:a9:1e:e3:a8:bf:76:d2:51:bd:ea:3d:80:
76:db:4a:58:09:ca:f5:54:3f:05:52:1e:e3:b1:5f:3c:5d:59:
a5:cc:78:a6:13:44:30:82:59:ec:91:fd:8e:a8:79:47:4c:93:
15:a6:53:33:82:2e:c0:92:aa:fd:bf:13:da:6b:1d:0a:fc:b8:
44:c8:37:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:01:43 2025 by rpki-client