Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e508905-1e45-49bf-9105-a6c762da7258.roa
File: 3e508905-1e45-49bf-9105-a6c762da7258.roa (raw, json)
Hash identifier: uw0kusWAtPMMAx5r/09+C8C5dS6P4KaNRRSMFEyoFlo=
Subject key identifier: B2:B7:12:2E:7C:4F:73:DD:39:AD:A3:12:06:33:D7:B4:80:19:1A:F9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 651D1B19B0A9D75966809CFCEA7E1F6510657EFF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e508905-1e45-49bf-9105-a6c762da7258.roa
Signing time: Fri 05 Jan 2024 00:00:00 +0000
ROA not before: Fri 05 Jan 2024 00:00:00 +0000
ROA not after: Fri 09 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:1d:1b:19:b0:a9:d7:59:66:80:9c:fc:ea:7e:1f:65:10:65:7e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 5 00:00:00 2024 GMT
Not After : Feb 9 23:59:59 2024 GMT
Subject: serialNumber=0a81e4845dda276923d7c68b3a7f0d0810934b2b1109fe59f5817b39efbd3b07, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:69:8a:d3:f2:2e:6c:67:90:73:6c:ff:c5:1a:
8a:07:71:36:7e:92:62:2a:64:46:a5:6f:e4:9b:65:
e4:60:07:64:f4:94:e8:16:a5:e5:ea:d8:d7:b5:63:
bc:4e:6b:cc:ca:d0:19:69:55:10:7e:57:04:f1:ee:
c7:c8:01:78:17:12:d9:18:31:c6:e6:36:ed:90:17:
cb:c5:9b:93:48:7b:b6:f0:bc:e7:3e:ea:2d:fa:e9:
10:e3:c0:4d:f9:d3:fb:b8:2c:5a:29:c8:de:a6:e4:
cd:b7:71:a2:0e:5e:7e:ca:8e:db:44:35:ad:e5:ad:
3a:dd:ea:73:bc:2d:f1:c5:89:6d:fa:10:f5:d6:8d:
5b:60:60:50:e2:5e:86:3f:67:23:d8:b3:7b:29:fa:
94:cb:c3:c6:18:6d:26:8e:8a:75:e1:e8:d8:36:a9:
4e:e2:32:74:8d:de:8e:12:0f:4e:c9:87:61:b5:f7:
96:85:d1:00:33:ab:b2:a5:79:42:50:20:a6:bb:78:
06:6c:e3:d5:d5:23:e2:11:91:3b:a3:a2:e4:54:a5:
de:af:ff:95:83:6c:bb:95:fa:28:e3:c8:88:b6:81:
48:0c:33:90:e7:fa:2b:67:4d:e4:6e:18:44:8a:35:
dc:9a:31:ce:f8:de:77:29:04:ca:03:5f:04:e2:ba:
fc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B7:12:2E:7C:4F:73:DD:39:AD:A3:12:06:33:D7:B4:80:19:1A:F9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e508905-1e45-49bf-9105-a6c762da7258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:93:85:63:cc:98:28:0d:b9:00:d0:62:4c:ba:cc:f8:03:08:
c1:69:07:7c:51:27:30:bd:ec:8b:bf:64:63:13:f1:4d:72:04:
7a:dd:f6:91:0e:ae:33:ad:52:60:b7:fb:c4:37:fe:ae:eb:a5:
8c:63:57:70:ce:57:e1:e4:6d:70:7a:18:4e:55:da:b8:f8:3f:
a4:f4:a5:1e:ce:9b:5b:63:5e:51:61:92:ef:66:f2:c7:d7:63:
2e:5d:98:85:d4:3e:49:fe:5c:32:d8:a1:db:ec:51:fa:d4:54:
02:d2:68:c3:fe:d7:eb:73:83:98:1a:61:1f:8a:a9:37:76:ca:
0c:8a:7a:63:bd:94:f3:1b:08:e0:d5:d5:9f:48:39:46:fa:9d:
01:45:ad:8e:3d:18:4c:b3:62:0f:04:b6:5a:1b:d7:15:e2:84:
9c:23:06:52:3f:f8:08:56:a1:34:5a:d1:be:eb:eb:64:0e:df:
1e:da:6f:53:23:61:53:a3:44:28:30:be:ac:6b:94:6d:8a:be:
18:2e:44:7d:e0:91:1b:63:46:38:75:ec:a8:2a:99:e4:25:12:
c9:7d:8b:e9:b4:a9:86:95:d6:cc:49:58:d4:44:44:de:7f:e1:
6e:f2:ed:f6:cc:90:40:f5:b2:55:5b:bf:91:03:cf:92:fa:1c:
b8:a6:62:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:20:18 2025 by rpki-client