Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3efb4c80-732c-42f7-b9fc-18190e62b11d.roa
File: 3efb4c80-732c-42f7-b9fc-18190e62b11d.roa (raw, json)
Hash identifier: vvDh7AvllcFE8534A8Kkz2l9tyMM0BKsB7LRE4r9BgM=
Subject key identifier: F9:8A:7E:A2:7B:62:B7:87:5A:36:90:CF:FF:E2:22:2A:6C:BB:CC:1D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 465CC81449B18B85A7DA0CC7B5EA1618F52C0007
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3efb4c80-732c-42f7-b9fc-18190e62b11d.roa
Signing time: Sun 19 Jan 2025 00:00:00 +0000
ROA not before: Sun 19 Jan 2025 00:00:00 +0000
ROA not after: Sun 23 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:5c:c8:14:49:b1:8b:85:a7:da:0c:c7:b5:ea:16:18:f5:2c:00:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 19 00:00:00 2025 GMT
Not After : Feb 23 23:59:59 2025 GMT
Subject: serialNumber=983ccfbe75eed98cf651eaf54ebf5b8d2911f8ee95c19356f85b239249b5df1b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:b0:c3:08:2f:1d:86:11:96:28:5f:01:da:
b8:59:61:a8:4d:07:da:51:53:d7:6e:8f:d9:14:16:
e7:c9:3f:56:19:71:aa:0d:fe:c5:8d:49:68:47:0d:
a0:f3:5f:ea:58:c4:99:e8:ca:27:d1:51:13:32:a1:
22:00:31:1d:20:9f:11:be:4b:52:41:1e:7b:96:f5:
d0:09:53:ab:88:07:85:73:8e:93:60:ec:59:d4:a0:
41:8e:90:70:50:40:ff:07:b8:fd:67:1e:c3:24:fc:
70:9e:95:26:95:fc:23:d0:2f:14:0e:68:51:9e:0d:
6b:fb:b2:61:77:fe:ad:c9:3f:73:c9:6f:d7:33:dd:
48:3a:7f:6b:5e:28:65:4f:eb:86:2c:c0:29:f8:74:
00:2a:e8:0a:c5:ea:8d:17:0f:06:d4:4c:08:ab:9b:
86:26:81:b0:1f:c0:47:d5:38:81:0e:f9:a8:a4:11:
96:21:94:fd:37:b8:b7:cd:59:fd:92:97:46:e5:cb:
c3:96:08:11:64:01:54:45:63:b7:20:6c:63:39:41:
7d:27:3f:0b:6e:21:59:a2:a1:3f:e7:5a:61:3a:98:
46:bf:19:a1:7c:6e:b0:5e:d8:71:83:8f:97:3a:cb:
34:a6:ab:9d:b6:1e:9d:d0:7e:d9:bb:ce:08:a6:2d:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8A:7E:A2:7B:62:B7:87:5A:36:90:CF:FF:E2:22:2A:6C:BB:CC:1D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3efb4c80-732c-42f7-b9fc-18190e62b11d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:7c:8d:e3:89:f8:d9:f0:ab:bf:11:c4:b4:cc:60:1c:a8:0c:
f3:91:3d:42:d1:5d:61:56:cd:21:ec:03:a9:f2:18:3d:f4:99:
ab:90:2d:f7:2f:04:66:23:82:f0:7c:74:a6:cf:ee:a0:25:5a:
63:f3:89:4c:f7:cc:04:34:5c:d9:49:a5:33:ca:b7:57:51:55:
00:d5:9f:41:1f:e4:87:7b:d5:7d:04:47:83:7a:c0:bf:17:8b:
73:6a:f2:f1:cb:1d:44:33:f4:7a:cc:d6:8f:d1:9d:67:d4:fa:
99:ad:11:9b:9c:19:39:33:ab:80:3d:c9:36:56:02:5d:97:6f:
3c:e5:0d:c1:9c:5a:88:4d:34:9f:09:69:75:82:91:90:67:24:
ee:b4:b8:35:3b:19:0d:09:38:85:51:b9:5b:bf:a9:21:04:40:
83:9b:47:7b:b5:21:71:88:50:f6:f7:ba:76:17:cd:f5:15:aa:
d8:b2:3f:5b:31:7a:00:df:b8:5d:05:42:e4:20:8b:7d:43:67:
ea:3c:66:c1:64:49:e4:7e:91:a6:cc:2c:39:d7:28:2c:d0:97:
b7:a2:cb:02:97:0d:b8:da:40:b0:a7:39:32:1d:c7:d0:f3:ab:
ce:c9:c2:c6:22:b1:fd:5b:e9:a8:98:24:6c:ce:ef:0f:31:ae:
b8:16:cf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:44:25 2025 by rpki-client