Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4152578a-f118-4906-a478-57d52fbd4047.roa
File: 4152578a-f118-4906-a478-57d52fbd4047.roa (raw, json)
Hash identifier: tLcYIF5iQqA3AbXpOVwWFAh7nnrbjfoTfBFtKtEDGw4=
Subject key identifier: 56:DB:21:12:AE:A1:60:E5:B1:FF:67:FF:8C:17:73:60:92:14:E7:08
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7D4F486854CC9FB8F1D7594564983B3977E4A4FB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4152578a-f118-4906-a478-57d52fbd4047.roa
Signing time: Tue 01 Oct 2024 00:00:00 +0000
ROA not before: Tue 01 Oct 2024 00:00:00 +0000
ROA not after: Tue 05 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4f:48:68:54:cc:9f:b8:f1:d7:59:45:64:98:3b:39:77:e4:a4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 1 00:00:00 2024 GMT
Not After : Nov 5 23:59:59 2024 GMT
Subject: serialNumber=1ee9e7cad86998ab48d86fedd730b8b68869915b0787779fd8c9d757e5a24e13, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:10:8a:29:f1:75:01:70:c7:2a:1e:f6:71:
74:4f:d1:c4:31:84:ec:b0:ee:54:76:e9:6b:40:13:
d0:d7:b7:0c:05:52:97:a7:60:43:96:fc:a9:a6:59:
7e:e0:f2:cb:b8:e2:f6:47:f4:27:7f:b0:97:a3:93:
62:3b:d7:06:89:81:bf:d7:9a:bf:e1:28:99:19:23:
78:85:58:df:92:80:04:be:49:6f:f2:70:e5:d3:cd:
70:7d:90:e0:3e:40:1d:cf:b3:65:6d:c1:0f:e5:ce:
72:4f:6e:e1:37:94:f6:6d:94:e5:b5:79:41:8b:97:
61:59:f5:cb:2a:95:9e:ab:a0:02:00:b1:15:23:d8:
fd:c1:bb:02:1b:8d:30:36:40:c3:b4:6a:b6:3b:70:
3e:73:b2:9d:3b:de:fd:ec:8e:51:21:1d:62:a7:50:
c3:e8:3b:e0:f7:23:0c:7f:41:77:d5:3d:3c:28:b9:
66:2e:06:b4:89:d4:91:ab:f1:7e:b1:00:e6:90:f2:
06:04:71:06:9c:43:b8:dd:9f:87:d5:06:af:a7:a4:
f1:fd:9f:31:d6:23:25:60:f6:f3:fb:3b:6f:a0:de:
b0:75:f9:6c:a5:54:94:4a:57:f1:d7:ba:95:ce:a1:
a7:37:82:5a:c4:7e:96:97:d2:56:09:d0:4b:84:90:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DB:21:12:AE:A1:60:E5:B1:FF:67:FF:8C:17:73:60:92:14:E7:08
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4152578a-f118-4906-a478-57d52fbd4047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:69:97:76:aa:07:d9:93:35:25:66:d2:db:ef:23:f3:80:e2:
bf:ac:b2:b9:73:7b:50:8c:f6:e5:bf:c0:35:79:29:fe:dc:6c:
da:08:c0:52:18:6d:05:45:67:8a:55:da:d0:46:74:49:ea:9d:
07:c9:10:97:c7:06:7f:36:fb:be:e6:23:6d:94:e8:ef:a6:45:
a3:89:ad:c9:79:e0:77:a9:53:ac:c4:be:35:af:bf:45:1d:a7:
ee:07:5e:5b:a3:c9:2f:49:ca:09:2b:57:81:63:57:1c:af:38:
f5:4a:0a:68:a8:27:06:32:a8:67:65:12:b2:10:cc:3e:39:c5:
41:9d:72:7f:0d:a6:ed:48:ec:5d:82:8c:ed:ac:5c:37:da:87:
2a:48:ac:c3:2b:70:cc:8c:0f:ae:0f:e2:76:7e:73:c4:9e:e4:
1e:4a:dc:66:43:dc:fe:2f:79:16:54:90:82:d7:cf:c1:b7:65:
95:55:d0:a2:00:66:0d:8c:e1:aa:88:84:4a:a0:d4:17:9d:2d:
3c:0d:42:28:2d:43:8f:8a:1b:15:6e:82:8c:be:9a:1c:64:fb:
59:34:57:57:4a:31:4e:d1:13:09:6a:bf:52:73:8f:4d:ae:c1:
89:11:40:67:f3:f4:5a:d4:f9:b8:7c:c0:dd:d0:af:01:70:1d:
c7:13:eb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:20:07 2025 by rpki-client