Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/41baed08-1c8f-4729-bb97-48ab1edcb7dd.roa
File: 41baed08-1c8f-4729-bb97-48ab1edcb7dd.roa (raw, json)
Hash identifier: yiT0xfJrGeob9MBzObuDNyaGBZ3n6YqIDBTQNiXVfIQ=
Subject key identifier: 8F:05:F6:70:CA:26:93:1B:8F:96:32:3F:59:E2:2E:71:E1:6A:A4:36
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 73BF6C17B938C5263E8DD630442691D65A3551A7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/41baed08-1c8f-4729-bb97-48ab1edcb7dd.roa
Signing time: Mon 01 Jan 2024 00:00:00 +0000
ROA not before: Mon 01 Jan 2024 00:00:00 +0000
ROA not after: Mon 05 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:bf:6c:17:b9:38:c5:26:3e:8d:d6:30:44:26:91:d6:5a:35:51:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 1 00:00:00 2024 GMT
Not After : Feb 5 23:59:59 2024 GMT
Subject: serialNumber=d587297fedbab2a4088b8e8192a1c5b0e7a7998f410c7dbb188184d6c62e76ea, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:a5:15:59:62:e5:11:1f:93:61:b2:b2:ed:
d3:dc:80:01:70:59:00:50:a7:cd:9d:27:2f:22:3d:
be:ea:f2:b4:53:f6:29:b0:93:ef:6d:ae:a0:fd:d2:
f5:83:b4:2a:8e:28:fa:fb:dc:1f:d9:72:ab:67:87:
cf:52:1e:88:77:d0:89:7d:14:d3:7d:ba:b7:8c:40:
dc:fb:b1:c5:ac:ee:d2:be:a6:52:d5:fc:f0:b2:dd:
93:89:a1:35:bf:d1:7f:55:bf:d3:6a:5a:c9:23:4d:
92:06:6d:bf:69:14:e8:f8:36:7d:c9:5f:81:4f:15:
8a:60:1d:61:d0:52:b2:e8:31:9d:8b:e1:0c:14:2b:
10:4f:52:4a:6e:0a:d8:7d:05:2e:b8:42:fc:66:9d:
25:1f:fa:06:8a:8b:61:c4:35:87:d1:b8:f2:10:21:
41:29:34:6a:24:03:4b:a7:a8:db:29:11:95:18:85:
79:3c:00:65:7f:db:0c:f3:04:d8:08:f3:2c:8e:79:
3e:15:59:b3:7d:a6:25:4e:50:38:8c:26:61:55:3e:
82:51:28:30:aa:ef:fc:0d:1a:03:cc:23:03:93:c7:
39:9d:89:90:6f:01:8e:5e:c0:0e:11:c9:0a:e7:f6:
37:ab:d7:50:a0:f4:48:47:c7:ea:32:5a:1b:c2:c3:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:05:F6:70:CA:26:93:1B:8F:96:32:3F:59:E2:2E:71:E1:6A:A4:36
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/41baed08-1c8f-4729-bb97-48ab1edcb7dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:87:ae:e7:39:dd:63:90:ab:4f:57:2c:cb:11:15:49:98:2d:
d5:c9:b3:67:6e:26:92:bc:67:6c:ed:08:3b:6c:63:0f:d4:7f:
f1:93:d5:47:aa:9a:2e:1e:06:8d:90:84:cd:85:ab:12:bb:b7:
73:2b:cd:61:9b:16:d5:27:71:05:04:48:b3:20:e1:ae:77:da:
a2:93:92:2c:d6:dd:86:c9:d3:99:e2:0c:e3:98:ad:89:98:a3:
3c:1f:21:02:ee:a7:9b:f3:4d:81:3f:b2:9d:b0:60:b7:10:1c:
c8:2c:48:10:50:43:9a:d3:c2:aa:67:b9:93:f3:5c:8d:08:1c:
fd:35:7c:83:98:8c:72:8c:46:c0:c2:99:d1:88:cd:a2:1c:07:
1d:40:81:92:c9:d5:e4:cd:46:ef:08:6c:bc:3f:9f:b5:55:22:
26:47:56:aa:1b:48:e3:0c:93:ae:61:c5:ef:57:4f:86:20:aa:
79:71:7e:04:71:99:e9:0b:b5:25:69:4e:6a:b3:19:6b:cf:cd:
49:45:52:79:fc:bb:f2:88:83:d0:ae:55:f2:1d:80:55:68:7c:
ac:f2:b0:e1:aa:33:c4:c2:54:43:a8:5c:eb:96:14:15:2e:d6:
9d:e5:72:67:b7:0a:02:48:23:5f:5c:62:88:23:2c:71:cd:7f:
22:10:4f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:06:52 2025 by rpki-client