Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/42d9569b-37c9-417c-81a2-b88bf0b8be48.roa
File: 42d9569b-37c9-417c-81a2-b88bf0b8be48.roa (raw, json)
Hash identifier: 8wbCMVDWBJHscC8fjqHpdikg3MIsgVYEkpgwrZiaFVI=
Subject key identifier: F6:28:E1:8C:4C:2B:A8:BA:A9:6D:FB:77:19:58:B5:50:4C:04:03:34
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 08D458BD03D21E200F986CF41CAA701379536DB2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/42d9569b-37c9-417c-81a2-b88bf0b8be48.roa
Signing time: Fri 14 Feb 2025 20:58:19 +0000
ROA not before: Fri 14 Feb 2025 20:58:19 +0000
ROA not after: Fri 21 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d4:58:bd:03:d2:1e:20:0f:98:6c:f4:1c:aa:70:13:79:53:6d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 14 20:58:19 2025 GMT
Not After : Mar 21 23:59:59 2025 GMT
Subject: serialNumber=82c778e8bb7e160f6e642b9ec1fe87e1bf0d769a8cf7d5780316605fd87e1733, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:07:3a:51:8d:9a:b7:b3:dd:ef:88:69:40:
ed:47:37:e1:97:9f:1c:37:da:9c:49:77:c6:bf:2f:
f9:88:65:0f:ce:b8:02:2b:7f:e4:11:64:39:d1:cc:
e5:78:2f:57:e6:ec:34:3b:07:a6:ed:0b:70:ad:ec:
ae:48:c2:a5:8e:46:0c:9e:50:71:22:74:c0:79:0a:
6b:e9:a2:27:a9:92:2f:75:7d:5f:19:35:4e:87:a5:
0d:11:c5:48:ce:b3:99:8b:5d:78:2a:5c:86:42:b4:
60:0c:9d:d5:5d:91:c7:c3:6d:38:1c:76:81:96:f1:
96:cc:af:fb:cc:4c:59:ac:fa:13:6b:af:bc:21:b5:
ba:ea:09:d1:86:f2:1e:69:00:1e:90:2e:0a:83:3d:
a3:a6:c4:1f:a8:f4:cc:ea:11:23:01:d4:ef:8f:15:
54:86:f1:f8:8d:3b:9c:25:74:cc:50:44:68:ec:3b:
c7:51:10:50:d8:c6:61:2b:e5:b6:b6:cb:20:13:10:
13:54:bf:4e:c6:fd:b3:19:58:50:a2:de:be:02:b6:
16:ec:98:da:65:70:01:66:33:20:3f:b1:09:e7:1b:
03:88:6e:cc:df:cf:b9:8f:aa:85:7b:c6:6d:35:78:
3a:cf:15:ab:94:32:80:34:8f:46:bb:7d:6d:2b:b9:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:28:E1:8C:4C:2B:A8:BA:A9:6D:FB:77:19:58:B5:50:4C:04:03:34
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/42d9569b-37c9-417c-81a2-b88bf0b8be48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
76:53:ea:b5:42:9f:58:f5:74:18:5e:72:cb:b0:3b:54:89:4d:
14:e6:fd:c8:46:21:dd:05:7b:81:15:21:fd:6c:ca:0d:32:de:
f8:08:cc:b1:8e:13:3e:b2:89:ea:24:51:3d:0c:a7:36:c7:0f:
b2:cc:0d:fb:e5:e3:ac:80:3d:cf:c0:e4:73:13:97:4d:2b:8f:
10:81:e0:4d:2a:0c:8b:9a:79:41:da:5b:be:c5:60:26:4d:36:
6d:8b:28:62:57:bf:bf:5b:b7:0d:0f:01:a7:4e:5e:0b:e9:d7:
bb:d0:a2:1a:12:03:eb:c4:88:82:f3:68:3b:0e:de:6f:b2:a8:
4f:6a:d3:b5:e7:88:40:5b:2c:f7:d7:cc:20:ea:b0:fe:1d:60:
00:79:19:f6:bd:cb:15:02:ad:c2:09:cb:7f:a2:67:66:f2:c1:
24:2a:63:2f:84:53:2f:d4:c0:ae:c3:8e:bb:05:28:84:31:ed:
1f:b9:1d:99:cb:31:e0:cd:42:8f:76:8e:35:1d:38:aa:82:7d:
0b:d2:f3:2f:a6:c2:2b:96:55:f1:47:ca:e9:47:a7:60:26:1e:
5e:4c:83:20:36:d2:aa:9c:ba:30:a9:be:05:de:f8:aa:fb:2d:
cf:b9:4d:e2:d8:d2:c4:33:93:da:50:4f:c6:f3:84:05:5c:cf:
b2:d1:1c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:09:42 2025 by rpki-client