Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/43e897c7-c741-47ac-a45b-6dd66f0eff2c.roa
File: 43e897c7-c741-47ac-a45b-6dd66f0eff2c.roa (raw, json)
Hash identifier: AkiE0oHhPra1nLsne+lBdhXfFuGtZ+4ubMjqxksgLpo=
Subject key identifier: FB:5B:21:9E:25:C6:81:A5:01:FF:E0:7D:FD:3A:6F:93:C1:7E:46:FE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6D0D5EE8FEEC39A5006A96864A353F19D7E3E2AC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/43e897c7-c741-47ac-a45b-6dd66f0eff2c.roa
Signing time: Thu 06 Jun 2024 00:00:00 +0000
ROA not before: Thu 06 Jun 2024 00:00:00 +0000
ROA not after: Thu 11 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:0d:5e:e8:fe:ec:39:a5:00:6a:96:86:4a:35:3f:19:d7:e3:e2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 6 00:00:00 2024 GMT
Not After : Jul 11 23:59:59 2024 GMT
Subject: serialNumber=e9ddc4b93362f7bfc79c96d33958c4791e3e2cf68bb8deb6aa25457440853156, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:c9:11:6f:12:14:51:90:26:3d:ba:78:33:
1f:b3:4a:05:11:1e:78:28:a1:26:1d:f8:d9:ac:f1:
f1:4f:9c:27:f7:d4:9b:40:58:b9:43:d0:09:ce:53:
cd:5c:81:75:2f:5f:f8:0b:20:3f:dc:72:e9:36:5a:
fe:e2:91:b5:60:e8:48:aa:0b:06:a2:8a:6a:54:05:
21:1d:7c:52:3f:9b:9b:bb:5f:af:e6:31:74:e1:ff:
21:ce:be:00:ed:00:bf:fd:91:af:f9:55:f7:aa:1b:
37:e9:14:8a:7d:6d:90:94:1c:77:72:d0:c4:5a:e6:
d1:a8:55:a0:a4:e2:fd:30:ba:ed:32:90:3b:1e:7c:
8d:4e:2d:3a:38:11:7e:73:3a:cf:f8:50:ed:a0:2e:
9e:a3:9b:a0:53:f9:80:52:75:90:4d:dd:6f:c9:16:
c9:55:5b:cf:df:08:65:db:5a:d3:11:ea:49:fe:dc:
e2:79:bc:7a:4d:69:dd:99:d8:f5:7f:91:32:0f:ef:
f4:7d:cd:71:5a:af:ce:ce:ca:2d:3d:a3:c2:e6:ab:
bf:a9:d4:1d:68:57:d1:db:03:eb:5a:f3:ed:a8:4a:
6e:69:67:fc:b4:da:38:88:ee:c0:7f:5b:b7:f5:81:
40:98:aa:60:a4:d6:08:9e:7d:08:00:cc:65:5c:6d:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5B:21:9E:25:C6:81:A5:01:FF:E0:7D:FD:3A:6F:93:C1:7E:46:FE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/43e897c7-c741-47ac-a45b-6dd66f0eff2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:fb:ef:4f:5b:66:90:e0:8c:8a:f0:16:2a:a2:2a:09:2a:05:
ed:d9:42:ad:8b:ae:23:c6:60:df:b0:cf:0d:4e:74:37:53:f0:
df:bb:2b:c1:43:fc:c1:94:37:1b:e9:fc:1f:61:c8:f8:a7:73:
9c:38:56:e7:3a:c0:55:d9:5b:7b:65:2e:38:09:3e:25:cd:bc:
4b:39:56:40:2d:ec:a5:0c:15:26:db:42:57:5d:ce:1e:a1:a0:
f8:eb:30:3d:e6:73:90:69:0a:a5:0a:8e:12:b5:22:80:8c:bb:
b2:bf:ad:81:e9:8e:07:36:bc:e2:03:89:6d:39:4e:93:8c:33:
f1:5f:e6:2b:95:e0:d9:8e:86:0f:c5:06:6b:6e:5f:a9:39:b8:
01:43:ba:23:12:5e:9e:30:b4:6a:15:ae:d0:d9:33:3c:01:00:
a1:c6:3d:71:3d:e7:61:31:50:90:1b:9f:87:3b:6c:7b:2e:4d:
c1:b6:5d:2e:52:24:21:5e:98:6d:ec:33:64:0d:d2:35:e3:04:
88:3a:a4:00:c7:f9:0e:ba:87:90:fd:e6:24:95:e9:6a:25:2f:
8a:99:56:54:ab:03:09:08:02:9a:8b:82:26:0d:53:0e:ac:4a:
a3:ac:68:73:b3:6f:ba:24:17:a4:f8:3a:f4:a5:3c:2d:38:82:
01:9f:1b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:29:47 2025 by rpki-client