Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44a70cc0-b377-4e2d-a221-907eedc99426.roa
File: 44a70cc0-b377-4e2d-a221-907eedc99426.roa (raw, json)
Hash identifier: OmRB65WihgmtM5o1PP1jRSut5TqVHhUJ+R3l4bjZzg8=
Subject key identifier: C3:F3:92:8D:D0:F8:DC:EC:27:8D:92:6D:1E:77:13:D8:B8:2B:F5:AA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 114290B345CFBDA8CEB61806D34B85620B4B999A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44a70cc0-b377-4e2d-a221-907eedc99426.roa
Signing time: Thu 01 Feb 2024 00:00:00 +0000
ROA not before: Thu 01 Feb 2024 00:00:00 +0000
ROA not after: Thu 07 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:42:90:b3:45:cf:bd:a8:ce:b6:18:06:d3:4b:85:62:0b:4b:99:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 1 00:00:00 2024 GMT
Not After : Mar 7 23:59:59 2024 GMT
Subject: serialNumber=ac704e736e4a244569a7af5a2986b3bbae32be43a271668168025a835a1c6597, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:db:68:52:91:4b:14:5a:2d:c8:44:b2:04:
68:a0:87:d9:27:cd:c9:4d:f3:e5:24:51:ce:aa:1a:
f3:27:9c:7b:e4:32:fe:d9:d4:fd:74:c9:7c:2a:7e:
2e:17:93:76:46:8c:a1:44:bf:d9:3a:70:0c:7e:44:
b2:de:8e:4e:07:7a:0a:85:93:aa:2d:70:d6:cf:28:
b7:15:ee:a5:b6:15:1a:00:03:80:aa:45:53:db:d0:
37:f4:6a:bb:2a:92:36:ef:ed:f8:c4:ef:94:75:48:
d7:90:00:e3:57:2b:b4:14:8e:f4:c6:1f:9a:1d:a2:
a9:e8:9a:d6:9b:0b:28:3c:14:30:27:bb:ef:e8:d0:
0e:83:3c:59:de:fa:d6:a2:ba:52:77:3c:d6:3b:94:
1c:05:04:14:9a:34:fd:78:7a:86:7f:7b:0f:6c:89:
40:4d:f7:79:06:75:80:a9:49:40:30:dd:e5:6e:db:
7e:20:5b:22:74:1d:93:6c:f5:5a:97:c4:68:10:2d:
e8:33:56:dc:63:88:da:07:f9:60:c2:15:35:1b:5c:
c3:bf:62:a7:d7:0e:ad:19:ea:a7:7e:3c:5d:1a:d8:
96:71:11:93:7c:93:6d:db:f8:cb:2d:85:58:3e:44:
65:0d:98:45:7a:c3:e3:b7:33:83:d4:ef:cd:82:af:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F3:92:8D:D0:F8:DC:EC:27:8D:92:6D:1E:77:13:D8:B8:2B:F5:AA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44a70cc0-b377-4e2d-a221-907eedc99426.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:bc:65:c9:d8:12:14:52:b4:82:78:56:c0:18:b9:eb:53:5f:
ed:f4:cc:74:08:7d:12:10:8c:b0:c1:fa:d9:a5:67:1c:e7:8b:
26:4b:06:47:7d:1c:7f:88:85:8b:9a:29:2d:7a:79:bf:6d:f4:
fe:f4:9a:9d:56:51:1c:00:fd:52:02:3d:16:08:11:21:84:5b:
55:7a:ed:b2:85:a3:60:21:bb:4c:72:f2:ee:e4:7b:9d:f6:e9:
d5:13:9a:69:03:06:9c:8e:22:a9:e7:1c:ed:fd:d0:f6:b9:01:
e6:fb:b6:ec:49:88:a9:1a:0d:bb:9d:7b:f7:5e:a1:af:80:1a:
1c:70:23:e5:80:90:a0:05:98:a8:4c:ad:21:48:be:7a:6b:25:
7f:b2:8a:87:74:6a:5c:a8:89:f1:3c:4d:15:d7:d4:5b:4a:a0:
89:6a:13:1f:6f:5e:2b:d2:cc:dc:9d:a7:e9:ee:ff:60:7d:95:
31:15:3f:cc:ca:82:7f:6a:66:aa:8a:f0:37:90:4a:ee:13:42:
97:b6:6a:c0:e5:af:ec:e2:7c:d3:45:32:76:d1:61:2f:cb:8e:
b7:eb:ff:37:29:a4:e0:03:8f:e3:60:4c:27:19:ea:b7:5f:e1:
87:44:0e:10:80:4d:a3:28:fe:68:d9:93:5d:2c:4e:29:f5:61:
78:86:d0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:44 2025 by rpki-client