Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/461e260f-8bcc-4f87-aff6-544e5862a774.roa
File: 461e260f-8bcc-4f87-aff6-544e5862a774.roa (raw, json)
Hash identifier: DOLY55c6+SpMOkdPv6v/D3/IM2uB8PBcUXxVLoZWRgk=
Subject key identifier: 4D:6A:29:DE:33:B4:AB:8D:A9:03:CE:94:0F:6A:00:1F:BF:AB:38:15
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 17A9D4698B4B15FBE518F8E25D519104D86542E0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/461e260f-8bcc-4f87-aff6-544e5862a774.roa
Signing time: Thu 12 Dec 2024 00:00:00 +0000
ROA not before: Thu 12 Dec 2024 00:00:00 +0000
ROA not after: Thu 16 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a9:d4:69:8b:4b:15:fb:e5:18:f8:e2:5d:51:91:04:d8:65:42:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 12 00:00:00 2024 GMT
Not After : Jan 16 23:59:59 2025 GMT
Subject: serialNumber=3bef212851ff616be46d49a7c11b8cf81b0414596a82fffe620544a43dbc8a15, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:fb:71:2b:09:f8:67:7d:66:17:44:26:ef:
3a:b9:8a:b7:a6:f2:6d:8a:cb:04:c7:b9:57:4b:a7:
23:24:5e:0d:38:9f:99:43:59:2d:c9:8c:a3:b9:47:
07:99:05:f5:00:7a:15:01:75:16:09:fd:c2:44:87:
af:cd:8a:8e:6d:66:b4:63:82:2e:15:85:e1:71:a3:
4a:32:9e:39:e2:ea:ae:c0:18:f8:90:d8:47:e2:76:
f3:ef:0d:8d:99:42:30:1f:f2:a5:b2:e5:ae:d4:c7:
f3:41:fc:65:5b:16:5e:63:aa:d0:59:95:db:27:c4:
f0:5f:11:c1:1d:15:ad:f2:2d:4e:67:2f:04:bb:c4:
90:06:4d:ad:53:0d:9b:3f:81:18:09:be:2f:77:23:
59:c8:27:40:b0:81:85:7b:08:c6:5b:17:c6:80:87:
70:8f:c1:9c:86:e7:6b:89:d7:17:3e:d6:d2:cc:e3:
10:76:11:ca:11:04:ed:cf:ac:a4:d0:bb:86:a9:a0:
36:f2:57:2d:5c:4a:29:54:cb:13:17:b5:48:a4:c5:
25:57:7a:87:45:4f:a9:2e:51:58:26:d8:ed:e8:24:
3e:e1:9c:36:f8:fe:24:d9:ee:09:3f:8a:18:62:0f:
ad:00:dc:ed:23:3b:34:72:b7:29:54:be:88:d2:67:
59:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6A:29:DE:33:B4:AB:8D:A9:03:CE:94:0F:6A:00:1F:BF:AB:38:15
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/461e260f-8bcc-4f87-aff6-544e5862a774.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:59:20:e7:d6:8e:4a:80:fa:9f:3a:ce:2d:57:a7:fc:9e:c2:
5f:5f:fd:7b:7d:61:65:a6:91:48:3d:39:d3:a2:7d:68:68:2b:
31:cf:29:4d:4d:cd:81:0a:53:4b:2b:ba:4a:f7:c8:58:ba:6f:
a1:76:ab:1c:de:1a:06:eb:1d:d9:17:a4:03:0a:cb:7f:a8:ef:
2b:3a:e0:44:cc:e1:3b:1e:05:f1:6f:c5:27:ff:5b:16:ad:e7:
b2:e3:8b:2e:ee:d3:74:28:94:ab:61:80:a4:ec:ca:05:c4:32:
f7:6c:fd:07:c3:0c:11:8a:81:89:a0:90:d9:09:58:76:59:ff:
4b:fa:87:bc:65:44:8d:65:a8:c7:1d:ef:55:cb:39:a5:b9:33:
9a:ec:46:e1:90:17:3c:bf:00:e3:65:39:16:6f:90:69:e6:15:
72:45:5f:1d:e5:21:e9:d7:3c:02:59:94:12:6d:72:d8:e6:70:
2f:f5:2d:d9:51:c4:8d:f5:43:b6:7d:46:96:f0:45:0c:9d:ff:
ca:8c:91:13:5f:1b:a0:8e:20:e2:9e:6d:47:30:f5:6c:8b:84:
59:17:25:9a:e5:db:e5:1e:26:64:4b:6b:f8:9f:20:6c:95:f0:
ab:32:5f:51:97:d8:e5:60:f3:92:16:30:d5:e9:e3:5f:5e:fb:
d8:3d:f5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:22:48 2025 by rpki-client