Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/498d143a-30b3-4002-8b15-51d872d2fa83.roa
File: 498d143a-30b3-4002-8b15-51d872d2fa83.roa (raw, json)
Hash identifier: yXS1Y+TZWyXm0FPMv2PB8d9NkuKtFKt9r4Mzl3VS3SQ=
Subject key identifier: 51:14:A9:0F:F3:39:16:68:24:C3:72:AC:21:E6:32:B8:88:E4:FD:75
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 46357B173892C128FD3332019FCC4AEB61DA2AEE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/498d143a-30b3-4002-8b15-51d872d2fa83.roa
Signing time: Sat 03 Feb 2024 00:00:00 +0000
ROA not before: Sat 03 Feb 2024 00:00:00 +0000
ROA not after: Sat 09 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:35:7b:17:38:92:c1:28:fd:33:32:01:9f:cc:4a:eb:61:da:2a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 3 00:00:00 2024 GMT
Not After : Mar 9 23:59:59 2024 GMT
Subject: serialNumber=bece6e33ab0c6999a4f093a2ed6f0c665e69842a00635b63552578db0103b601, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:47:0f:a3:10:08:26:29:bf:bc:a0:f6:a3:f6:
2c:52:ec:77:55:c4:f8:5f:60:36:5d:9b:dd:0b:37:
04:04:bd:fb:08:e6:bb:a4:65:5b:ba:17:40:59:d0:
86:13:60:17:98:75:ed:eb:52:3c:a1:f7:38:a5:a8:
85:fe:b3:19:e0:f4:82:44:83:fb:9d:f8:12:6a:1a:
a9:63:6a:6d:44:b9:e4:05:43:1e:4f:56:a2:dc:56:
08:9c:ac:87:ec:da:19:8d:91:f7:48:62:f8:df:8b:
34:fc:f2:c5:2d:5f:ac:59:94:7a:28:b9:75:22:17:
be:78:e5:03:56:ac:f6:6e:04:c7:c4:90:0d:ab:b6:
91:e7:2d:d2:cc:bc:80:37:a7:6a:30:14:ca:69:2e:
81:6d:00:50:30:1d:c6:3a:5b:6a:a9:04:34:f1:0e:
65:cf:19:bd:81:be:b1:f0:af:41:c1:f5:2d:df:9a:
55:25:fb:11:3d:b8:95:1f:63:ff:36:41:75:4d:0d:
cd:4d:f5:88:bf:34:e6:b7:5d:b0:10:4f:93:a2:43:
51:18:9b:12:21:c8:0a:a2:75:d7:ff:bf:ef:c0:d0:
4d:24:5e:d6:e2:13:5f:6d:02:06:cd:09:ea:3f:a0:
17:d1:1b:2e:6b:dc:5e:79:a8:af:71:07:b2:84:42:
d1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:14:A9:0F:F3:39:16:68:24:C3:72:AC:21:E6:32:B8:88:E4:FD:75
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/498d143a-30b3-4002-8b15-51d872d2fa83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:58:e6:1f:65:7f:ab:0e:97:5e:91:93:e0:9b:58:50:84:62:
79:82:0b:82:65:44:ac:d6:91:68:23:8a:bf:ea:a7:cb:0a:b3:
9b:fb:1f:32:43:a7:37:3e:2f:5c:d6:c5:5c:df:9b:f8:dd:78:
ab:01:52:0c:45:e9:b0:6c:f2:77:15:5a:2a:c4:94:64:4a:f1:
6e:ad:b9:ff:38:54:77:9c:c9:75:b5:d0:b7:f4:8d:a8:b9:5e:
9c:69:23:6c:43:06:83:1b:71:a7:5b:4a:29:fd:e4:ce:33:a4:
19:8d:df:63:58:58:f9:f4:09:4a:52:b4:97:2a:e0:11:59:9d:
55:52:c9:32:bc:90:78:72:75:5d:e9:df:3c:80:10:0c:46:64:
64:67:31:3a:6c:a4:ba:21:2b:63:f9:df:53:25:a1:cc:21:ab:
5e:a6:9c:e2:2e:ed:22:e7:6a:2b:16:3a:0d:19:5f:96:32:03:
8e:3d:9f:49:7c:a5:70:fb:92:e2:19:dc:c7:31:a9:68:3f:77:
f5:20:f1:65:a2:ae:31:47:45:ff:5e:d7:40:00:2f:4d:d0:50:
e7:f0:87:36:9d:c6:26:1e:c1:cc:1d:4d:e0:22:94:01:0f:87:
eb:67:5d:0b:6d:f2:c5:55:7e:81:1c:5a:b8:e7:9e:e2:b0:95:
d9:f1:1f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:31:19 2025 by rpki-client