Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4afde8e9-019d-4508-be13-56cc2040be67.roa
File: 4afde8e9-019d-4508-be13-56cc2040be67.roa (raw, json)
Hash identifier: M1Y95em+X3FeiT04ZzKv/sNb6lt8OsnERa9NT4hBnhw=
Subject key identifier: E4:23:AA:2C:6B:CB:BF:3D:B5:85:8D:60:A0:F2:B6:EC:2C:AE:D7:08
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 08A85B2EB9F0743E9FEC84420F385AEC1EFF0E33
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4afde8e9-019d-4508-be13-56cc2040be67.roa
Signing time: Thu 09 May 2024 00:00:00 +0000
ROA not before: Thu 09 May 2024 00:00:00 +0000
ROA not after: Thu 13 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a8:5b:2e:b9:f0:74:3e:9f:ec:84:42:0f:38:5a:ec:1e:ff:0e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 9 00:00:00 2024 GMT
Not After : Jun 13 23:59:59 2024 GMT
Subject: serialNumber=d48472c2978fc1f11b76069565b6e66ffa1542c684902f48c1abb015fc49d4a4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:b8:b6:3f:66:0a:40:95:0c:14:50:5a:2f:
47:21:9b:34:cb:e8:bc:f9:a1:cb:8e:f8:8a:3c:61:
52:2a:75:c7:5a:39:b1:7d:2b:4f:3d:b4:6a:85:72:
74:cf:ef:c4:f8:16:cf:c8:b8:47:4d:19:11:a9:78:
b2:05:e7:bd:a4:de:0e:6a:02:36:e8:7c:22:7b:70:
a1:d7:53:75:c4:a2:af:7e:22:a4:1a:03:8c:8f:31:
28:67:cf:a5:99:49:8c:bf:54:d9:57:64:1c:a4:ac:
e6:5f:5a:cb:30:ac:be:e6:ea:98:25:35:48:87:62:
b2:98:5f:9b:e1:fa:aa:ff:85:92:cd:8d:55:f1:cf:
2c:cb:c9:8b:83:d8:2e:f1:57:fd:fe:7b:2b:8c:85:
45:00:00:38:fc:ad:de:ee:0e:d1:dc:5f:8e:be:26:
57:cf:5b:bc:3a:d9:ce:65:75:3a:e4:c7:40:45:07:
70:ac:6b:41:bd:d0:cb:83:15:ac:0c:4a:43:c5:74:
c2:8c:75:f3:99:99:f9:ca:f3:08:5e:f9:0e:8d:dc:
25:be:4e:d5:12:4e:c0:94:4f:72:16:c1:36:74:2e:
e6:65:d0:fe:06:53:d3:55:7c:e2:47:c5:c9:90:da:
3d:3b:38:19:a0:95:64:ad:09:ff:d5:0a:d2:a8:46:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:23:AA:2C:6B:CB:BF:3D:B5:85:8D:60:A0:F2:B6:EC:2C:AE:D7:08
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4afde8e9-019d-4508-be13-56cc2040be67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
89:dd:f6:7c:83:b9:e5:90:d7:80:c0:61:1c:61:3c:70:10:dd:
ac:e0:8c:a5:fc:2a:5b:0c:ba:22:e5:e6:5a:d6:d9:45:79:2e:
f4:38:01:bf:4a:57:b2:c2:e8:84:14:50:a9:23:c0:54:c9:23:
5f:d4:9a:c9:a6:58:a9:7a:05:ee:83:ad:99:7b:22:c1:f9:1f:
8e:50:62:e3:72:d4:6c:de:25:af:3d:1c:f0:ef:13:e3:38:98:
08:4b:93:46:3b:78:e3:ae:51:b7:06:0b:3d:69:89:d3:a4:22:
8f:b5:84:8a:d1:f1:d3:d0:85:ed:b2:1f:1f:e5:79:06:a9:e8:
9d:c8:f3:19:a9:69:e7:bc:64:09:c2:99:c1:ae:f8:d6:24:85:
e1:8d:44:91:e8:86:8b:6f:12:8e:a9:4e:71:4a:3c:ba:70:15:
39:58:13:d3:88:fe:fc:4f:5f:ef:22:ff:1d:aa:6e:51:e5:ef:
8b:1b:8f:bf:80:ae:bc:37:d6:21:f4:50:e7:82:f4:1e:85:fa:
bb:8c:2f:fc:23:93:aa:59:95:43:b9:e4:c4:da:e1:8d:c7:96:
dc:1b:25:9b:af:f7:24:9e:cb:6c:b5:9b:a2:5f:bd:9f:b7:ee:
be:e5:ff:8e:ed:e9:ed:36:f6:bc:bd:8d:32:5c:ec:e1:dc:2e:
84:19:78:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:44 2025 by rpki-client