Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5281ea44-c054-4ce5-9126-9610891d5a3d.roa
File: 5281ea44-c054-4ce5-9126-9610891d5a3d.roa (raw, json)
Hash identifier: lOduU4GpsntmA9tS0nHveZZFv0RGdbJIV+668kYtjcA=
Subject key identifier: E6:E3:54:5B:F7:17:56:91:7A:0F:32:F6:B3:C4:3C:F7:CA:99:18:3C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2208E0F8067B5D63DD40B285F156BE0577347C17
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5281ea44-c054-4ce5-9126-9610891d5a3d.roa
Signing time: Tue 06 Feb 2024 00:00:00 +0000
ROA not before: Tue 06 Feb 2024 00:00:00 +0000
ROA not after: Tue 12 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:08:e0:f8:06:7b:5d:63:dd:40:b2:85:f1:56:be:05:77:34:7c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 6 00:00:00 2024 GMT
Not After : Mar 12 23:59:59 2024 GMT
Subject: serialNumber=c60392fdd111554f8d3208897c8787fd6361f1a0799483d65474ca16d9a68629, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:24:df:97:19:09:43:75:67:83:65:7a:73:
02:fb:d3:a3:ec:34:d5:7a:21:db:77:4d:9e:fa:c6:
a7:03:20:c0:fc:44:27:ca:ea:18:2b:7d:07:59:05:
a2:50:99:88:9a:53:98:b5:b1:1c:90:70:57:19:74:
3c:1a:25:c2:36:67:3c:41:86:04:c6:6d:ad:41:79:
8c:60:0b:67:ef:74:33:ec:50:9d:8e:e6:58:54:2b:
df:d2:ba:0e:20:83:45:4f:e3:9d:69:10:bd:42:aa:
8e:ad:79:ee:f0:3c:39:8b:58:2e:15:16:ec:ad:d5:
14:e3:c2:68:3f:76:04:bb:e7:71:7b:a7:fc:3f:00:
f2:f9:c9:f0:6b:af:81:9b:94:4c:47:60:d0:e7:7d:
fd:97:e4:0f:8d:a4:ff:da:16:09:90:fb:27:69:0a:
f7:d6:c5:ef:ad:0b:69:7c:31:c3:8e:96:97:2e:d6:
f5:74:63:a8:d5:14:00:43:de:b7:80:27:c4:8c:6c:
c7:06:e3:0e:da:02:e7:54:96:e4:88:fc:f1:56:e6:
f3:e7:82:a4:95:8b:9b:d9:24:0f:fa:86:9f:0b:a4:
9c:24:5e:db:97:96:f5:8c:c9:63:8f:e0:09:03:44:
d5:e1:03:c3:46:09:57:f4:f0:ee:98:63:92:8b:4f:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E3:54:5B:F7:17:56:91:7A:0F:32:F6:B3:C4:3C:F7:CA:99:18:3C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5281ea44-c054-4ce5-9126-9610891d5a3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
82:1a:19:6a:80:47:73:91:13:5e:19:23:7e:c4:17:e2:a3:0a:
37:33:2e:2f:e4:c2:ea:5b:30:9f:e4:c1:82:7a:98:89:8f:68:
bf:f2:f5:08:bf:7f:80:84:ec:54:32:3c:55:ba:cf:2a:91:a1:
36:78:c6:47:f2:41:42:50:34:c3:fe:ec:85:d2:cb:c6:e4:38:
a9:2a:7e:ea:4f:3f:91:b8:72:d1:0f:ee:6b:34:89:27:78:42:
2b:90:59:dc:24:5c:66:e7:26:f3:f1:57:0f:63:f3:c3:43:af:
0c:56:ff:8b:79:fa:1a:8a:0c:7c:62:3f:87:80:66:01:e9:a5:
10:e6:3f:0b:a4:76:11:b7:3d:cd:53:0e:15:a5:f5:2f:cb:71:
32:d6:cc:50:c0:6c:a7:a3:0e:b4:7d:c9:31:99:2f:5e:e9:86:
d5:33:04:51:50:32:16:30:d4:6f:71:ef:fa:ff:a4:e2:81:b3:
07:a0:76:6d:1c:0f:69:4a:c6:9e:05:dd:7f:d8:39:f0:d4:49:
ca:ad:7a:9b:d3:c5:c6:d0:52:4f:8c:1a:59:b6:d2:9f:ed:fa:
61:8c:3d:ba:2c:73:48:d8:36:a2:e8:0e:74:74:f4:4e:e7:53:
3f:ab:8c:51:83:f7:dc:cb:0e:68:75:30:09:7d:2f:50:5f:22:
52:e2:95:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:15:57 2025 by rpki-client