Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/55724709-05b3-4eef-aaf5-71f9f852a317.roa
File: 55724709-05b3-4eef-aaf5-71f9f852a317.roa (raw, json)
Hash identifier: 6rs6NbWeYjgr/0hYOae7C86YYL3WmRBM570UyY+whIo=
Subject key identifier: 83:E0:CD:38:3C:A3:8E:BB:A3:CE:71:CC:4D:59:BF:4D:9A:BD:F4:86
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5F6AD1C67F3C347C64A306ADAF23E2C362093086
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/55724709-05b3-4eef-aaf5-71f9f852a317.roa
Signing time: Mon 10 Feb 2025 00:00:00 +0000
ROA not before: Mon 10 Feb 2025 00:00:00 +0000
ROA not after: Mon 17 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:6a:d1:c6:7f:3c:34:7c:64:a3:06:ad:af:23:e2:c3:62:09:30:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 10 00:00:00 2025 GMT
Not After : Mar 17 23:59:59 2025 GMT
Subject: serialNumber=1b72075d966ae7f310c820bce62347e4058d8440c9725a0a8ebb382e0efc3933, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:b7:04:ba:9e:dc:69:8b:2c:70:16:54:5a:
94:e1:a1:7c:a8:d7:e0:6f:68:96:df:26:49:26:1b:
22:11:ee:d1:34:1a:e4:72:8b:a6:3b:82:d7:30:ae:
1c:b7:e3:77:81:15:a4:6b:f2:32:2c:7e:c8:74:9b:
1b:2f:9a:70:88:d0:c4:9a:1d:fe:30:aa:6b:5e:48:
f8:32:da:d8:6c:c5:f3:d7:8e:ab:6b:f8:5d:7f:45:
86:9c:64:07:c6:36:81:7a:a0:25:1d:39:4b:92:a8:
1f:e7:dc:a3:9f:94:e2:5a:39:e6:ae:a8:9f:4d:3a:
0f:0f:07:3a:40:d2:a6:f4:6b:10:f3:44:c5:8b:65:
03:cf:12:40:53:2a:25:1d:91:98:f6:51:65:f1:5c:
f6:fb:a2:39:c7:ee:d5:d2:ee:72:b2:fe:8a:fd:05:
f8:c9:fd:15:87:8c:84:e4:7b:9f:1c:6a:b0:62:38:
e0:15:95:67:83:fe:f5:e8:10:45:2d:1a:bb:e2:75:
dc:29:fb:88:3d:f7:a6:1b:d5:6b:84:f0:a7:17:67:
cd:8d:8d:e0:dd:b5:32:9f:40:7d:67:a5:9d:72:be:
32:c4:2c:af:d3:8f:a3:d8:c0:82:f0:bb:ad:16:d1:
ff:20:29:99:ef:86:f5:16:ec:ef:28:5c:44:9c:38:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E0:CD:38:3C:A3:8E:BB:A3:CE:71:CC:4D:59:BF:4D:9A:BD:F4:86
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/55724709-05b3-4eef-aaf5-71f9f852a317.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
48:17:6c:d1:11:73:1d:e9:6b:90:13:f0:14:83:d7:28:3f:84:
5f:3c:a8:86:86:ca:9b:e1:10:54:1f:f2:64:41:fa:f7:c2:b8:
f6:16:4c:44:db:45:22:f0:7e:23:5f:9d:52:78:60:de:4e:30:
0d:16:de:b2:09:d5:56:36:7e:4c:3e:26:d0:da:ff:f1:34:8f:
3b:4b:ed:02:c6:3b:d2:9b:01:0d:f0:ac:7e:27:2c:9a:42:07:
08:db:ba:a3:28:12:4f:4c:cb:a6:53:f3:b2:d1:39:db:b7:a8:
ad:72:32:34:38:0d:f4:31:47:d3:c9:71:b3:b7:5a:83:75:bb:
05:b4:e2:d2:4e:f0:29:9d:0a:3c:e4:d3:da:b8:eb:42:f3:8c:
0e:6f:de:b2:24:e4:80:75:c7:6a:e9:2a:f7:4b:54:d7:13:db:
93:bc:63:da:de:05:19:3b:e5:41:1d:e5:c9:43:90:71:98:9e:
93:a0:c3:c1:da:12:bb:a4:b1:10:2d:8a:36:31:f0:c0:9e:e5:
f3:f0:9f:a5:ea:3e:c0:b0:d6:6c:2e:a7:c2:06:09:cd:79:1a:
72:3e:01:b7:e7:44:c7:b6:59:c4:09:ce:5e:3a:5f:98:23:6f:
d9:23:4b:e5:06:29:d4:81:ea:33:1d:04:69:99:11:23:d9:a1:
5d:ca:13:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:12:36 2025 by rpki-client