Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/57463725-5ca8-45d2-896c-c263741f1941.roa
File: 57463725-5ca8-45d2-896c-c263741f1941.roa (raw, json)
Hash identifier: zeptcE2StKws2ErQQQ0WUrvSYVx8FKtYwXYhwXKFKCs=
Subject key identifier: 70:D3:00:D9:A5:57:FD:97:9A:D7:E2:9A:D6:7F:0C:25:63:2B:3B:E8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 625D64129DA90DC8A0278C1CBB26F829DBC505CE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/57463725-5ca8-45d2-896c-c263741f1941.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:5d:64:12:9d:a9:0d:c8:a0:27:8c:1c:bb:26:f8:29:db:c5:05:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=e21353652e279b9422b22db95821c8d1ac43ce67dd160db107befaef4bd50f55, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:35:2d:a3:36:e4:66:b5:6e:58:be:d2:6a:
21:9e:89:cb:ee:3a:2f:07:e6:f7:fd:27:88:f7:3b:
49:89:a9:9b:e5:cb:83:42:84:28:ff:10:cc:47:d8:
98:87:25:21:8d:3c:f9:4c:bc:99:95:c4:64:3e:49:
83:54:e4:a7:54:cf:75:87:7f:93:b5:5d:e8:98:ad:
72:69:59:2f:fe:e3:7e:28:11:be:c3:0b:ff:54:da:
50:d7:33:18:6c:7b:39:64:05:8c:b7:7a:d1:80:55:
55:92:43:21:d2:d2:c0:d7:cc:29:d0:51:d4:af:57:
70:59:e8:9a:94:d0:bb:6b:11:5a:81:ea:bd:89:cb:
e4:bf:47:11:b9:88:03:9a:89:b1:86:ed:28:76:93:
d4:f9:f9:ca:50:c3:71:6b:df:2b:a1:6c:57:99:27:
e9:50:86:e1:53:c9:d8:28:df:38:79:4b:0b:21:53:
93:39:04:1c:a3:10:a3:28:54:72:15:24:74:a6:a6:
a6:48:e8:0c:27:0d:3f:33:8a:c4:08:ff:c5:20:f9:
d5:d4:97:75:7a:c8:ce:28:cc:a7:c5:f2:c7:8e:a0:
d5:51:2d:92:27:3c:90:93:5b:3a:97:37:78:15:a5:
96:0e:54:08:71:49:ea:fe:6b:5f:14:df:03:ea:5e:
9f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D3:00:D9:A5:57:FD:97:9A:D7:E2:9A:D6:7F:0C:25:63:2B:3B:E8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/57463725-5ca8-45d2-896c-c263741f1941.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f5:75:4c:82:b4:3d:ef:05:cd:8b:fe:b6:86:e5:3b:eb:fa:
f3:d4:e3:33:e2:3e:f4:8c:98:39:2e:58:e0:9b:fe:4b:50:02:
3c:97:03:6c:78:a2:20:1b:3d:bb:b6:41:b4:12:ff:e2:3e:b8:
3d:87:44:71:ac:98:6e:fa:e4:f2:89:8a:6d:db:7f:1a:a8:10:
74:65:0c:2e:21:b1:e4:7a:9e:2c:ba:62:47:f9:90:5a:2e:df:
c7:53:cf:e4:22:53:e6:5c:77:3a:03:38:fc:a8:d6:b5:89:d8:
47:33:a0:93:69:99:06:cc:d3:c6:32:2d:30:8f:b9:83:11:8a:
fa:48:93:07:01:5f:f8:a6:41:d5:6b:e2:1f:01:e5:b8:16:49:
67:7b:40:b9:80:29:de:f6:db:a3:a5:c0:b7:65:fe:32:03:9e:
e4:46:30:96:16:82:6b:93:9a:f6:9a:a2:97:ee:13:8c:78:dc:
6d:c1:66:4c:5e:52:f2:14:e6:6a:37:4c:79:6b:05:6e:b9:f5:
9a:b5:b3:67:a0:c5:1c:d5:e5:bd:4e:c9:7e:51:8d:da:5b:d0:
41:3d:8d:9e:59:18:ba:c9:92:21:26:c0:b2:e6:06:58:6c:ec:
cc:46:7b:68:0e:d4:36:a3:11:fc:ba:1a:d0:55:72:79:c5:1c:
9b:6d:19:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:07:47 2025 by rpki-client