Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5cf035df-fbfe-4333-9a30-d4ad92090651.roa
File: 5cf035df-fbfe-4333-9a30-d4ad92090651.roa (raw, json)
Hash identifier: yV5lqmqHFnwgdgqVaDcFw2tk8s7tb2lnOTqfsyqNtmI=
Subject key identifier: 11:06:A6:50:32:D0:5B:67:DB:82:74:9B:51:95:59:23:21:17:88:5E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 625F8F99C902953F6AF2F780C088651A06F13794
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5cf035df-fbfe-4333-9a30-d4ad92090651.roa
Signing time: Fri 28 Feb 2025 02:33:18 +0000
ROA not before: Fri 28 Feb 2025 02:33:18 +0000
ROA not after: Fri 04 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:5f:8f:99:c9:02:95:3f:6a:f2:f7:80:c0:88:65:1a:06:f1:37:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 28 02:33:18 2025 GMT
Not After : Apr 4 23:59:59 2025 GMT
Subject: serialNumber=4d675fe08b1d7a7f458e6bbdcc16746732c4b668cf4e2ebe1e816d7252655926, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7b:a8:22:72:ba:b3:87:90:58:f5:71:cd:c9:
51:0e:19:7a:07:95:b5:19:bd:d5:c6:e9:c3:b8:e2:
65:b0:c4:2a:aa:e9:81:c8:9e:20:de:64:bc:b4:22:
c3:a9:b3:b2:9f:db:b2:83:d5:ad:21:2e:9c:f1:e6:
12:9d:48:03:cc:ca:d0:4a:7b:d8:cc:7f:a2:e7:ff:
f0:c8:da:e1:02:e5:d8:5b:45:ac:7b:c5:f1:5d:38:
b5:be:20:2e:11:82:18:20:98:e2:cf:d3:41:a2:97:
43:2e:07:bd:5a:a1:a6:a3:5f:f4:97:b9:5e:23:bc:
af:8f:7a:19:5c:d3:45:d2:84:5d:79:36:69:ac:7a:
97:ed:c0:17:5a:ff:71:45:9c:dd:40:a7:8d:40:55:
c7:60:f7:cd:1f:96:81:a1:3d:23:7e:a0:b8:bb:c8:
eb:59:3d:ed:15:ba:3e:f8:15:77:21:1f:59:50:1e:
23:49:1d:66:13:38:dd:8e:43:1c:37:7e:df:7e:f8:
57:68:02:f3:c6:18:ac:5d:f8:27:e4:51:9f:97:96:
23:34:4b:92:a8:46:69:13:52:ec:e4:1d:4a:f0:8f:
94:5e:c6:01:f8:23:b1:21:b9:36:f1:06:fa:c7:8b:
54:c0:b3:84:51:14:45:30:b4:55:f2:99:e6:7b:44:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:06:A6:50:32:D0:5B:67:DB:82:74:9B:51:95:59:23:21:17:88:5E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5cf035df-fbfe-4333-9a30-d4ad92090651.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:0c:7c:c0:77:89:de:51:82:d4:85:8c:1e:09:77:62:9c:f6:
3f:00:d2:5d:cc:20:13:81:8c:ed:b7:23:80:c1:4d:88:91:8e:
90:56:16:3b:3c:7e:10:80:d7:ee:03:1b:76:09:f0:c0:99:3a:
72:2d:ff:07:f8:43:fc:a4:f4:70:a4:38:5c:dd:08:30:23:d5:
d5:90:35:80:e2:25:d0:80:0f:46:2c:b2:c0:7a:76:0c:7f:55:
7e:8e:60:e3:a9:ce:48:e5:4b:21:b2:51:c4:94:72:42:b8:1b:
f6:6a:8f:f5:1e:68:88:9e:dc:cb:37:18:ec:57:ed:79:c1:c8:
ca:ef:39:44:35:04:c0:69:64:2a:69:14:6e:3b:ef:f3:e0:aa:
fb:11:41:79:cf:6d:65:6f:57:0d:70:e3:b5:da:01:f2:88:80:
99:5b:b5:93:ec:b9:d2:25:1c:e7:41:fb:79:12:87:ab:77:c2:
7a:8c:35:bf:94:29:c5:9c:c1:84:ab:4c:a7:20:fc:03:7d:41:
25:1f:e5:3d:3e:92:35:be:7d:61:62:67:d8:fb:21:c3:31:b5:
32:9f:30:f8:7e:95:70:22:6a:fb:4a:38:0e:78:f3:45:87:3a:
40:41:0c:31:08:c4:86:e7:3f:8c:52:6b:d6:90:90:48:2a:5d:
dd:da:2a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:55 2025 by rpki-client