Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5dff3b4c-c22a-43ef-a462-3ee6f1eb9bf8.roa
File: 5dff3b4c-c22a-43ef-a462-3ee6f1eb9bf8.roa (raw, json)
Hash identifier: oEdAMvjNNu/GFS3u3OF+pBzoarr+gaCu+CV9vFFKVTI=
Subject key identifier: FE:3D:99:60:7C:DC:DA:EA:AF:39:8E:67:5C:5B:94:8D:13:ED:7C:57
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 780C22094F5698B034081BB8729882B695DF7BEC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5dff3b4c-c22a-43ef-a462-3ee6f1eb9bf8.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:0c:22:09:4f:56:98:b0:34:08:1b:b8:72:98:82:b6:95:df:7b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=81ec05caac640f2e274b046d771f9dbbd0aba13e623ca39571f83a7fc40c7040, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d9:f9:f9:fb:17:c0:ec:ad:3b:b5:36:ea:a6:
dc:26:b0:d4:73:14:f1:39:98:df:46:b5:2a:ee:18:
bc:7b:67:2c:30:10:ad:41:f1:52:5f:be:3c:05:cd:
34:93:ac:ed:52:be:20:2b:e6:36:76:33:c2:cd:b2:
94:c0:2e:da:2d:9a:fb:83:27:b0:76:c7:33:3e:3a:
92:34:7c:b5:f9:c8:9f:f5:03:db:63:07:bc:66:5e:
77:8b:11:89:a2:5a:9f:a2:e2:3d:ac:27:aa:bd:84:
ca:65:e6:f2:55:08:ac:03:a5:d3:05:15:1a:16:f9:
8d:a9:0c:b2:20:f4:cc:3f:a2:d1:05:ad:a3:2b:70:
f9:3a:9a:e7:3b:bc:88:8b:12:48:7c:0b:7a:2f:5b:
d5:e8:49:3b:d0:6e:0d:eb:39:12:ac:87:79:1a:de:
0e:55:46:0d:dd:5d:b7:98:9e:09:20:d1:57:bf:60:
54:9d:ee:39:af:62:c9:5f:48:90:78:e4:a0:92:5b:
52:59:2b:6e:b2:9d:91:b0:a0:aa:9f:36:2f:16:96:
b6:6c:c1:01:58:0c:22:a6:7b:c7:c4:13:ff:ec:cb:
90:75:a5:92:52:fe:9c:9d:4c:96:28:8c:c5:43:12:
a7:a8:d3:2c:51:e0:11:67:02:b9:d9:d8:f2:fd:4f:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3D:99:60:7C:DC:DA:EA:AF:39:8E:67:5C:5B:94:8D:13:ED:7C:57
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5dff3b4c-c22a-43ef-a462-3ee6f1eb9bf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f3:d1:7a:4a:37:70:be:36:26:02:b2:ba:99:e4:91:16:da:
d3:97:f1:fb:c0:57:0b:9d:eb:1a:2c:e7:13:4d:49:74:e8:af:
be:d2:e2:fd:39:51:85:4d:09:b4:ed:90:d7:8e:a4:f5:02:1b:
7b:87:ea:58:5e:6a:b0:28:7d:2e:75:7b:da:3c:fe:85:42:64:
b2:ea:c4:2a:a1:cc:1f:46:49:64:05:d1:b4:a5:16:0e:40:4e:
f9:1d:aa:4b:49:41:d6:80:b1:b0:96:d1:e6:6e:83:1f:3a:ff:
97:34:36:46:52:fe:ee:97:c6:7a:b9:52:91:00:6f:26:a1:fd:
72:08:a9:7a:93:42:1c:62:25:74:1d:bc:c9:55:ba:3d:2a:c0:
12:77:c4:37:cb:0f:44:bd:35:ef:9f:8b:60:e6:eb:0e:5f:54:
64:2d:7f:74:4b:3f:c3:6c:db:47:71:50:e9:57:6f:9a:2d:6b:
d2:fa:b3:7a:62:c2:41:85:22:45:da:08:37:dd:09:0f:7f:9d:
35:fd:d3:86:3a:cf:47:5d:3f:cc:b4:f8:25:6f:5e:e6:5a:b0:
e0:d5:d9:4d:28:89:b2:48:0b:79:ee:5d:31:fd:ef:8c:97:4d:
bb:8e:60:51:26:1f:92:8e:7e:43:6b:d6:75:95:bf:c4:c4:9f:
92:2e:cd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:51:13 2025 by rpki-client