Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6490cde0-9dc1-4624-88cd-ef906bc03dbe.roa
File: 6490cde0-9dc1-4624-88cd-ef906bc03dbe.roa (raw, json)
Hash identifier: iYTllKyuCq4AD9Di/FJzwTJSTm85Bmf/I0DScjucp4U=
Subject key identifier: 9D:3D:38:35:76:0B:A6:CA:41:05:93:89:A6:84:2B:13:0C:A7:AC:E1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 72312AD85E57DA15D2F5FE44A477A7EF4C78A725
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6490cde0-9dc1-4624-88cd-ef906bc03dbe.roa
Signing time: Sat 06 Apr 2024 00:00:00 +0000
ROA not before: Sat 06 Apr 2024 00:00:00 +0000
ROA not after: Sat 11 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:31:2a:d8:5e:57:da:15:d2:f5:fe:44:a4:77:a7:ef:4c:78:a7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 6 00:00:00 2024 GMT
Not After : May 11 23:59:59 2024 GMT
Subject: serialNumber=fd0792aea66fcdd7749330e7c9b155aa7343fc9907862f9c1594775db05f6fc3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:39:e4:11:f1:45:85:c7:78:e4:fe:28:65:
80:66:a5:6b:ee:ff:68:7f:76:07:d2:27:11:63:4a:
96:82:56:e6:d5:af:1d:7f:fb:01:52:fa:a4:1f:e7:
13:ef:90:21:23:fd:ee:bd:ad:18:bb:83:43:b3:47:
21:61:a9:c7:9c:50:f5:b0:6e:ed:60:30:10:75:18:
4e:dc:00:56:97:bc:97:18:0b:d1:af:aa:45:77:84:
a3:5e:72:56:b6:31:c1:40:2d:87:a8:da:a1:8c:39:
a9:57:5b:76:47:9f:d7:d0:90:c0:e1:f6:e7:4b:de:
a5:35:25:ea:1c:f5:3a:60:ec:68:14:f0:91:d6:ec:
08:7e:20:b6:a4:51:87:d9:e9:d8:82:dd:4d:53:10:
3d:9f:fb:b7:0c:51:97:1a:5c:fd:15:50:ae:72:b4:
aa:41:a3:55:7c:10:b8:40:58:96:9e:49:e1:15:df:
a4:79:a4:61:10:a8:1e:1a:9f:2d:7b:fa:09:75:9b:
bb:3d:1b:70:e5:cc:22:3e:6f:fa:88:ce:ef:6f:ea:
68:d7:a5:88:eb:c3:ea:f4:b5:3b:74:35:42:ed:cd:
0b:47:f5:91:9c:41:5c:8d:dc:f1:6a:6e:33:a6:dc:
47:19:58:68:12:d5:0d:20:bb:61:ca:77:8d:38:6b:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3D:38:35:76:0B:A6:CA:41:05:93:89:A6:84:2B:13:0C:A7:AC:E1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6490cde0-9dc1-4624-88cd-ef906bc03dbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:11:1e:88:3f:22:d4:26:16:1d:46:54:8d:59:1f:57:80:ab:
92:cd:9e:c8:19:b4:69:7b:fd:23:1f:f4:a4:1e:d7:18:3c:fa:
d6:50:96:ef:04:e2:56:a5:4e:04:c7:f8:f3:68:ec:b6:20:57:
06:a4:f2:b4:01:26:17:1e:87:55:92:f0:37:d9:90:5c:80:f1:
c2:2e:f5:47:db:8b:e2:7a:b0:c1:40:55:c8:b0:de:32:47:e4:
e6:fa:0a:47:1c:26:6f:4b:10:3f:22:9c:28:c8:8a:36:b3:17:
86:39:01:5f:31:7d:c7:33:68:65:9f:af:a0:ef:4e:1b:49:59:
53:7e:30:43:4f:da:9d:90:0a:75:65:c1:6c:c4:70:fd:da:2b:
8d:32:b4:a9:3d:c9:6f:92:6e:f6:97:97:93:cd:44:f4:34:3d:
1f:39:09:f6:48:43:b8:1a:da:ae:a8:3c:73:e3:ab:49:47:e1:
19:7f:29:9d:c4:08:21:f8:ff:1c:58:d0:bc:c5:b4:03:09:13:
b4:f3:6c:66:c5:34:2f:fd:5c:68:00:9c:02:56:fe:37:de:9f:
fa:03:c0:54:89:6f:28:c0:43:51:41:e4:ea:22:69:1e:13:f0:
c5:9d:83:b8:24:96:01:3c:59:1a:26:a5:47:77:7d:e1:d6:2f:
93:a3:63:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:31:23 2025 by rpki-client