Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/66391049-61c6-43d0-a809-7c2aa261d521.roa
File: 66391049-61c6-43d0-a809-7c2aa261d521.roa (raw, json)
Hash identifier: FU/hsUk3G4fHDqD+MDQbilnQ5ZgNbD8XTm6pBnAmi8I=
Subject key identifier: CC:1E:AB:CA:09:01:59:F6:81:AF:70:75:C9:76:CB:45:42:F6:63:DF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2680753A516D7D75DB1AB4CD730D20977924C2D1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/66391049-61c6-43d0-a809-7c2aa261d521.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:80:75:3a:51:6d:7d:75:db:1a:b4:cd:73:0d:20:97:79:24:c2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: serialNumber=c251e3542977b98af39a61d9a9b22a7e7ba2ed1b6d86e89a8b8cc43b90d21b4a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:69:6e:89:63:05:22:ef:13:1e:77:3d:9a:
6a:7e:fb:d9:aa:de:9f:8e:ca:a3:39:7f:57:8d:18:
49:14:4d:d5:e5:e5:20:9f:cd:11:ad:58:4d:82:0b:
85:38:26:0e:7b:9c:68:50:fe:ca:5e:58:d1:4c:22:
b4:6f:5e:4e:03:a3:f1:61:00:3a:52:89:44:f1:bf:
f6:68:0c:7a:7a:3e:5d:b6:9e:0b:ab:ef:35:68:0b:
60:cf:c9:d0:34:7d:b3:15:f3:55:3f:0d:26:66:13:
51:f1:3c:77:51:a9:ce:51:c4:cb:d8:6a:d9:7b:2c:
5a:36:c2:f5:d9:d1:c1:54:90:b6:b6:72:70:f8:a5:
58:fe:c8:65:c3:4a:c6:a9:ae:e8:ee:13:60:bc:ad:
2a:49:b8:d0:23:f0:b2:3d:4c:e6:49:d2:33:af:b4:
6c:79:04:83:da:71:f7:c8:97:4a:67:de:78:02:43:
f8:dc:92:f4:04:72:1f:57:3c:f9:32:6e:f2:14:0c:
49:73:d7:49:85:79:86:38:e2:a2:11:00:a8:55:a4:
43:73:2d:ee:b5:07:42:77:29:3c:16:86:08:82:1e:
c5:3f:ab:22:de:1c:d8:bd:ae:f6:2e:c3:ba:73:68:
c4:94:aa:86:c2:75:e5:4b:fb:1c:a2:4c:82:8a:77:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1E:AB:CA:09:01:59:F6:81:AF:70:75:C9:76:CB:45:42:F6:63:DF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/66391049-61c6-43d0-a809-7c2aa261d521.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3c:74:b2:be:d0:db:64:97:69:f0:e1:9e:6f:33:49:73:c3:
e6:f4:86:29:f5:60:0f:0c:3d:71:d7:2b:4a:ad:b0:65:fe:45:
04:62:f8:90:6b:73:58:4c:87:de:63:88:cd:aa:8c:53:60:0a:
41:33:18:c6:9d:a1:3a:05:22:c6:71:e8:43:4a:a5:ea:e2:50:
42:35:50:45:5c:9a:9a:29:90:94:87:d5:7d:62:38:5e:06:d0:
97:af:49:df:a7:ea:58:ce:6e:db:0c:e1:57:a1:65:be:32:69:
10:e3:68:b5:13:01:0e:02:60:b7:01:75:81:d0:3c:1f:57:33:
ee:a5:5d:77:49:51:41:e1:8e:d6:26:c7:30:24:db:9b:f8:c1:
87:f8:20:bf:80:cf:f5:70:99:9e:d3:59:33:1b:34:3a:67:32:
f5:c0:be:da:5c:15:c6:37:da:33:4c:c9:22:41:31:f5:7b:6e:
1a:f0:49:e2:26:ec:e9:e8:19:55:15:52:b1:7b:6c:7f:93:7f:
d2:c7:9d:3f:2d:d8:1d:9b:59:29:8a:7e:51:3d:c3:69:e3:0c:
e9:85:be:b8:1b:35:f4:33:4c:4f:a9:aa:27:bc:e2:99:9a:b6:
21:74:38:9b:cb:f6:1d:a5:25:4e:3d:81:7b:44:6b:a9:bb:90:
b6:54:95:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:05:02 2025 by rpki-client