Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/66a8c7f6-3454-4fd6-b015-325cb387084c.roa
File: 66a8c7f6-3454-4fd6-b015-325cb387084c.roa (raw, json)
Hash identifier: oF/zcDgeby/R/3awRft4CS0sDWmHpfb0hZlHurqvbBE=
Subject key identifier: 08:49:1F:6E:1F:47:C0:EC:2A:63:B9:09:0F:BE:86:3B:8B:BC:80:C5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 16668C4EC92B76AAFB83510B01EF46BB226514E5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/66a8c7f6-3454-4fd6-b015-325cb387084c.roa
Signing time: Thu 19 Dec 2024 00:00:00 +0000
ROA not before: Thu 19 Dec 2024 00:00:00 +0000
ROA not after: Thu 23 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:66:8c:4e:c9:2b:76:aa:fb:83:51:0b:01:ef:46:bb:22:65:14:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 19 00:00:00 2024 GMT
Not After : Jan 23 23:59:59 2025 GMT
Subject: serialNumber=2c27dc367436302dc7494fd3e401e90fe77d9afca8a5e854b69dc904b675994a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:7e:92:5a:1b:a8:99:4f:ed:bb:99:6a:36:
0d:15:b1:e4:53:ad:52:64:ec:a3:78:c2:5c:4a:6e:
1a:6d:7f:bf:4a:6e:ab:fb:31:f4:68:a2:8b:8c:ae:
e1:3f:bf:3c:4c:e8:70:40:f2:6f:3f:47:23:06:d2:
d8:4c:53:b5:c9:af:97:50:d3:86:1e:a3:71:0e:fd:
7c:8e:83:d7:97:98:b7:6d:ef:53:6d:7c:29:25:6d:
3c:b9:c7:29:01:ae:b1:37:f2:96:47:c2:1b:84:be:
75:a9:23:22:29:9b:ec:29:ec:e1:19:8e:ce:a6:5f:
47:02:6e:fc:56:04:6c:65:66:bd:8e:92:39:77:e3:
66:52:4c:88:ba:c8:cb:8a:a1:93:33:3a:37:6c:56:
7a:6c:57:2f:a9:eb:bc:a8:f5:46:21:15:19:01:d5:
37:50:c3:47:3f:3e:bc:4e:b4:ea:c8:4d:28:2d:ea:
35:48:6d:9a:01:9b:61:a2:7f:77:14:f7:a6:de:cf:
19:57:34:cc:0b:87:21:a0:7d:37:bc:34:16:41:db:
39:9b:cf:85:c4:f9:e0:3d:4e:06:b0:10:57:ad:e4:
37:ce:18:1e:44:38:bf:62:12:8d:df:55:03:5e:54:
e5:61:ca:25:f0:0e:f8:c9:67:98:a6:53:7a:2e:06:
21:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:49:1F:6E:1F:47:C0:EC:2A:63:B9:09:0F:BE:86:3B:8B:BC:80:C5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/66a8c7f6-3454-4fd6-b015-325cb387084c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:8b:7e:d9:0c:eb:f5:19:ad:1c:be:66:f4:05:1c:ad:f0:48:
ce:9e:e1:c9:36:65:8c:72:65:e2:cc:f4:b2:89:98:64:3e:2d:
21:68:ed:fc:c8:25:c5:02:a2:3a:9c:a2:92:cc:2f:fb:a8:1e:
68:f7:0e:17:08:82:19:c6:d5:0c:26:49:f1:3e:af:3b:47:55:
b2:c3:ab:ea:67:d4:59:d3:57:de:98:fe:74:98:e8:c0:7d:29:
e6:aa:5a:90:8a:8d:a0:10:8b:42:3c:98:f2:16:ab:74:a4:3d:
e7:2c:91:b1:6a:1f:53:e6:33:7a:b4:8f:3f:6a:84:77:22:4f:
aa:79:e3:e5:6a:f4:ca:f5:80:23:6e:78:60:b6:97:5b:ab:87:
8a:cd:a0:b3:72:ab:cb:64:7a:de:93:55:f0:89:fe:d5:f4:ea:
f6:95:ae:2a:8b:87:9f:1f:7b:da:22:f2:0b:6e:e5:0d:6f:50:
83:63:c1:45:1a:22:47:c3:ab:a2:83:66:af:93:1f:18:3a:ef:
6f:dc:b5:fd:e8:e3:70:e0:37:d9:97:b5:36:c3:e7:a6:92:64:
4e:0f:4f:71:ac:1a:a8:10:1d:32:ba:5e:c0:2e:5a:24:c6:f3:
65:1a:9d:e2:ee:eb:b4:35:e6:d1:84:4d:45:89:ad:43:55:91:
a4:49:b4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:01:51 2025 by rpki-client