Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6aa1d779-4b01-45c9-95af-ec82a2fc047a.roa
File: 6aa1d779-4b01-45c9-95af-ec82a2fc047a.roa (raw, json)
Hash identifier: SCQ3fBMgDF68kjcnQAVHFzt4qU7Pljm/ArV6WHe91fE=
Subject key identifier: 8C:3D:8D:FA:41:02:66:8A:49:9A:DA:B6:61:82:4B:F9:7B:10:4F:7C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 110E5EE7D96C0800AF45295902CD574C8797CCEF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6aa1d779-4b01-45c9-95af-ec82a2fc047a.roa
Signing time: Sun 02 Mar 2025 07:58:21 +0000
ROA not before: Sun 02 Mar 2025 07:58:21 +0000
ROA not after: Sun 06 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:0e:5e:e7:d9:6c:08:00:af:45:29:59:02:cd:57:4c:87:97:cc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 2 07:58:21 2025 GMT
Not After : Apr 6 23:59:59 2025 GMT
Subject: serialNumber=b4743dfe00041fecaf09e7f9834d6b766ac25b543738ea094081b787fb06da67, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:50:9a:d0:7d:4a:5c:fe:6e:66:d7:99:fe:
22:da:4a:a5:ba:5d:98:70:09:87:40:23:a1:6b:3a:
73:b0:8e:e5:a7:f4:ab:a6:da:e8:43:c3:38:18:d6:
6a:89:82:6b:ed:f0:2c:0c:c6:d0:93:f6:98:f6:e4:
e1:d2:be:06:59:74:65:51:15:1e:ea:ee:76:f6:8b:
a9:bf:84:9b:45:7c:53:58:82:e2:f3:89:d3:b2:97:
cf:09:b5:ce:17:d5:94:d6:a7:7c:56:d7:89:bb:4c:
dc:5c:50:53:7c:47:e8:04:42:48:67:de:a0:65:d7:
01:fd:01:7d:75:2f:cc:e5:27:e5:48:65:98:dc:83:
c7:e4:3c:f3:fc:62:a3:2c:38:d1:4f:ad:21:17:0a:
30:47:90:c9:f0:b0:66:b9:86:73:b9:88:28:dd:99:
05:d0:42:3c:5b:c1:0d:83:9b:e8:4e:61:e1:f9:e8:
5b:f8:64:50:46:ad:69:21:c6:78:36:dd:51:5a:22:
75:d2:90:23:b9:b6:72:15:4a:f1:e5:ab:ef:9b:37:
49:55:b1:88:22:54:a7:2c:9c:3c:d9:30:c2:da:7a:
03:76:48:8e:93:56:26:09:2e:b8:53:be:48:8c:8b:
97:84:cc:d4:b9:ba:54:78:2e:47:e3:9c:fd:62:1a:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3D:8D:FA:41:02:66:8A:49:9A:DA:B6:61:82:4B:F9:7B:10:4F:7C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6aa1d779-4b01-45c9-95af-ec82a2fc047a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
18:3c:fd:b5:0f:ca:ec:e7:4a:a7:c0:a0:c6:a2:89:d8:b5:54:
d5:68:1e:6a:76:d0:55:db:12:41:3b:67:f3:68:b3:86:fc:b8:
15:33:4d:f6:ff:03:5d:11:90:40:f2:f2:75:0b:51:1d:6d:29:
72:25:cc:6d:54:f0:21:39:bd:e8:af:8a:fd:e5:cf:c9:c0:0e:
7f:60:11:92:d9:3b:dd:bb:4c:93:25:34:37:37:73:3c:5f:be:
32:82:bc:05:e9:04:d2:2f:a0:4e:d7:f2:5a:79:16:14:18:94:
2e:34:08:76:9a:35:f5:ab:28:45:34:5f:6a:74:40:88:a7:a4:
5c:bc:16:ac:07:17:78:68:8c:9c:d1:ef:ea:0f:34:bf:eb:80:
91:7c:4b:4f:86:ab:fa:e4:8a:5a:c9:fd:0e:f1:28:e7:d8:ea:
d8:b5:14:ad:9b:04:98:ad:66:6e:0b:9c:45:76:96:0f:70:f1:
90:c8:53:8c:a7:2a:a8:16:44:ed:f7:ad:64:cf:a0:98:43:13:
d2:7c:33:5b:2a:d5:8e:ec:12:0f:1a:91:e6:8b:1b:93:f7:81:
ec:94:e1:d0:7c:46:52:d8:bd:84:24:39:1f:06:3d:1f:ca:c1:
32:4a:57:6e:7d:8b:eb:5c:a1:8a:0c:81:29:ea:e1:41:0d:bc:
f1:c6:b8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:20:25 2025 by rpki-client