Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6dac1e94-2111-4cf4-a46e-09586d38d06a.roa
File: 6dac1e94-2111-4cf4-a46e-09586d38d06a.roa (raw, json)
Hash identifier: XyjAaKODeX7D9f7a2vkHQ7FNKTRTvq7pka2W1S95SMI=
Subject key identifier: EF:51:43:1D:AF:A7:FD:12:C8:48:3A:67:AB:4B:37:B4:60:3B:B0:23
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2B05E1C844C66328D58A166222E458F69328D547
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6dac1e94-2111-4cf4-a46e-09586d38d06a.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:05:e1:c8:44:c6:63:28:d5:8a:16:62:22:e4:58:f6:93:28:d5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=8deb7bb5e227fc50431bcefa8879a924f9ae9c1e596f2b6d3c21a1bfc54ac9ce, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:8c:e8:36:69:5e:ed:4e:49:a2:ae:18:33:
40:0a:c3:15:8b:65:fa:8a:68:69:3b:fc:c9:18:ff:
98:1f:33:06:a3:22:ef:d0:ee:98:bd:c2:d6:d6:2a:
26:0d:4f:f3:2d:53:e4:e2:65:f4:82:0d:ab:f2:9e:
6e:f5:9a:7f:4c:48:78:13:1e:41:58:e2:3a:3b:c5:
b9:0c:67:85:a6:ac:f5:2a:d6:49:6f:08:c4:d4:3b:
17:c2:23:a5:23:59:fd:57:5e:cd:f8:d3:b1:1f:5b:
4d:33:5c:94:d4:fd:da:2b:87:50:da:1d:34:55:6c:
81:d4:0f:02:09:54:6c:21:09:84:ef:0d:5f:df:b3:
db:53:dc:63:7d:2a:6c:fb:17:c1:6a:86:17:41:cb:
60:25:fe:39:9b:b8:c1:da:51:fa:f1:78:72:c4:05:
79:51:42:fe:90:70:a5:7f:88:3a:d1:76:6d:57:6d:
3c:37:af:0f:28:d7:3d:7d:04:5a:1a:e3:42:73:34:
5b:49:7e:35:14:5f:89:ce:29:99:aa:ac:06:7e:b1:
e7:00:0c:9c:79:f3:06:6a:1b:a3:3b:0c:1c:fc:1a:
23:da:00:47:9a:ee:00:62:04:f1:5a:8d:e4:c2:2d:
3b:ac:36:8b:36:e5:f9:fe:6f:72:8c:f0:77:96:49:
f8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:51:43:1D:AF:A7:FD:12:C8:48:3A:67:AB:4B:37:B4:60:3B:B0:23
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6dac1e94-2111-4cf4-a46e-09586d38d06a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:73:c2:8d:27:4c:00:57:7a:65:66:46:58:ba:67:6b:2e:a8:
a4:a9:0b:63:ba:69:6f:4d:c6:d9:ee:14:3a:c7:8a:e0:b9:ad:
c5:5e:b3:44:45:15:a4:0d:ba:5b:41:19:37:09:87:08:44:f6:
13:2b:98:54:07:f7:3c:a2:6d:16:78:29:62:ad:d2:5f:ff:4a:
87:31:c8:f9:68:6d:11:fa:26:1d:5e:c1:ea:51:fd:52:3f:1f:
24:78:49:92:7b:72:99:6b:81:6b:b3:21:ad:89:de:3c:8b:e8:
d5:ba:2a:f2:82:67:63:b2:07:e9:17:6f:0a:36:15:41:ee:ec:
ee:e4:a0:bc:04:b8:26:9c:2d:f8:26:c8:36:44:2b:11:7a:4a:
d4:30:b0:3e:f1:29:49:88:65:76:12:41:f8:82:a3:24:ea:38:
c4:5b:71:87:3c:2b:5b:7b:ff:2b:57:ff:e7:43:74:3c:c6:0f:
e9:28:44:48:d2:11:24:62:f9:a2:73:1d:f5:23:a2:df:2d:9a:
4f:15:ca:78:32:c6:25:06:56:54:76:5b:cf:2e:0e:1d:7f:6d:
04:9f:77:a3:b5:78:8d:8a:e9:40:71:70:06:f0:d4:cb:ac:71:
f9:a2:f0:cb:05:b7:73:a6:d2:9b:a5:81:32:de:90:dc:d2:eb:
29:6f:9e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:03 2025 by rpki-client