Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6dddfbf9-7a1f-4624-9f31-88255bb1ed8c.roa
File: 6dddfbf9-7a1f-4624-9f31-88255bb1ed8c.roa (raw, json)
Hash identifier: 3C2q7Wcoidkx8UqNvGvhnfo7VcgxLxtgajrGb+1+7Ck=
Subject key identifier: 53:78:38:07:A3:50:EF:DE:F7:75:30:EF:FB:DD:8A:FD:C7:95:59:AE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 766E52633E0B49AE9F402C298D5B652599366632
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6dddfbf9-7a1f-4624-9f31-88255bb1ed8c.roa
Signing time: Wed 29 May 2024 00:00:00 +0000
ROA not before: Wed 29 May 2024 00:00:00 +0000
ROA not after: Wed 03 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:6e:52:63:3e:0b:49:ae:9f:40:2c:29:8d:5b:65:25:99:36:66:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 29 00:00:00 2024 GMT
Not After : Jul 3 23:59:59 2024 GMT
Subject: serialNumber=360986d77d13b01ecf3e7cd6bc70bce367a31269945dd11c92575a947b7bcfcb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:b6:59:1a:99:34:9e:35:17:e9:08:57:87:
a6:ad:79:f3:75:39:54:e8:3a:92:f6:3f:df:99:4d:
77:9c:be:ff:61:fc:54:34:14:8a:ca:e7:8c:d1:50:
dc:3f:14:a5:de:9b:d2:7f:84:dc:36:16:ba:7a:e0:
48:95:8d:62:16:ed:a9:b8:0e:cf:b8:79:9e:9f:e6:
ec:5a:af:f5:2d:84:a2:60:09:05:95:48:7a:f7:ac:
f8:28:e8:b0:a8:1e:ac:a0:73:7e:d4:1e:53:ec:b1:
00:31:75:b8:08:ec:1e:83:89:6a:c6:16:d3:bd:b5:
84:66:d3:db:34:f0:e3:3c:89:4e:f8:a8:79:eb:67:
67:c8:37:36:b9:4a:42:bc:30:4b:65:b4:9a:a3:97:
71:85:c1:c9:05:f9:93:b6:dc:39:4d:6b:7a:4c:43:
52:3c:00:bf:e6:32:47:0f:50:cf:f1:f9:af:83:25:
81:e8:cc:d1:ba:b7:49:bf:65:e6:7a:f6:bd:ef:0f:
bf:0b:25:df:0b:9f:16:62:45:07:0f:db:39:a4:4c:
8b:b5:3d:6c:7c:f8:b9:a7:66:51:ec:d0:88:f5:33:
03:06:26:2a:a0:80:e8:9e:42:65:b2:db:3a:8b:72:
5b:b8:5f:9e:a6:ba:d0:7f:17:d9:b7:68:89:1d:77:
4d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:78:38:07:A3:50:EF:DE:F7:75:30:EF:FB:DD:8A:FD:C7:95:59:AE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6dddfbf9-7a1f-4624-9f31-88255bb1ed8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:00:42:59:cd:e5:82:7d:9c:f2:38:63:b8:ac:86:95:dc:7c:
ac:d1:70:6b:09:fe:d5:1b:58:51:3d:7d:c1:b7:aa:46:cb:16:
df:5a:59:84:1b:36:88:1c:70:f0:e4:6b:2e:26:54:6d:a1:13:
5b:a8:64:cf:bf:d1:b9:e6:3d:0a:35:6a:df:95:d9:d2:88:5d:
ef:61:d3:d9:65:df:a9:37:fd:7d:39:33:a3:ad:4d:45:17:5b:
3a:05:2c:ba:6f:35:89:96:23:96:2c:ab:48:d2:49:c5:fa:49:
4c:98:2d:84:a3:68:b8:02:85:46:c1:0c:c0:b0:d6:77:d0:12:
30:29:25:05:dc:1d:76:51:c4:df:ad:fb:41:f1:9c:f9:dd:a8:
32:16:59:2b:10:2a:b7:ea:c2:e0:eb:04:37:03:b3:a6:1a:b0:
86:d9:9c:a3:b5:43:6a:93:88:7e:eb:4c:1a:8b:ae:b3:df:d5:
e8:22:8a:d9:1c:98:22:d0:e9:f1:d7:3c:07:9f:07:6c:50:c1:
6e:25:83:ad:66:ec:63:07:83:fe:c9:f6:a8:2b:1d:46:7d:12:
7e:a9:4f:4a:aa:c8:f0:dc:7d:fa:2f:90:bb:d4:0d:63:6c:49:
f5:92:be:ad:6c:e8:ed:1b:1c:a9:8f:6a:2a:dc:c0:87:59:9d:
50:6c:68:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:46:52 2025 by rpki-client