Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6f2daa32-c804-4c9b-a522-b88ee5b54ed8.roa
File: 6f2daa32-c804-4c9b-a522-b88ee5b54ed8.roa (raw, json)
Hash identifier: Axyd19xJHHacBWgLgncY/s5UBU0QcJPlZES4hUYInmo=
Subject key identifier: 4B:F0:25:A4:10:B4:F1:55:FC:50:72:96:87:09:83:E5:54:E5:F8:79
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 29EB30B2C136F4A6A21B9CC53AFF91C97860F7A6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6f2daa32-c804-4c9b-a522-b88ee5b54ed8.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:eb:30:b2:c1:36:f4:a6:a2:1b:9c:c5:3a:ff:91:c9:78:60:f7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: serialNumber=64456da01459e1d1d80642deee96d9f23639bd4484f1dcb18badeb538a30ccab, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:6e:d4:c0:fd:39:07:fa:ba:19:2a:12:38:
b9:0e:97:e8:4a:68:66:30:a9:3e:83:0c:3f:95:5a:
db:b2:89:58:80:e3:6c:84:e5:89:af:be:b1:53:fc:
84:96:fc:65:e0:fe:8e:19:52:d4:e5:ed:72:47:a1:
06:46:12:03:e6:81:6d:bd:c1:02:4d:ba:2a:d0:c6:
e2:e6:75:77:84:37:68:e6:73:25:a7:1e:b8:4e:c7:
af:8f:ac:e8:4c:71:df:d1:f1:20:2d:1f:10:3f:88:
6d:9a:5f:24:fd:8e:36:f3:8d:b5:93:58:ca:d0:43:
b9:a5:fa:45:d7:66:72:50:cc:25:d2:7b:c5:65:f9:
c5:c5:e5:45:04:5b:12:81:13:20:b7:29:52:de:df:
61:76:d0:14:9d:de:38:fa:6d:14:e2:45:d0:f6:da:
8d:a7:a6:bd:b2:9b:a2:49:f1:47:3f:d8:a3:c2:b7:
fe:5c:a2:a3:ce:d9:8b:a2:d8:f7:04:89:c1:23:e5:
8d:e2:8b:cc:fc:01:35:5f:f3:b7:52:99:f6:a7:10:
b4:0d:e2:aa:7b:25:09:cc:6b:22:c5:28:df:d7:72:
c2:15:3f:99:d5:3e:aa:38:f3:f2:f0:31:7c:92:c0:
67:43:2a:92:ec:5f:13:b3:49:b8:91:cf:01:15:b7:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F0:25:A4:10:B4:F1:55:FC:50:72:96:87:09:83:E5:54:E5:F8:79
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6f2daa32-c804-4c9b-a522-b88ee5b54ed8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d4:cb:7f:60:4d:1d:96:73:bb:7b:cf:c6:d3:1d:7a:7c:e5:
b4:c4:21:f9:c1:db:39:2c:2f:95:40:3f:d0:55:b0:d6:fb:e6:
f8:e0:dd:8f:70:70:ec:19:90:73:47:95:9e:66:68:2e:55:70:
c9:6a:72:ce:9b:7b:a1:9e:e0:04:d9:d7:d9:ae:28:50:f0:7b:
32:f9:f1:89:d8:9f:d6:86:f6:c7:db:f6:0c:37:13:1f:d9:46:
8b:5a:3b:50:ca:c4:b9:e4:eb:2c:4b:c0:e4:6b:2d:15:8a:66:
45:6b:b0:c1:78:fc:c5:e0:4b:be:e0:02:bb:f9:fe:c3:dd:18:
ca:62:17:ef:82:8f:a1:37:e2:7a:09:8a:8b:07:50:db:41:d7:
71:4f:d9:07:f2:15:2e:8d:91:bf:3d:22:37:18:83:f1:8c:d3:
97:8e:51:23:74:d0:94:9f:a5:ae:8a:1e:41:f2:ee:36:42:b1:
d2:c3:b1:20:d1:1f:22:6d:34:a7:21:a3:60:42:3c:bb:80:ff:
2a:16:9c:c3:20:be:09:f9:8d:08:e6:cb:64:57:4e:49:4a:b0:
36:11:fa:ef:ac:c3:a0:09:67:9c:ef:f9:07:2c:28:c9:4e:6a:
e0:22:a8:4a:22:91:bd:d2:95:38:ba:de:1d:90:05:9a:ba:d9:
c9:5c:1c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:35:54 2025 by rpki-client