Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7028c6a3-3f68-4f5b-b4d1-a1ff7af09c81.roa
File: 7028c6a3-3f68-4f5b-b4d1-a1ff7af09c81.roa (raw, json)
Hash identifier: +bnPMaNKo1mnb2fKmsMiMv5cIIQQ6kolct9vyCX/sGE=
Subject key identifier: 86:01:CE:B3:CD:9A:AC:A6:A2:E2:10:CC:11:45:3E:7E:65:E4:A2:D2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 183297135EA8E0A116280FB28E7C6C9971387259
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7028c6a3-3f68-4f5b-b4d1-a1ff7af09c81.roa
Signing time: Sat 22 Jun 2024 00:00:00 +0000
ROA not before: Sat 22 Jun 2024 00:00:00 +0000
ROA not after: Sat 27 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:32:97:13:5e:a8:e0:a1:16:28:0f:b2:8e:7c:6c:99:71:38:72:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 22 00:00:00 2024 GMT
Not After : Jul 27 23:59:59 2024 GMT
Subject: serialNumber=6e1fd4d4c78a926d97f64f6b1da9900c9ea072806442e5adcd6f5f05bbcbf138, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:3a:06:1e:ac:6e:b6:86:d1:bf:fa:b0:2a:
fc:12:5b:a6:e3:cd:10:57:e6:b5:b5:a9:b2:39:11:
54:d3:c8:0c:58:df:d2:7f:01:6f:ed:0d:37:66:3c:
dd:be:3a:f3:67:90:79:06:b5:bf:ad:e6:05:e3:6f:
7e:47:7c:65:47:be:69:7e:36:ed:2c:68:dc:88:50:
df:97:ec:dc:71:13:4b:8e:fc:72:ca:50:5a:25:e9:
8c:9f:df:4f:d2:d5:86:ef:dd:4d:36:9c:eb:39:02:
0c:6e:43:2d:95:c3:8a:4c:c0:33:66:02:69:68:f3:
88:81:97:7f:63:77:f2:41:14:ad:c0:6d:89:d7:99:
79:d7:a9:45:c4:07:d6:47:5e:98:bc:88:fd:84:29:
ef:61:4e:ac:71:84:1d:da:36:1a:3f:1c:50:86:b4:
1e:75:14:05:df:16:b7:a2:96:e9:74:d0:d8:4b:f8:
b4:94:dd:2b:00:80:d4:20:48:c9:09:79:6f:f9:59:
de:ba:fe:29:3f:54:cd:2e:dd:25:3a:6e:ac:c5:cb:
5b:5e:bd:cb:45:a2:a8:df:05:b2:f5:b0:7f:8b:61:
ec:30:d3:6b:01:68:89:7f:77:b3:01:df:06:1f:d5:
84:6d:a5:d8:67:3f:d1:d2:89:75:d9:e7:65:2f:c5:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:01:CE:B3:CD:9A:AC:A6:A2:E2:10:CC:11:45:3E:7E:65:E4:A2:D2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7028c6a3-3f68-4f5b-b4d1-a1ff7af09c81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
83:8e:a1:e6:5f:55:15:e0:a1:c5:4f:ca:9a:6e:5f:23:29:fd:
57:34:14:8e:b6:14:4a:71:3b:f9:2e:8f:0b:d2:63:df:b5:e0:
25:af:be:9a:ad:c7:a2:31:12:2c:78:8f:5c:db:c9:39:1b:0c:
b3:b1:ee:72:8c:5b:85:db:5c:c1:92:50:98:66:b1:7b:54:ea:
7b:70:bc:81:ef:d6:b8:19:09:ca:59:8e:49:a0:37:0d:1d:d2:
42:df:f1:ec:8c:08:cc:bb:26:e7:75:97:36:93:97:d1:e4:d7:
50:9a:dc:e2:f2:5c:44:98:1d:84:e9:0d:7d:f2:33:84:19:32:
c9:74:e2:55:45:2d:2e:71:a1:80:e1:86:fc:34:8f:ac:8b:c5:
8d:76:c2:e7:ad:aa:ff:d5:0b:69:49:5a:60:86:61:0b:50:42:
08:bd:5a:91:d8:90:32:c5:c9:72:57:77:2e:a4:6c:94:cf:57:
ab:14:29:bc:e0:5d:36:b5:87:bc:48:6d:c6:e2:72:6a:cc:37:
6f:cf:c7:c7:ba:7b:c1:f8:12:9d:ba:09:03:33:5d:ab:9a:11:
1d:65:9f:57:8d:f8:af:ba:ac:4b:1f:e0:26:95:c1:33:ed:ab:
1a:99:2f:8c:fb:4e:34:fc:9d:c1:26:16:2e:cd:37:af:c5:32:
26:09:44:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:34:45 2025 by rpki-client