Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/73ee33b6-0ca1-414c-8190-81758e0ca987.roa
File: 73ee33b6-0ca1-414c-8190-81758e0ca987.roa (raw, json)
Hash identifier: 5vBaQcO3mwF7vBRZWGVXRZ75l5AF6blV/JMRzjW09+k=
Subject key identifier: 70:8C:01:41:DF:56:EB:0E:DA:94:4B:F5:53:B6:7D:A4:F0:63:A8:EF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2C36F537ACCD1A0C9F46A1D24F15947458454299
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/73ee33b6-0ca1-414c-8190-81758e0ca987.roa
Signing time: Tue 30 Jan 2024 00:00:00 +0000
ROA not before: Tue 30 Jan 2024 00:00:00 +0000
ROA not after: Tue 05 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:36:f5:37:ac:cd:1a:0c:9f:46:a1:d2:4f:15:94:74:58:45:42:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 30 00:00:00 2024 GMT
Not After : Mar 5 23:59:59 2024 GMT
Subject: serialNumber=75c2d4fb9159955bf5419c0e49586dbe09cbe04299aae0783495b7fd9fe55535, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:1e:53:02:37:7b:36:df:85:9c:e7:d1:0b:
38:9f:4d:1f:77:b2:89:86:cf:ea:70:85:a8:15:cd:
07:71:3b:89:c3:9b:96:f7:04:09:71:31:a9:8d:23:
c1:58:9c:30:ca:8e:64:58:c1:0b:03:37:43:01:af:
a9:d6:51:5f:7e:18:86:c7:97:d2:8b:ca:76:23:34:
70:95:f0:91:3b:81:5d:0a:a5:26:5b:d4:11:9e:ee:
05:2f:6b:74:29:7f:76:5a:f5:33:4f:f0:68:21:39:
f6:55:42:c1:76:fa:ea:ea:ee:67:5a:fb:e2:b2:c0:
c9:24:cd:76:f3:36:dc:e9:c7:22:f3:ab:cb:b4:18:
59:a7:9e:d6:b7:4d:fc:75:d4:23:6d:fc:08:ea:26:
36:64:4b:e1:8f:c3:c2:52:42:25:51:6a:c1:be:99:
60:bb:3f:39:5f:3d:51:0a:f4:b0:15:f7:22:eb:25:
e1:99:33:db:57:2c:6f:28:95:5a:11:30:20:fc:56:
85:54:54:3e:2d:4b:7a:12:71:ad:49:b0:36:1b:49:
bc:da:cc:70:16:be:e1:e6:d5:99:62:30:1c:8e:14:
69:c8:d6:ea:8a:70:66:6b:b6:5e:d5:32:a8:64:94:
71:94:42:57:cb:da:2e:40:42:86:9c:09:36:f5:a9:
bd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8C:01:41:DF:56:EB:0E:DA:94:4B:F5:53:B6:7D:A4:F0:63:A8:EF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/73ee33b6-0ca1-414c-8190-81758e0ca987.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:01:76:30:97:ed:b8:ba:aa:47:65:8e:85:bc:87:63:71:29:
65:44:7b:0e:02:4f:c9:ca:6e:a2:c2:9d:5d:8f:8d:b3:65:68:
04:39:2b:af:c0:27:59:90:91:6f:ea:50:1e:ce:97:f6:32:47:
54:f0:3b:d9:03:a8:fc:0c:37:de:02:29:26:30:ab:5d:43:2e:
16:6a:99:db:bd:83:39:00:87:f9:d4:45:39:65:f9:78:4f:77:
c5:77:22:6c:01:73:bd:69:db:44:c4:96:3b:bc:08:ae:af:a8:
c8:52:6c:98:cb:4b:f6:e0:83:98:db:3f:61:eb:4e:94:58:d5:
c2:f2:12:5b:fc:79:5a:80:2e:34:31:72:7f:cc:1b:74:b9:58:
18:75:5d:c8:d3:95:e9:e3:e7:32:9f:9f:f3:59:44:75:d9:06:
e4:9b:36:23:e1:8b:eb:16:a2:10:3c:b2:e4:6c:b3:71:5f:65:
a4:db:0e:d9:48:df:1e:02:86:6b:ee:0e:f0:30:4d:fc:4f:6d:
37:b7:01:c3:14:ff:03:eb:b5:38:46:ba:4d:1a:76:33:4d:2e:
8b:c6:ee:36:db:74:bc:db:f0:e6:4c:fd:56:9f:e8:e2:6c:d6:
cb:d8:37:85:88:68:f7:c5:3b:58:71:13:bb:31:1f:03:44:80:
8c:c0:f1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:06:54 2025 by rpki-client