Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7a36cd30-adaf-4453-9828-d783ba614ea8.roa
File: 7a36cd30-adaf-4453-9828-d783ba614ea8.roa (raw, json)
Hash identifier: ISbRAz0YvnkWoWL/9wfGVSimfCkuk8LTYBMWFlbLSZc=
Subject key identifier: E6:A6:81:94:26:82:11:5B:A2:BA:2F:25:8E:8D:E9:C1:D2:E8:9F:BD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 61C3AEEA13CF9774D842DA883297A6A9A3D4E163
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7a36cd30-adaf-4453-9828-d783ba614ea8.roa
Signing time: Thu 29 Aug 2024 00:00:00 +0000
ROA not before: Thu 29 Aug 2024 00:00:00 +0000
ROA not after: Thu 03 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c3:ae:ea:13:cf:97:74:d8:42:da:88:32:97:a6:a9:a3:d4:e1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 29 00:00:00 2024 GMT
Not After : Oct 3 23:59:59 2024 GMT
Subject: serialNumber=50a572b691a0fb70e2d979eb10bd06a8936886dc22688f327d51fc63ccd9251b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:fe:3b:bd:01:10:79:2e:fe:ec:3a:9b:a9:
0c:bf:1c:4f:83:d9:5a:fe:38:b8:b0:cb:ee:f3:f7:
64:a0:7b:14:a2:59:d5:65:1b:75:f3:7f:03:96:0f:
2d:be:90:d6:ee:8b:83:c7:56:5f:29:bd:9b:4a:9a:
7a:54:c5:c1:9f:ad:b9:0b:f0:1d:c0:51:2e:aa:57:
67:14:39:41:0e:e5:49:cc:43:86:8d:5f:4d:99:4c:
b7:9d:88:de:06:14:c3:0c:ba:2d:84:de:90:cb:42:
88:4d:3b:42:82:47:29:9a:de:ce:15:57:f5:96:f9:
ea:f1:18:8a:1a:ec:9b:53:c6:f8:d9:3d:6c:ba:8d:
0a:38:59:9f:b5:ff:fb:56:67:c5:90:dc:ac:4b:e6:
ae:43:cc:0c:1a:1b:09:3e:c7:46:68:ad:92:40:28:
73:7f:97:3f:5d:29:94:13:22:04:65:e3:90:41:be:
9e:23:1a:b7:fd:8b:1a:74:cc:47:9d:b3:bf:ab:e2:
76:18:4b:e2:43:9f:89:bd:2b:f0:11:c8:d5:ea:59:
a0:58:28:5d:15:78:28:06:b9:bb:16:9a:74:b6:04:
4a:82:cd:24:99:19:68:82:e5:c8:b4:4a:fa:ba:a2:
8d:9a:f8:05:5d:bc:9a:49:4b:3f:7f:db:db:66:9b:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A6:81:94:26:82:11:5B:A2:BA:2F:25:8E:8D:E9:C1:D2:E8:9F:BD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7a36cd30-adaf-4453-9828-d783ba614ea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
30:d0:0a:d2:a4:2f:2d:57:17:e6:2f:38:a2:fa:d1:d6:9b:2a:
46:78:ff:17:0b:a4:20:96:b0:af:d7:f8:da:67:65:6d:00:8d:
e2:8c:d9:b4:b6:8f:74:2d:e2:34:16:ca:52:6e:b0:b0:26:4a:
d1:84:84:f9:2a:c2:96:9a:d1:79:91:a6:da:d4:e2:59:65:bd:
d2:a0:a1:99:56:b7:58:f3:f7:34:20:51:5c:1b:71:e4:d3:93:
54:95:f9:31:4a:79:ea:57:9a:7a:6a:28:2a:bf:ac:47:b5:b7:
5a:52:19:86:6b:c6:0f:cc:d7:09:2c:af:f5:95:60:86:fe:f9:
d1:87:39:d8:8a:df:a3:5b:3d:52:f3:b9:f0:75:4e:9e:28:71:
88:70:25:9b:a9:73:90:f0:51:95:8d:12:99:ab:e4:2c:ef:e0:
72:27:e1:66:c1:ad:31:f7:db:57:bd:5d:18:82:9c:26:d9:6f:
7d:87:ba:72:fc:96:03:07:1b:4c:17:b9:66:ed:74:e3:e5:62:
a0:1d:48:0f:2e:b7:c0:e7:3f:09:49:63:52:ef:25:10:d3:97:
a2:1f:a4:5b:05:aa:c5:e0:6c:93:98:f1:5d:d8:ea:e7:91:61:
5b:d0:0f:38:87:6d:ef:ac:af:b8:20:81:d4:79:d2:00:1f:b0:
91:f0:60:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:27:13 2025 by rpki-client