Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b0f43d4-259c-4061-9d60-5fd785630240.roa
File: 7b0f43d4-259c-4061-9d60-5fd785630240.roa (raw, json)
Hash identifier: 5OablBctH6KFEkQ5dhFPhiUyp7mIw+ZTml8pM4lrOP4=
Subject key identifier: D8:A0:68:36:33:D3:27:05:E9:16:94:CD:42:60:38:9A:8B:45:6C:84
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 01858247DFA0B873E4E6824CA914F1978CC15506
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b0f43d4-259c-4061-9d60-5fd785630240.roa
Signing time: Wed 12 Mar 2025 01:38:23 +0000
ROA not before: Wed 12 Mar 2025 01:38:23 +0000
ROA not after: Wed 16 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:47:df:a0:b8:73:e4:e6:82:4c:a9:14:f1:97:8c:c1:55:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 12 01:38:23 2025 GMT
Not After : Apr 16 23:59:59 2025 GMT
Subject: serialNumber=68f7dfaaf4346f400005c56fb1dabe3a664f9ec3a2825a85f608108654237b5c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:fb:09:db:4e:4a:68:8e:07:04:b8:b1:5f:
bd:96:c6:eb:aa:99:c3:36:7d:76:33:09:fc:74:cc:
5e:38:f1:31:0a:04:47:19:31:43:c7:00:d9:bc:43:
b8:ac:05:ae:db:6c:c9:d5:3a:52:46:81:f7:b5:18:
71:b9:e9:a3:70:6d:6f:f9:ae:ec:93:5f:88:89:7d:
e5:5d:81:c7:05:42:ba:91:3d:c8:ff:a4:4e:af:18:
fd:b6:cb:51:20:a6:41:fa:c9:f1:65:2d:2c:30:31:
15:73:47:08:d1:27:d2:f1:1d:90:86:f4:91:6e:b7:
db:0b:cb:a8:31:1e:b2:a4:c2:69:e4:cb:2b:56:86:
99:0d:0e:98:3a:de:50:12:b8:e6:a7:3c:b2:6c:3d:
47:9f:ca:b4:0a:8e:59:50:cd:04:66:9e:c6:8f:7d:
80:de:57:1b:5f:d8:8e:21:64:75:5d:ae:ac:ce:12:
bc:5d:aa:e7:7e:75:1d:56:3b:3b:43:91:21:1f:58:
11:e7:2a:cd:67:ff:e8:46:df:1c:bf:ee:83:f1:6b:
aa:74:bf:19:0c:80:01:b5:c3:16:1c:9b:1d:54:ce:
a9:94:0b:30:10:ba:7e:17:ee:91:71:72:ae:1f:1e:
f0:0c:ba:54:74:e4:e0:a7:5f:50:52:0e:94:fe:02:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A0:68:36:33:D3:27:05:E9:16:94:CD:42:60:38:9A:8B:45:6C:84
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b0f43d4-259c-4061-9d60-5fd785630240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
66:57:fb:ba:bf:71:3b:46:b5:2e:15:fb:45:78:ab:2a:d0:34:
7e:53:20:4e:04:3a:f2:6f:03:3d:39:0d:4a:68:41:cb:a0:24:
bb:e3:d3:06:86:4b:ab:ba:6a:19:68:1b:bc:d2:c3:bc:70:eb:
53:5e:c5:cf:d0:26:6b:63:28:ff:5a:cb:c9:9c:8e:23:b6:0b:
04:5a:42:7e:a8:22:2e:e5:fd:0c:c4:2c:58:70:32:b5:7b:cc:
6b:2f:a2:f1:2d:b5:21:31:7e:9a:3b:e5:f4:00:a1:7c:2e:ec:
02:18:c2:8a:a9:2b:e6:dd:7e:8e:41:5e:57:29:95:b6:b0:c4:
d1:55:4f:06:08:3e:ba:b5:2c:2c:6d:98:0b:d3:c5:06:46:0e:
b6:2b:cf:77:a3:d4:a6:06:59:e0:f7:46:b9:63:14:11:30:98:
92:c8:0f:db:c2:4b:fe:b7:7f:f1:49:b4:64:12:cf:2c:ea:09:
2c:16:09:17:d8:46:14:28:ab:9f:b0:dc:70:9c:d1:0e:e2:38:
a6:64:5e:63:d7:47:c2:aa:ae:4e:51:3b:66:93:4b:cd:53:ec:
8d:60:fa:25:3a:fa:52:4e:37:c6:30:dd:a2:78:a5:f5:be:7b:
a6:bc:9c:ae:22:eb:e3:44:60:a3:8a:52:a9:de:f2:b4:e4:ff:
94:6c:ff:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:18:14 2025 by rpki-client