Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8155b8d8-7585-439a-a860-48fd1534f383.roa
File: 8155b8d8-7585-439a-a860-48fd1534f383.roa (raw, json)
Hash identifier: XQL9+of0VaQHMIncv3zMX/7wOcjTFuHq1Rd0/mTbbL0=
Subject key identifier: 90:2F:24:88:AC:B6:67:0F:40:F6:97:EC:5E:7D:0A:29:36:B0:2D:14
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 39B30BE311AE610A6A6843FC53672DDC101C6A14
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8155b8d8-7585-439a-a860-48fd1534f383.roa
Signing time: Fri 31 May 2024 00:00:00 +0000
ROA not before: Fri 31 May 2024 00:00:00 +0000
ROA not after: Fri 05 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b3:0b:e3:11:ae:61:0a:6a:68:43:fc:53:67:2d:dc:10:1c:6a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 31 00:00:00 2024 GMT
Not After : Jul 5 23:59:59 2024 GMT
Subject: serialNumber=946bd47e33596c8fbf7ae75dc13dace062d76705b9ea44cf47b5db478ed7bd18, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:19:fa:2b:cd:3e:c4:e8:84:48:b7:5a:64:
ea:3e:65:02:e0:d6:69:8e:38:a0:ef:03:9f:f7:ca:
25:12:84:e4:30:de:99:d4:c6:9b:b1:cc:50:24:32:
cb:ec:88:ce:03:d6:61:94:02:c1:b6:51:02:0a:a9:
45:48:8d:47:f1:f3:80:fd:b6:88:59:e8:ab:f1:a5:
e6:3e:5b:a1:b7:83:10:b9:3b:b3:c5:1c:1b:91:11:
7b:83:8b:3b:e6:48:d8:90:f2:37:56:73:3f:a1:f0:
6d:8b:85:76:47:f0:e4:90:89:e3:53:04:bd:60:87:
09:db:aa:24:68:75:e3:e9:5a:43:d4:22:d8:0b:69:
97:fb:28:11:77:50:76:6c:54:fc:c7:00:53:c6:ee:
a4:7d:74:c6:81:0f:33:03:19:c6:6e:06:5f:2a:75:
c9:59:1f:43:17:31:c9:e6:06:7e:df:29:b6:17:28:
0f:8c:fc:8e:99:2b:60:e6:49:af:ae:3b:0c:9d:b9:
ae:f5:0c:03:07:aa:71:e4:d8:71:87:0c:f2:4d:57:
db:6a:73:50:ea:80:13:56:06:91:a4:c3:c2:29:4f:
d0:04:94:81:0f:2e:30:a5:ea:ad:39:2c:fb:bf:d7:
87:31:b7:a3:c8:25:ad:49:cd:9c:da:6f:0e:9d:84:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2F:24:88:AC:B6:67:0F:40:F6:97:EC:5E:7D:0A:29:36:B0:2D:14
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8155b8d8-7585-439a-a860-48fd1534f383.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
88:17:12:d2:7d:12:3b:33:3e:46:f6:22:f8:8e:3f:08:d6:19:
d3:6a:70:46:dd:33:c3:e4:59:77:da:63:bc:e7:ef:fd:97:52:
93:a1:11:b6:24:a0:07:6c:a3:ac:5e:14:8f:6a:15:53:d5:94:
87:cb:17:90:57:26:82:5b:ba:9b:fe:3c:dd:48:4a:45:f0:0b:
eb:91:5a:67:82:6a:d9:6c:dc:d5:b9:97:bb:a7:97:66:ae:00:
48:bf:6e:f6:4f:0c:ed:52:64:ee:3a:cf:25:b1:d6:94:c6:5a:
66:65:52:00:be:d3:82:cc:d1:47:b7:74:3a:db:a1:ba:a5:91:
a3:4f:a5:73:5f:33:5e:fb:c2:cf:ea:fa:09:fb:1a:8d:00:d2:
aa:79:0c:bb:c2:70:4a:0e:f9:ee:88:b0:7e:f3:69:e6:f0:33:
3b:8e:d1:6e:15:b5:dc:cc:58:d9:76:63:83:1d:ce:d0:08:6a:
8c:1d:1c:67:f8:13:92:b4:ff:00:d2:19:5c:04:db:31:80:89:
1c:1c:4f:b8:42:7e:66:61:5e:50:fc:9d:73:70:cb:a6:98:ba:
d1:f0:00:23:d7:4c:56:2c:57:b8:59:0c:cf:72:3e:6f:1c:3f:
a4:2b:e8:59:a8:71:99:6c:cd:61:75:ef:31:38:89:7f:18:7f:
2c:d1:70:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:11:13 2025 by rpki-client