Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81ef7533-d3b3-4284-96b9-5128b460b3f8.roa
File: 81ef7533-d3b3-4284-96b9-5128b460b3f8.roa (raw, json)
Hash identifier: vKAUheA5sztIy/EFPeFJ7QifdOlnD9xEj7lycLhqrY4=
Subject key identifier: 92:23:A3:B2:74:54:2C:2D:B9:55:52:69:E9:57:3D:3F:B4:72:41:E3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6362F12F4356C896A58B672E81CAF9A07C231638
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81ef7533-d3b3-4284-96b9-5128b460b3f8.roa
Signing time: Wed 21 Aug 2024 00:00:00 +0000
ROA not before: Wed 21 Aug 2024 00:00:00 +0000
ROA not after: Wed 25 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:62:f1:2f:43:56:c8:96:a5:8b:67:2e:81:ca:f9:a0:7c:23:16:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 21 00:00:00 2024 GMT
Not After : Sep 25 23:59:59 2024 GMT
Subject: serialNumber=6662d3734e391195eeaa2846360a3898aa0f554d01773fce32bf306d9e2b3293, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:14:a8:cd:17:eb:0b:47:96:36:60:20:af:
57:96:76:1d:a5:ad:4c:28:40:f0:65:30:64:89:d8:
ad:23:a5:ab:33:23:9f:30:97:8b:bd:8b:3f:4a:94:
5f:b7:77:b2:6a:16:be:cc:8c:36:5e:1e:d1:40:0c:
36:d0:04:ce:4c:d1:65:2c:9f:75:3f:86:35:0b:b6:
39:f1:52:35:21:27:f7:ec:31:b3:2a:84:fb:96:2b:
0e:7b:ed:f6:a3:22:5e:1a:86:62:49:b0:38:2a:5e:
90:85:6f:48:b1:71:d8:9b:c8:f6:cc:bf:89:a8:e2:
35:06:e0:7a:c4:85:9d:1a:1a:27:d6:77:c1:2d:c8:
8c:7d:b7:ca:8a:18:a5:eb:00:3f:12:01:6d:98:7b:
2c:5d:a5:b7:35:b8:28:cb:20:4c:72:79:a0:c7:f8:
10:fb:b1:20:8e:df:91:76:00:de:c9:d3:99:4d:44:
9f:bc:3e:bd:6d:c6:0d:81:23:83:b7:5a:fe:3e:a1:
7b:07:80:c0:6f:f6:6d:35:18:89:e0:7a:63:2c:65:
dc:29:4e:2c:27:8b:99:ed:9a:b0:74:66:5d:d3:b6:
4a:85:02:73:aa:f8:8a:14:f8:95:bf:cd:19:1a:f6:
2c:4c:e2:d5:e8:81:a9:c1:b1:de:c1:7b:b2:64:20:
f7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:23:A3:B2:74:54:2C:2D:B9:55:52:69:E9:57:3D:3F:B4:72:41:E3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81ef7533-d3b3-4284-96b9-5128b460b3f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c7:04:88:16:19:88:37:40:02:39:b2:cd:f2:f6:cb:bd:26:
44:9c:b9:47:5d:d9:e4:32:36:08:7e:9e:71:8e:c5:4d:85:6c:
96:d9:60:76:bc:e0:6e:d0:34:1e:50:d4:58:14:87:66:28:bd:
24:8e:69:9c:97:35:af:8c:ec:db:7b:c1:9c:dd:63:b4:47:71:
d6:7a:77:a8:ef:5d:bd:02:0f:5f:82:94:ee:a4:cb:65:bd:3c:
5e:b1:5e:55:bf:3d:a6:82:23:a1:3d:89:41:1b:d7:e0:08:b6:
d4:c6:50:c9:dd:80:d9:fe:d1:63:ca:3b:2d:53:b0:d7:80:ca:
b2:6e:98:a6:cf:d4:b8:ff:df:37:d6:94:14:ce:96:a2:e1:72:
e9:84:8f:96:4f:d1:b6:97:fe:08:bb:7c:ee:5c:66:ea:18:ff:
a6:e9:47:ae:5e:1c:a9:2a:7a:2f:b7:c9:22:ac:12:50:77:a3:
84:52:7e:02:5b:2b:6e:da:5c:62:a8:5d:75:de:7b:54:87:3d:
74:3e:5e:4b:a9:56:3c:d6:7b:64:b2:be:90:ae:81:bc:9d:f9:
1e:42:a7:ab:d5:a9:3b:2e:4b:0a:d1:26:b8:bc:87:8c:b0:bb:
be:73:b3:88:d8:7c:2a:f8:10:8c:cd:fd:b0:0d:3c:ab:9d:7b:
d6:72:97:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:29 2025 by rpki-client