Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8421f93a-c82f-4674-9e8f-65371670de2f.roa
File: 8421f93a-c82f-4674-9e8f-65371670de2f.roa (raw, json)
Hash identifier: Sc400+OXyHz0972Ogef19u/VGiCq/MFrQri9x/kC8tI=
Subject key identifier: A8:9A:4D:33:A1:BB:A7:43:27:C1:38:C8:57:FD:FE:12:DE:8F:35:1D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 354CDCF1E7FBCD46A4E7DDE200AE6A840BC9EE1B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8421f93a-c82f-4674-9e8f-65371670de2f.roa
Signing time: Sat 24 Aug 2024 00:00:00 +0000
ROA not before: Sat 24 Aug 2024 00:00:00 +0000
ROA not after: Sat 28 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4c:dc:f1:e7:fb:cd:46:a4:e7:dd:e2:00:ae:6a:84:0b:c9:ee:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 24 00:00:00 2024 GMT
Not After : Sep 28 23:59:59 2024 GMT
Subject: serialNumber=c7bb309a9a66364db66442906a7edab7175b1b69236461c57be921465219ac3d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:53:c6:8c:2e:99:1f:e0:b9:bb:70:bb:9a:
44:62:53:be:95:3f:ae:5b:af:9e:1a:ef:49:11:4c:
d8:b3:35:63:88:b0:09:0c:48:04:1d:02:f5:a5:8e:
fb:fc:62:75:86:b9:e0:05:3f:ff:9d:b8:f7:aa:d5:
cc:db:1f:35:3b:2a:dd:0e:0c:dd:c3:34:c7:99:c1:
3a:20:80:53:a1:d3:93:4e:f4:81:1a:2b:a5:24:5f:
04:a2:5b:d7:bb:d9:09:6c:1c:cb:92:0f:b4:01:f3:
b8:b8:73:96:00:16:40:c4:85:d2:43:a8:ea:39:6b:
69:91:7b:56:b3:ac:bf:43:47:2c:66:9e:d2:5f:68:
26:9a:e4:ec:01:eb:2b:53:7c:69:06:83:2b:61:e2:
79:fa:c9:8d:96:74:5a:f1:18:84:0a:55:90:02:b7:
4e:c4:a0:bc:10:75:da:f5:bb:66:3d:ce:93:cd:5e:
e5:d3:f6:ef:23:6b:c3:19:a8:b6:e5:68:ad:75:44:
da:28:12:85:7b:b0:fc:a1:ca:24:e5:dd:4d:2f:3b:
04:68:2d:6a:b6:51:49:f7:e9:cc:b7:fa:ea:f7:40:
38:67:aa:ea:fc:ed:b4:b3:a3:0d:93:b6:6f:54:83:
ca:a3:f5:07:7d:db:8e:e9:88:3c:6d:68:fb:ea:89:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9A:4D:33:A1:BB:A7:43:27:C1:38:C8:57:FD:FE:12:DE:8F:35:1D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8421f93a-c82f-4674-9e8f-65371670de2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:fa:2a:01:31:4e:c8:c6:a5:f9:8c:86:39:96:1a:65:f4:27:
7a:83:3a:1c:d6:0f:81:5a:23:60:48:f7:71:6a:c1:8c:d8:53:
4f:36:45:00:cc:8e:c4:dc:65:1a:4f:af:40:f1:f3:7f:19:d1:
03:bc:e5:38:29:b6:9f:29:c6:b7:64:b2:11:7c:9e:83:1e:cf:
30:93:ca:fe:fa:dd:6b:ee:e8:c8:0d:ac:39:e5:e7:c3:ec:e4:
9d:9d:2e:65:e1:f7:c6:65:04:0f:c2:96:42:01:bd:c9:31:40:
1f:22:7a:11:a7:98:a6:31:9c:07:3f:0e:d3:98:d2:3f:cc:b9:
19:0d:08:5f:e1:7b:5c:82:92:91:81:a9:de:9d:98:9f:9d:78:
2f:ca:50:8b:23:0a:65:72:40:c4:d5:a0:dd:e8:4b:5a:25:aa:
78:93:d6:82:88:4a:c4:64:2c:bd:be:72:e6:60:a3:9b:80:1e:
4c:44:4b:ab:99:db:46:77:40:e7:1d:d5:d9:85:20:8a:09:8d:
78:87:83:fa:69:fa:28:0d:bc:27:bb:9f:22:3b:58:0d:fc:9c:
d3:99:72:be:c4:a4:7f:4b:d4:4a:1d:51:28:24:a6:d1:bc:88:
56:33:87:a4:a0:34:bf:bf:91:71:da:77:d4:1a:7b:41:f5:6b:
df:6d:b4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:26:49 2025 by rpki-client