Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8536aad7-1942-419a-bbca-1c6af7aad3af.roa
File: 8536aad7-1942-419a-bbca-1c6af7aad3af.roa (raw, json)
Hash identifier: 6Guk3XExC0Ub9624S1h0/98WszTmGR/hpG/ylqyquJg=
Subject key identifier: 0F:C1:F8:F8:8F:09:9C:AA:98:1A:55:CF:EB:E5:99:6E:24:41:A7:40
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1A73D4179FCDFA6B7C98BF83F95CA636AAAFB07C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8536aad7-1942-419a-bbca-1c6af7aad3af.roa
Signing time: Sun 28 Jan 2024 00:00:00 +0000
ROA not before: Sun 28 Jan 2024 00:00:00 +0000
ROA not after: Sun 03 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:73:d4:17:9f:cd:fa:6b:7c:98:bf:83:f9:5c:a6:36:aa:af:b0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 28 00:00:00 2024 GMT
Not After : Mar 3 23:59:59 2024 GMT
Subject: serialNumber=b8b16781ed1dfc97ae60e59c52b8670e10d61d65dc526069a9a8b66925806de5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:59:29:34:53:76:85:00:34:30:38:66:c2:
c8:ce:83:46:7f:bb:eb:11:50:89:8c:e7:f4:b1:9a:
7b:35:23:85:65:be:f7:5f:c6:69:d2:a8:19:ac:eb:
61:ef:1d:9d:5b:a0:b6:3c:18:93:4f:00:9f:02:2f:
5c:ea:85:8f:4a:c4:6f:38:98:dc:ee:d5:6c:4b:36:
1d:3b:14:c5:47:5b:33:32:a5:cf:68:8b:96:27:30:
fc:16:7f:74:8b:3c:93:9e:59:00:f1:fa:f0:d8:07:
b8:b3:af:ba:50:8e:ea:4d:e6:99:ae:99:52:0a:15:
f8:8b:f3:6c:58:c8:da:6d:e4:f0:8f:c6:e6:50:fa:
c5:1a:59:b6:89:62:29:0f:a8:fd:23:d2:c3:f9:29:
57:f1:72:fa:b9:82:40:03:ba:ee:df:0a:4e:ae:61:
7e:26:58:69:72:43:f7:ba:f1:24:41:c2:24:31:f6:
81:13:04:27:2e:62:f1:13:6f:cf:e6:b4:3c:93:b5:
b2:19:77:a0:2f:9e:14:68:ac:94:b4:09:94:53:f4:
01:08:63:ca:20:d6:fb:e0:e3:a4:6e:82:17:43:b5:
ac:9a:cb:a1:74:f4:d5:48:3a:cf:8f:1b:ee:97:14:
ad:96:09:64:d1:4c:f8:29:42:69:9f:80:6c:64:1f:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C1:F8:F8:8F:09:9C:AA:98:1A:55:CF:EB:E5:99:6E:24:41:A7:40
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8536aad7-1942-419a-bbca-1c6af7aad3af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:03:a4:23:f3:e8:51:dd:a2:dc:1d:1e:57:93:e7:73:89:51:
58:07:5d:76:6b:17:f3:ff:a1:99:ad:d1:d7:46:de:cc:ce:9a:
15:61:13:5e:ea:2b:80:00:f9:60:df:19:ca:87:4f:c9:e5:bf:
2c:20:31:78:1a:03:54:82:88:06:97:c7:f6:23:e7:e4:cf:cc:
71:4d:c9:49:ea:05:4a:08:07:88:fb:b1:01:5f:7f:8b:1d:fd:
22:9d:62:2d:8d:af:bb:c8:6f:18:d1:18:2f:fd:42:5c:1b:07:
26:5b:b2:e3:a0:54:e5:7b:e8:92:3a:aa:6b:b5:b2:fc:01:d3:
6b:39:23:77:a0:99:03:36:b5:66:0b:5c:ad:83:78:e9:a1:2c:
26:e9:58:ee:4f:9c:07:b8:08:e9:30:fd:43:c1:c5:27:80:de:
37:18:75:8b:50:b9:1a:75:33:46:21:8e:25:e1:df:b3:65:ab:
c2:cf:3b:47:fc:b1:ef:8d:7d:54:ef:ad:69:12:de:0b:62:db:
da:76:f6:2b:26:92:f4:fc:19:55:cc:20:3e:38:72:4b:53:a2:
27:3a:d8:e3:d2:e1:53:94:a1:3a:c3:7f:8f:60:10:13:a7:9a:
a1:6e:15:34:f8:ee:f3:57:00:df:59:f2:8c:7f:89:10:c6:58:
25:47:6e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:09:04 2025 by rpki-client