Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8a2760b6-bb8b-436f-880e-3da1cce362aa.roa
File: 8a2760b6-bb8b-436f-880e-3da1cce362aa.roa (raw, json)
Hash identifier: 1u0dd7VLjs/U2UvBPJnMGK0VmWCF2fmKOtn3X0NawBQ=
Subject key identifier: F0:4F:13:5E:9B:84:48:79:EC:FD:84:1F:A4:6A:04:29:8B:F9:6E:CE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 728CC3136A502CD0A7773D74494194AC66011223
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8a2760b6-bb8b-436f-880e-3da1cce362aa.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:8c:c3:13:6a:50:2c:d0:a7:77:3d:74:49:41:94:ac:66:01:12:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=a85138e92b7ced920ab84e8b7d3277144bc9cb267826c54cd056d263bf800865, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:65:dc:8c:59:7c:fe:99:09:0e:40:fc:3b:e6:
25:35:fc:9a:6e:1b:00:57:75:59:41:83:24:e7:0d:
5d:b9:c8:5f:fa:b0:ad:89:25:de:bd:d4:5f:17:ef:
16:01:e9:f6:e5:5b:7f:a9:81:4a:27:37:04:9b:75:
4a:0e:a6:49:b2:79:3b:f2:45:24:98:e0:10:f8:e2:
16:20:cf:46:24:9f:a4:89:3c:44:f3:24:47:39:a8:
37:06:5d:25:44:4a:f3:1f:5f:8d:f9:8b:8e:02:af:
87:ab:53:35:0d:6e:5b:4a:26:e9:10:58:dc:5f:69:
64:ff:53:84:3d:8a:d1:0a:79:4e:74:55:a7:3e:4a:
28:5c:b6:c3:79:e6:71:3d:0a:a6:39:ab:26:a5:a0:
bc:1d:cd:d9:ab:9c:6e:9b:42:f5:00:85:b8:5d:e3:
c7:d1:4b:9c:44:84:a9:f3:37:99:55:79:e0:b1:7a:
73:34:fb:9c:30:f2:54:7b:ad:2b:55:7a:0c:67:f5:
11:7b:83:9f:86:e7:c1:7e:14:60:b8:a5:2f:21:be:
d7:a8:7d:0d:b6:83:84:d7:b0:b3:41:a7:e0:11:e3:
88:f7:8a:65:4b:cd:e8:90:43:04:fa:ca:c6:2c:1a:
23:f4:52:ee:be:d6:ca:aa:f4:93:e0:7d:39:18:96:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4F:13:5E:9B:84:48:79:EC:FD:84:1F:A4:6A:04:29:8B:F9:6E:CE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8a2760b6-bb8b-436f-880e-3da1cce362aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ac:0f:58:4d:8a:3c:0d:7a:10:b8:93:df:c9:ff:d0:d8:22:
2a:a4:60:43:4a:07:ac:88:38:c8:8c:0c:5e:e8:12:a5:c2:81:
0b:ef:f3:2a:42:87:50:d8:58:2d:dc:23:7d:84:55:c9:c5:11:
c4:8b:ef:61:98:3d:39:75:c7:83:51:8d:a0:78:b8:02:f8:97:
8c:bc:ef:7c:69:43:5b:5f:2b:4d:6f:3c:f2:90:16:3b:cf:d7:
ff:76:21:bb:0c:0c:6d:db:f8:6e:7d:3c:0c:9b:a7:a4:bc:a7:
4f:32:8e:45:56:fa:9d:ca:5b:c8:a8:55:01:38:bf:31:9e:ad:
68:1f:d5:67:df:f3:63:03:3c:1c:c1:b8:e0:3a:d5:64:42:bd:
16:de:85:cb:56:c1:a3:a9:ad:77:73:12:d3:5c:a3:c6:37:75:
d9:c2:58:b1:5c:39:7a:3e:50:a8:07:db:7f:07:d9:63:f6:55:
6a:6c:4b:b3:00:49:4c:40:e7:ec:6a:d0:a8:e1:6f:0e:2f:c4:
be:a3:28:10:6c:c1:27:61:12:69:4e:53:49:60:19:cb:89:02:
5e:02:d1:f2:cf:14:41:c9:9c:5b:58:b0:29:88:0a:df:0f:a0:
4e:b6:3c:d1:04:86:18:e9:82:b5:31:04:f5:67:5f:15:f6:58:
41:85:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:21 2025 by rpki-client