Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8af721d1-4f74-4c4b-b25c-f97acfc60ddf.roa
File: 8af721d1-4f74-4c4b-b25c-f97acfc60ddf.roa (raw, json)
Hash identifier: GPK1YI7rAi4otrxDJAwcOT2yVYeFVseE2xXOSjg/l9E=
Subject key identifier: 4A:D5:D1:30:C5:74:E6:E4:5D:33:B0:DC:53:48:18:B1:95:29:E4:C2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6CA8CBADFCC533E9E27F8A421E86BD14C748AF6C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8af721d1-4f74-4c4b-b25c-f97acfc60ddf.roa
Signing time: Sun 14 Jan 2024 00:00:00 +0000
ROA not before: Sun 14 Jan 2024 00:00:00 +0000
ROA not after: Sun 18 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a8:cb:ad:fc:c5:33:e9:e2:7f:8a:42:1e:86:bd:14:c7:48:af:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 14 00:00:00 2024 GMT
Not After : Feb 18 23:59:59 2024 GMT
Subject: serialNumber=c9cbc93c876ee5c58a35d38388448a94ad876fe15a470520c85be011765d367a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3c:6b:7c:0e:d3:cf:46:08:c9:f5:fe:50:43:
85:34:26:a1:4f:bf:5f:7d:44:40:c8:d4:99:25:ee:
f1:0f:b8:d2:13:44:5e:a0:cb:2f:ac:7b:cc:b6:82:
30:80:6d:38:ba:27:b8:3d:77:d5:33:c8:8f:8a:64:
3e:59:42:be:45:08:d2:36:8e:6e:28:11:04:56:19:
95:20:f4:89:77:2b:66:25:cf:ab:7a:a1:9b:1b:32:
b4:60:7e:bf:8c:19:d6:83:e9:c5:0e:29:ae:b7:1c:
a4:db:d4:e6:ae:33:a3:6d:66:39:dc:95:75:1a:3e:
2f:27:3d:97:56:d3:ed:ed:88:91:1c:2c:3e:b8:e6:
eb:9b:42:8f:15:72:1b:cb:63:82:cf:78:a3:bb:f9:
ac:b9:7d:c4:23:68:3b:7f:fb:08:02:44:24:45:28:
30:86:7f:06:60:4b:3e:2f:6e:b8:60:c3:8c:24:45:
3a:f8:0d:d2:22:a9:d4:c8:39:69:db:54:8d:65:71:
36:7b:61:ef:18:b8:b2:2e:e3:8c:bd:f1:0b:05:b5:
2d:98:b1:61:42:dc:c5:4d:5c:87:45:73:ba:d2:c6:
cf:b3:74:8d:ea:12:fc:be:38:42:a9:5c:05:42:d5:
6f:99:9b:c3:14:47:34:d1:b7:38:38:6d:7b:ad:dc:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D5:D1:30:C5:74:E6:E4:5D:33:B0:DC:53:48:18:B1:95:29:E4:C2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8af721d1-4f74-4c4b-b25c-f97acfc60ddf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:8b:13:bc:37:e4:eb:f3:e1:7d:57:29:7f:db:85:0c:3e:67:
90:6e:89:29:e1:58:10:5d:32:39:c8:c0:43:df:73:e1:e6:c3:
47:35:0f:d8:44:7f:fb:b2:50:18:cd:c6:51:e0:2a:2b:e1:6c:
39:ef:cc:be:7b:7f:a3:7c:95:42:81:11:69:b8:b9:35:d0:9f:
49:0f:5a:c8:8e:b4:e1:0f:18:22:8b:16:99:d6:6f:60:47:a6:
50:54:78:9c:25:ef:0d:3c:06:1c:e2:a0:62:20:54:c3:d2:ac:
86:19:e7:a4:47:29:3a:d4:ab:13:13:28:f4:0d:13:96:e8:ad:
5a:42:7a:e7:dc:80:33:ce:14:1b:d5:be:e5:74:8f:82:12:d7:
37:49:ec:e9:1e:70:0d:0b:38:3b:08:7f:88:50:81:e5:63:e0:
e1:9d:db:2d:74:06:dc:71:b4:27:12:7e:3f:e8:09:73:4f:9d:
04:b5:b4:f8:bb:42:be:e6:82:2c:90:86:b7:ec:90:28:3e:c3:
93:b8:bf:e0:c1:17:9a:85:59:91:65:97:e0:db:1a:b8:dc:43:
21:99:af:25:45:28:8d:51:65:12:5d:52:d1:7b:36:76:56:ed:
49:bb:04:1c:e6:dc:2a:40:32:2c:fe:82:67:89:7a:01:dd:45:
6e:bf:7b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:37 2025 by rpki-client