Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b91b3da-0202-4833-97f2-8aacd55aa31a.roa
File: 8b91b3da-0202-4833-97f2-8aacd55aa31a.roa (raw, json)
Hash identifier: Phhr2k5AEnvQB7GCMPf3WneSOo2S5aPYw9OWZFAgv7k=
Subject key identifier: 88:9F:31:CD:52:92:E0:03:44:C3:42:84:5B:5B:DC:C2:BA:6C:51:A7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1909D39226896E2E53ED89E64994CBB42FDAF99E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b91b3da-0202-4833-97f2-8aacd55aa31a.roa
Signing time: Sun 22 Dec 2024 00:00:00 +0000
ROA not before: Sun 22 Dec 2024 00:00:00 +0000
ROA not after: Sun 26 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:09:d3:92:26:89:6e:2e:53:ed:89:e6:49:94:cb:b4:2f:da:f9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 22 00:00:00 2024 GMT
Not After : Jan 26 23:59:59 2025 GMT
Subject: serialNumber=7b99c6652b901670e1c3c7639944b12acc268c32d75a0aaa6be52e9cce8c2cc3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:ef:9d:f4:30:8b:70:de:12:1d:52:e9:0d:
68:ca:43:0d:a7:84:f7:5d:61:26:4c:c5:d3:ab:5c:
4e:d5:54:9d:81:c8:bf:7e:a5:37:aa:7e:c9:b4:7c:
cd:0c:02:a6:eb:38:3a:35:8b:b9:94:45:7c:75:8f:
18:c5:b4:eb:5a:47:67:cb:08:1c:af:8c:35:c6:ea:
9a:69:02:fb:45:c1:d9:4e:2a:5c:76:b5:3b:ab:14:
3c:bd:f4:c5:d5:8b:5c:69:b5:f4:db:30:08:a4:5c:
5d:43:00:e7:96:36:d9:9d:9e:56:cf:a7:f9:5d:d0:
8e:2f:e1:94:7b:49:57:4d:c1:30:6c:4b:fb:32:a1:
af:12:aa:78:fa:56:41:85:f8:63:5b:22:db:9c:4c:
ca:ed:d1:56:29:4f:f0:27:a9:bb:6d:2f:b2:d9:07:
9d:43:3c:87:c8:c3:5a:f2:aa:99:d5:2b:08:4b:20:
b6:f9:1e:97:65:72:da:d3:e2:da:3f:d7:8a:cc:7c:
ff:ad:60:f8:9b:e9:00:1a:e8:b5:91:87:01:9c:21:
04:5d:bf:fc:08:78:11:14:43:6a:b1:f8:4b:ae:dd:
13:79:e1:01:6a:83:6a:c3:0e:cf:8a:5d:4e:1c:f0:
22:eb:96:37:91:e3:e6:c0:8b:11:df:df:67:e6:50:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9F:31:CD:52:92:E0:03:44:C3:42:84:5B:5B:DC:C2:BA:6C:51:A7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b91b3da-0202-4833-97f2-8aacd55aa31a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
98:49:b2:70:fd:46:69:d9:5e:62:b6:da:bf:05:76:67:e5:26:
c4:d0:aa:2f:d5:95:7f:1c:3f:c7:fd:b7:74:21:96:c8:17:82:
2d:46:7a:52:68:61:eb:37:32:26:9b:ad:9a:24:0b:d1:92:86:
6f:9d:ca:e7:c7:89:48:c9:81:f5:0a:25:0e:8e:8b:4a:28:8d:
e8:69:37:f4:aa:42:3a:39:5e:0c:0c:53:9e:8f:4c:e5:3d:d6:
83:62:c9:1c:1b:fb:2d:1b:a4:f2:05:68:44:fe:dc:50:13:82:
6f:da:01:5d:4d:d7:a9:54:c2:88:44:d8:e8:b9:99:79:a6:95:
9a:02:a0:cb:1f:f4:16:bc:3f:3a:28:fc:68:ce:04:ed:f3:43:
c4:fb:11:24:f5:f9:0c:17:96:db:5b:ec:4b:1f:5a:55:cf:cb:
f1:93:a1:26:e5:b5:42:6c:96:68:90:75:91:82:3a:dc:ea:65:
a3:52:20:5f:bf:97:6c:22:d0:5a:76:6f:76:8c:a9:b4:10:7a:
f2:a3:99:07:94:b7:bf:a6:4c:24:74:a2:61:96:cc:1a:10:ac:
e9:61:1f:e4:57:c1:40:84:13:0e:8d:f6:a9:78:6d:c8:a0:6b:
e0:03:81:65:65:6a:0d:50:9c:9c:cf:8d:0a:10:b5:7a:09:a7:
2d:3b:64:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:04:48 2025 by rpki-client