Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8c1b66db-e8a8-4e4a-91be-1f4b6e4a02b4.roa
File: 8c1b66db-e8a8-4e4a-91be-1f4b6e4a02b4.roa (raw, json)
Hash identifier: CGef88tAIBCfD3NxLMM++wWqUC33LPy5q7A2bf1zrvU=
Subject key identifier: CB:4C:40:48:B2:95:07:59:64:E9:33:C7:D2:24:DF:E4:5B:A2:7C:03
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 112A49047A109DB61269EB7C9600595FEF352893
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8c1b66db-e8a8-4e4a-91be-1f4b6e4a02b4.roa
Signing time: Mon 28 Oct 2024 00:00:00 +0000
ROA not before: Mon 28 Oct 2024 00:00:00 +0000
ROA not after: Mon 02 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:2a:49:04:7a:10:9d:b6:12:69:eb:7c:96:00:59:5f:ef:35:28:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 28 00:00:00 2024 GMT
Not After : Dec 2 23:59:59 2024 GMT
Subject: serialNumber=319e0f6231f1d9f86ab4a6d50b5b12e590498cb129db39cb23942c23595679e9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:85:e8:77:07:fa:23:eb:79:68:81:22:0d:
d3:6f:b2:db:5a:31:01:8d:bd:52:58:8d:19:d9:f4:
76:7e:04:b9:53:5e:db:11:99:cd:0c:6a:76:6d:98:
57:31:2b:89:dc:e0:e0:80:5f:80:d0:be:51:de:8f:
2d:84:42:50:c4:94:d0:09:40:9d:b2:83:eb:3f:f0:
e3:c6:e7:e1:51:67:7e:98:aa:40:75:17:61:42:23:
5c:ef:8c:fc:55:86:90:df:fd:39:28:66:93:b2:db:
32:0c:0c:bd:22:fe:b7:5d:cc:5b:df:dc:8d:f4:6d:
81:0d:fb:8e:2f:90:3f:7c:bf:15:69:43:4d:af:84:
ef:72:9f:4a:e2:1f:06:ad:5b:14:ed:07:42:34:dc:
da:e2:51:8c:d0:af:d8:1f:d2:bb:6e:75:73:de:73:
89:4f:67:3d:cf:64:f4:d0:53:1e:aa:d9:be:c0:17:
f8:32:1f:39:95:d6:c2:13:39:34:34:8e:30:8d:6c:
55:01:f4:41:07:54:f6:44:59:fc:a3:73:61:25:32:
99:8d:bd:ea:8a:78:ca:8c:67:75:4a:84:7b:6c:c4:
69:ed:49:fb:d5:4f:01:50:86:fb:6d:07:ac:38:03:
ba:f4:7f:25:e5:2a:05:d4:57:f3:7e:20:2a:40:06:
a2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4C:40:48:B2:95:07:59:64:E9:33:C7:D2:24:DF:E4:5B:A2:7C:03
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8c1b66db-e8a8-4e4a-91be-1f4b6e4a02b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:57:6d:a2:d0:b6:b9:31:c4:49:37:1b:04:e6:cb:81:d5:15:
87:9a:c6:8a:22:12:b9:31:33:ef:d2:6d:f0:fd:f0:96:3a:0a:
d6:b3:0e:58:41:c9:8a:ae:a0:19:db:50:81:92:70:d6:bd:9c:
87:b1:88:8e:09:a4:b1:97:6e:8d:16:77:51:59:12:90:c6:ba:
17:4f:c5:2d:cb:6e:93:c6:02:5c:10:fb:35:5b:7a:5d:cb:f5:
e4:a4:b3:69:ff:f0:e6:18:39:60:4e:1f:2b:0b:c9:de:5f:42:
03:4a:40:61:38:69:b0:de:96:ea:72:8f:70:25:e7:94:a7:ce:
c1:2e:5c:67:3e:5e:8a:34:f0:93:d7:e8:17:65:39:1d:ea:a7:
fb:f9:bb:16:8e:93:ac:ac:f3:7b:59:83:6e:b4:c3:e9:3d:a1:
89:96:a3:4f:f6:4b:8f:34:ee:76:b6:8d:eb:90:e5:6d:6d:66:
5a:5b:46:6d:86:86:43:ec:ca:29:69:a3:92:b1:cb:bf:d7:f8:
b6:1a:a6:28:be:e2:13:f2:0a:c7:85:67:f8:60:d6:cd:70:e8:
08:03:cb:fa:6a:a8:e3:d3:59:b6:da:ff:16:fb:d4:cd:e2:49:
43:09:99:b4:c7:90:e1:7b:bd:a5:97:fe:2c:72:11:0d:75:fa:
61:a3:6c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:48:36 2025 by rpki-client