Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8d84765c-7a2d-4a3c-87a7-4a0b4a9c8041.roa
File: 8d84765c-7a2d-4a3c-87a7-4a0b4a9c8041.roa (raw, json)
Hash identifier: eVMGLzF9xywTf3odkYvgf2mB0vPdNL2N+VV5Yhqo1Ws=
Subject key identifier: E4:07:87:CA:90:1B:A5:E1:5A:03:91:51:7A:DE:35:D0:4F:1A:22:57
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 44FADA489A720B2A60A30780B397A62830CD1A9F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8d84765c-7a2d-4a3c-87a7-4a0b4a9c8041.roa
Signing time: Wed 27 Mar 2024 00:00:00 +0000
ROA not before: Wed 27 Mar 2024 00:00:00 +0000
ROA not after: Wed 01 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:fa:da:48:9a:72:0b:2a:60:a3:07:80:b3:97:a6:28:30:cd:1a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 27 00:00:00 2024 GMT
Not After : May 1 23:59:59 2024 GMT
Subject: serialNumber=2d49c8d1f836bb4b0abb6c54947c36f6529694989be5760052c354244c1ab178, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:36:81:13:da:b8:08:82:78:0d:62:6b:c0:
67:ab:b2:50:e9:f5:fd:04:1a:f1:be:67:4b:b9:74:
cc:d0:5c:97:fb:35:6a:3c:58:d9:52:84:69:8f:27:
2e:e9:8c:f9:7f:76:f2:cd:df:ca:de:c8:6b:d4:13:
69:d3:fb:b4:29:6d:21:0e:44:0d:fd:3f:07:ba:de:
82:66:b8:09:3c:dd:8c:d8:79:13:ea:4d:18:cc:38:
22:b2:05:c8:75:35:a5:18:f9:34:d2:b2:37:f4:c1:
87:84:f3:2e:2a:ac:31:e9:87:fa:cd:75:d7:ec:80:
27:df:97:2e:2e:0a:76:85:a9:de:d4:05:ef:12:67:
dc:50:ed:34:b8:37:1c:69:24:bf:8e:fa:c6:81:78:
54:e3:1c:f5:6b:00:78:c3:bd:ef:69:29:42:67:0c:
5f:a8:6e:6d:5f:b7:2f:b8:c7:4f:f4:43:fb:da:da:
2f:8f:90:fc:b1:13:84:b1:b3:4f:b1:ba:af:0e:c7:
21:11:87:22:9e:07:3f:7a:7f:ba:a9:ef:86:4a:96:
e1:77:a1:77:01:86:4d:5d:da:5b:86:ec:3a:e1:3e:
16:94:7b:f9:b2:ff:e3:b0:cb:e5:e9:cc:5b:48:bf:
fa:54:9a:0c:83:ae:8a:82:08:ed:90:0b:f0:42:71:
3a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:07:87:CA:90:1B:A5:E1:5A:03:91:51:7A:DE:35:D0:4F:1A:22:57
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8d84765c-7a2d-4a3c-87a7-4a0b4a9c8041.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
41:4f:07:14:db:48:9f:0d:84:ae:67:42:f8:a1:2f:66:3c:44:
cf:8f:bc:96:33:5c:3c:d8:26:84:28:ea:b2:f7:91:1d:e9:58:
32:b2:39:1b:f9:aa:04:79:b4:8e:08:fc:f9:ef:36:c3:0d:e5:
32:4a:07:d5:06:30:17:00:a8:7d:bc:4f:37:07:cf:40:fe:3f:
b5:c3:92:9f:b1:62:16:40:7e:2d:93:85:2e:51:a3:e8:06:01:
af:59:9d:7b:b9:2f:3f:b1:36:10:00:e6:a4:00:1d:08:86:76:
77:fe:dc:48:03:a9:a6:f6:0c:c1:13:a6:ff:86:3e:42:05:22:
ec:22:59:f2:96:66:86:c0:76:d0:b3:62:65:33:68:8a:e5:98:
54:76:d8:38:c7:92:67:c5:2a:c7:5b:86:24:3f:c0:f2:fe:fd:
94:c7:5a:e2:b6:02:20:2e:f8:d8:e7:14:09:04:b9:eb:80:34:
ff:1c:a0:ba:ba:bb:a1:c9:92:56:a5:65:9b:b0:fa:0d:12:f9:
1e:44:26:1c:65:cd:1b:01:e9:6a:db:0a:7a:4d:a2:3c:aa:76:
e6:47:c6:bc:59:fd:49:32:ed:41:f5:42:a9:6d:fe:5e:dd:f3:
b6:db:00:ac:c1:d9:40:82:b8:76:7a:ba:c9:79:53:2a:66:51:
08:ec:76:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:40:51 2025 by rpki-client