Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9219bac5-a443-42ff-9226-12b2c971658c.roa
File: 9219bac5-a443-42ff-9226-12b2c971658c.roa (raw, json)
Hash identifier: OJeroRIMgNDN+jkix5CLmsC6yV4yB0wUR42Hsc0d3iQ=
Subject key identifier: 17:9D:BA:F2:A2:06:50:F1:D7:3E:EC:60:83:80:7B:72:54:C3:B0:BC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 200C4FA4AF0F105EDF9F8F1664715C5BD3B3B1F2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9219bac5-a443-42ff-9226-12b2c971658c.roa
Signing time: Mon 23 Sep 2024 00:00:00 +0000
ROA not before: Mon 23 Sep 2024 00:00:00 +0000
ROA not after: Mon 28 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0c:4f:a4:af:0f:10:5e:df:9f:8f:16:64:71:5c:5b:d3:b3:b1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 23 00:00:00 2024 GMT
Not After : Oct 28 23:59:59 2024 GMT
Subject: serialNumber=415a185726e3b0b3aa1b0a0c3909eab86709db4d626ee5fbcf44d9f0eeebf921, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a4:c3:19:0e:35:eb:23:71:a9:c6:fb:23:00:
20:85:cc:a9:e4:d5:6e:15:89:2e:21:7a:f3:5c:d7:
df:7b:6f:08:d7:de:4c:13:4c:ed:ec:dd:a8:ac:ac:
e5:a5:96:ef:ab:c2:8d:32:41:64:b3:31:36:5b:72:
d2:8b:39:c5:71:c6:6f:70:91:3c:87:c5:e8:34:a4:
14:51:b9:aa:c5:9b:99:73:1b:71:23:16:19:37:81:
86:20:69:a5:37:95:88:5e:3f:f9:81:66:75:00:bd:
5d:fd:c5:8a:2a:05:79:cf:45:21:13:09:b6:79:23:
8e:09:b5:b1:f4:97:94:b3:6c:8a:c7:6d:91:9b:64:
2b:7e:17:5c:a4:98:46:14:0e:c1:04:3c:f8:10:83:
88:6d:9c:95:82:89:39:19:ce:43:ae:01:44:47:f0:
c2:0d:e8:56:7c:0a:fa:28:78:f0:0a:86:55:89:09:
3f:03:6b:52:75:11:66:36:f1:55:15:cb:14:60:65:
bc:f0:18:83:3e:fc:3d:8d:56:16:5f:09:38:3c:e4:
48:8b:73:a2:1e:24:98:9e:57:8d:85:5d:75:68:d7:
71:ec:c9:c2:46:5c:97:25:05:0f:a3:0d:ff:88:fb:
e0:f0:bf:b8:15:62:3f:fe:6c:63:71:49:c3:f2:1f:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9D:BA:F2:A2:06:50:F1:D7:3E:EC:60:83:80:7B:72:54:C3:B0:BC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9219bac5-a443-42ff-9226-12b2c971658c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ce:ff:11:56:ca:95:8a:b2:24:25:45:f5:df:be:4b:fb:26:
b5:fc:0c:cb:67:2d:47:fb:0e:00:8a:90:3b:0b:27:3e:2f:fb:
1b:8f:2d:a4:b6:54:a3:f9:6d:49:24:be:6a:30:5f:a1:4b:d8:
20:d4:3e:9d:f7:83:26:98:61:1d:d6:3b:23:04:69:d0:d8:e1:
0f:9d:18:9b:ec:fc:55:e8:8e:c7:bc:58:f2:67:06:a7:1e:2a:
12:22:c3:40:a6:33:8b:38:10:02:9e:2e:95:03:44:3d:c1:67:
a8:ff:80:b2:25:1c:ea:2b:00:da:c5:3f:10:3f:31:8f:5a:07:
7c:fd:57:14:2c:8d:ff:43:db:e8:5e:c0:db:40:bf:a5:33:90:
cb:2d:48:65:70:40:7f:87:f8:21:b6:e5:6c:b9:3b:81:fc:aa:
9f:14:41:f6:fb:df:13:05:06:f8:49:0c:35:f5:23:7f:95:0f:
1d:2e:f1:83:01:ee:fe:e2:cf:d2:4a:81:f8:03:59:48:d7:a6:
dc:2d:d7:35:94:ac:c1:ed:9f:99:a5:1c:39:bc:5d:65:45:1c:
c1:49:b0:64:ff:07:92:c2:69:f1:54:58:c2:a8:1e:a0:c4:7b:
9a:0a:2d:d2:3c:55:2c:4b:cb:06:6b:ff:95:ed:9a:f2:c5:cb:
d0:60:a5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:16:03 2025 by rpki-client