Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/942495f2-0f9b-4a79-b21c-8c88a3e2e74a.roa
File: 942495f2-0f9b-4a79-b21c-8c88a3e2e74a.roa (raw, json)
Hash identifier: eDUj+T2O5dh/568HNV9WmUe57LXsr8aAmj8wCrTNCrM=
Subject key identifier: A2:F2:B9:1C:FD:D2:50:91:39:8D:D6:B3:B7:90:89:E8:8B:48:7F:92
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 40B749C5769A4909BC736DC0D9A93A77D8C07F83
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/942495f2-0f9b-4a79-b21c-8c88a3e2e74a.roa
Signing time: Wed 05 Jun 2024 00:00:00 +0000
ROA not before: Wed 05 Jun 2024 00:00:00 +0000
ROA not after: Wed 10 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b7:49:c5:76:9a:49:09:bc:73:6d:c0:d9:a9:3a:77:d8:c0:7f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 5 00:00:00 2024 GMT
Not After : Jul 10 23:59:59 2024 GMT
Subject: serialNumber=044a623aae344e9d7feaec25f654395109858a5639ac86f122bf1f3b793de24b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:8b:12:90:a0:e3:f6:44:76:81:bf:46:74:
f4:4d:39:1b:5d:9d:da:0b:9b:ef:e9:ed:17:4a:e2:
79:b2:c5:26:6e:66:5f:c8:57:97:06:12:f9:fc:f1:
9d:38:95:be:3b:2b:07:5c:dc:e9:ac:a6:37:54:be:
bd:1f:61:5d:2d:33:e5:6b:8e:16:25:da:cf:38:3f:
f4:35:0b:04:88:88:aa:da:e4:d4:fb:f1:93:a7:b2:
77:e7:69:81:b8:d9:ed:64:3c:ec:15:67:32:64:bc:
74:88:ff:6e:8a:ea:d9:4b:7a:b9:27:ae:c3:94:53:
5e:ae:66:3f:15:e8:08:9d:c3:db:67:26:33:71:ea:
27:c0:97:1c:37:04:9a:22:84:4a:bf:38:ba:13:e1:
5d:43:59:a1:b5:74:0f:99:ef:dd:9b:cd:7b:56:cd:
dc:9c:92:c6:9e:1d:70:c2:cd:cd:53:d3:37:ac:bf:
d6:88:8f:a0:d7:de:20:4b:da:d1:f8:ce:a7:0f:7d:
7f:82:f2:44:c8:30:4e:ba:c0:35:33:ef:d1:3d:f8:
16:56:12:b6:72:90:42:0b:ff:31:74:f3:ca:5d:54:
33:b7:60:8a:2e:6c:28:e4:8d:3d:90:af:2d:26:8f:
69:47:58:d1:df:cf:c4:9d:26:77:f9:14:f2:13:c2:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F2:B9:1C:FD:D2:50:91:39:8D:D6:B3:B7:90:89:E8:8B:48:7F:92
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/942495f2-0f9b-4a79-b21c-8c88a3e2e74a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
39:00:48:3f:a8:9a:4f:e9:0d:74:0c:47:9f:ed:b3:06:9b:a5:
03:a8:2f:21:5a:f7:62:7c:c5:ae:d5:18:95:88:f2:74:a7:7a:
ef:82:84:e5:f1:6b:13:4f:5e:75:3f:72:75:b2:65:73:3c:9e:
db:d5:54:68:a6:c2:f9:76:5c:f2:d5:8f:d4:97:fa:38:4f:db:
8d:dd:6b:d1:a0:f6:25:5d:d8:f4:b2:3e:77:3f:e2:9c:a8:b6:
d5:c5:5a:a1:c8:60:b6:ec:c3:e4:2e:4a:34:39:88:8a:84:fb:
ae:4e:33:2a:d5:a2:93:a4:3d:57:74:21:c1:1d:f3:2f:61:51:
93:56:99:bb:59:5b:34:d7:c0:96:21:80:ab:79:5f:8c:52:8a:
2b:a4:e7:bc:68:03:eb:89:80:9a:15:53:37:de:cd:3b:f5:e1:
c5:65:2e:07:19:c4:95:3f:f2:bd:de:71:14:61:fc:57:b8:df:
28:bb:ff:32:c1:d9:97:fd:b6:6b:e4:ee:83:1e:de:fa:c4:56:
8c:1d:44:3e:8f:87:4f:40:7a:a3:2d:1d:86:20:97:16:4d:67:
03:9d:16:b5:49:26:85:03:3e:24:69:77:41:da:a9:fe:21:74:
ec:ae:54:57:dd:4c:06:17:e4:d0:e7:26:3f:cc:08:0e:87:c9:
17:5f:c4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:51:25 2025 by rpki-client