Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/961b83aa-0777-4c6c-ad96-03c5a19e6c88.roa
File: 961b83aa-0777-4c6c-ad96-03c5a19e6c88.roa (raw, json)
Hash identifier: lBVVECAj2b2KEDoHAIfara/MectBud7o0CGP2S6QaIY=
Subject key identifier: 47:DC:0A:1B:66:42:F8:4C:91:E5:87:76:52:C1:30:85:34:8B:D9:0D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 19D88D921708688B6BE69C0035ACFFD78CCAA5EF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/961b83aa-0777-4c6c-ad96-03c5a19e6c88.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d8:8d:92:17:08:68:8b:6b:e6:9c:00:35:ac:ff:d7:8c:ca:a5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: serialNumber=fbcf793c78166ae3a26d8127c89dba90225a7100cce3bb650b20e12a9e05353a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:9b:10:e4:57:3c:92:3c:5d:89:74:66:43:
7d:1c:41:fb:7d:b6:b7:29:ef:da:fb:48:3b:e9:6b:
97:f2:3a:4c:c2:a6:b8:a4:60:7c:af:b6:fb:9b:51:
a0:9d:82:67:64:9d:e5:cc:13:6d:3b:e3:49:f6:41:
0d:09:0f:37:47:cf:0f:f1:92:82:0d:c8:46:55:d9:
bd:06:27:34:20:0b:60:35:0b:be:0b:68:b2:1d:40:
a7:cf:16:d1:bc:a1:2e:d3:7b:d7:c2:e9:41:e3:45:
40:de:41:bc:fd:18:e8:4b:96:af:64:57:3e:ee:04:
10:0f:c1:7a:c1:81:af:2e:b9:4f:26:d5:fa:d3:a1:
37:3a:aa:4a:06:8c:55:11:35:a8:e2:a2:c8:81:af:
df:64:7f:2c:cf:48:be:fd:0c:89:9a:aa:09:37:c9:
15:f6:80:16:de:66:5e:4f:ef:4e:25:39:4c:f6:12:
50:de:30:0e:95:f6:fd:7e:2e:97:b2:c5:a7:09:9e:
38:2b:62:62:0f:c2:2d:02:78:51:49:be:7a:40:24:
3a:04:62:ea:bf:b2:81:c7:d0:ca:59:96:a0:bb:c5:
01:43:dd:18:50:0f:f8:ee:52:f9:d3:9f:6a:59:1d:
51:c8:29:a9:ec:79:e6:67:75:d3:e7:bb:3f:8f:cc:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DC:0A:1B:66:42:F8:4C:91:E5:87:76:52:C1:30:85:34:8B:D9:0D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/961b83aa-0777-4c6c-ad96-03c5a19e6c88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e2:50:63:50:ee:fe:23:ab:bb:3a:d7:fe:a8:7f:9a:c9:83:
30:3e:e6:0b:16:c3:bc:48:6a:d0:e7:81:7f:a3:f5:0a:10:d2:
37:20:4e:43:77:7d:e1:ce:dd:d1:f4:a8:0f:b0:c3:62:40:b1:
e2:dc:6f:f6:9b:3c:25:cb:3b:30:fa:1a:f9:63:3b:33:d8:16:
6f:00:2f:f3:24:e0:7b:8d:dc:c8:52:2a:13:db:bc:c3:39:3c:
74:55:cf:e0:b5:9b:f4:ac:dd:55:e8:2c:c9:16:f8:7c:1f:16:
5e:7c:86:56:7e:fe:d1:7a:02:ac:e7:83:a1:c7:0e:ff:3c:d8:
61:3e:07:60:3f:49:37:49:60:f2:c8:b1:06:3d:0a:01:fb:46:
6e:46:5e:5b:6d:75:5f:56:01:c1:62:85:01:21:7b:97:b6:4f:
31:20:6a:10:85:19:94:f1:f8:cc:3a:08:ba:e2:3c:98:1e:e6:
77:c1:a2:78:94:d0:9e:52:ad:0b:eb:4d:89:07:32:02:4a:3e:
51:46:46:26:03:e4:5c:5b:f8:c8:67:6f:49:12:47:ff:82:0e:
ff:ec:a2:61:c5:a4:d1:7b:aa:5f:49:de:9b:5d:65:ac:77:11:
45:bb:38:3c:76:ef:f0:b5:57:4f:26:ff:05:46:55:0c:87:b8:
90:81:1d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:01:06 2025 by rpki-client