Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/984d56fd-1e7d-45c8-a84f-ef88c76e549d.roa
File: 984d56fd-1e7d-45c8-a84f-ef88c76e549d.roa (raw, json)
Hash identifier: vrjgXn4bfPAPFjnsY5lUSHmXcLDmIcWovCtg019a4Fw=
Subject key identifier: 54:80:31:F5:0F:A8:A3:F1:7E:0F:66:51:EE:24:81:57:C5:82:DE:CA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2D9FF80BDA3CFCB42CCD3663E9D74F2993ABD6A5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/984d56fd-1e7d-45c8-a84f-ef88c76e549d.roa
Signing time: Fri 01 Nov 2024 00:00:00 +0000
ROA not before: Fri 01 Nov 2024 00:00:00 +0000
ROA not after: Fri 06 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:9f:f8:0b:da:3c:fc:b4:2c:cd:36:63:e9:d7:4f:29:93:ab:d6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 1 00:00:00 2024 GMT
Not After : Dec 6 23:59:59 2024 GMT
Subject: serialNumber=2ff7343ea769698866850b3f47f127ffdcf6f1f36a8adfc2fa253e8afd76ab5e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:82:da:6f:b1:29:89:ed:8f:46:b1:1f:94:
9d:a6:4b:ca:30:24:9b:57:cb:6a:b6:3f:52:60:01:
a2:08:b7:a7:69:a6:db:75:77:3f:4a:4b:02:4a:f5:
94:45:3d:56:4f:d3:04:45:2e:89:36:7f:f1:bd:96:
6b:86:c6:fe:bb:ed:6a:c5:92:70:7d:e7:5e:88:04:
dd:a7:05:70:69:14:89:08:02:0d:7c:0c:d5:4f:d2:
a4:36:47:43:63:58:dd:01:60:59:61:32:67:ca:94:
0f:c5:83:3c:66:ff:5b:90:eb:6d:c7:61:06:1b:66:
1b:27:90:fd:a8:c3:58:23:79:ae:b3:15:64:84:aa:
4b:ab:46:c9:38:e0:79:bc:d1:2a:2e:36:b8:bb:48:
0c:ed:8f:4d:45:54:81:4b:43:89:80:41:00:b8:c1:
b2:59:a7:f5:07:74:34:e4:56:a6:a8:6b:de:19:12:
9c:31:7f:cc:f3:01:0b:c2:fb:48:fc:47:91:9a:5f:
e3:e5:85:0c:a3:c1:8f:1f:6c:1b:14:83:af:6d:15:
10:94:c8:0e:13:18:34:65:e5:76:95:c9:8a:47:e9:
39:54:56:57:4e:7f:50:4f:72:42:cb:19:a2:14:75:
96:15:e7:f3:f9:b0:fb:bb:7e:83:1f:12:96:c2:13:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:80:31:F5:0F:A8:A3:F1:7E:0F:66:51:EE:24:81:57:C5:82:DE:CA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/984d56fd-1e7d-45c8-a84f-ef88c76e549d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:0c:2d:5a:f5:f3:fb:6e:69:5c:d5:a9:b4:f1:2d:0d:5d:98:
74:ce:04:b0:62:e9:6e:62:47:a3:c7:cf:c1:91:b2:67:bc:d0:
3e:5c:e2:9d:a1:e8:bf:f5:a7:1c:d4:e5:df:e2:63:2d:69:4d:
d1:7d:1c:e0:7f:a1:10:90:d3:70:74:96:5b:1a:50:d3:26:a4:
a4:13:d3:9e:b2:2a:48:ec:d4:a2:d1:c3:70:43:ea:e6:d4:af:
b0:22:5e:e5:51:a3:33:e2:4e:66:5b:dc:ab:bf:4a:0c:f0:74:
d1:0f:da:9b:45:a3:e9:52:01:02:f6:0b:3e:1d:b9:0f:e4:a4:
d4:39:c3:8f:a8:c8:99:43:58:0f:a8:05:df:77:17:67:0e:76:
3d:26:a2:bd:c8:4b:ce:d0:72:7c:3c:77:a0:ea:90:4d:b4:e4:
b8:00:ca:99:26:78:8e:0e:3e:10:9c:a0:fb:5c:4d:04:f3:4d:
4d:0d:9c:85:5f:72:c6:de:92:3a:14:50:d6:f4:48:af:2c:ea:
3d:d5:9f:ef:5a:25:f1:dd:eb:d1:84:d8:cf:27:21:ac:ed:27:
ce:2a:1f:27:c4:2b:47:07:37:24:6a:20:94:d1:db:3e:2b:9c:
f1:1e:ca:4a:d6:da:34:6e:94:d1:f0:35:a5:4e:69:06:7a:4d:
06:23:51:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:59:47 2025 by rpki-client