Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9a9ec3a2-50ad-4c72-8232-fc4d32f4cb9e.roa
File: 9a9ec3a2-50ad-4c72-8232-fc4d32f4cb9e.roa (raw, json)
Hash identifier: wIWb0fb/Lzuk2JMz4rk4ixZwTv4pJEn4q2LNqBo1pU8=
Subject key identifier: 24:7F:38:FF:F6:88:75:1D:81:9B:D5:C8:22:DE:18:C2:76:B7:D0:13
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 292B7DDF1308964CFAF04D8530CAED557626C8C1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9a9ec3a2-50ad-4c72-8232-fc4d32f4cb9e.roa
Signing time: Tue 25 Feb 2025 18:48:22 +0000
ROA not before: Tue 25 Feb 2025 18:48:22 +0000
ROA not after: Tue 01 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:2b:7d:df:13:08:96:4c:fa:f0:4d:85:30:ca:ed:55:76:26:c8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 25 18:48:22 2025 GMT
Not After : Apr 1 23:59:59 2025 GMT
Subject: serialNumber=f8a187054ecc5446868c55af16a1880f9fa901da682ac6b0e3f3e07fd537bf43, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:a0:ac:b2:2a:6b:7f:8a:c7:36:76:fb:06:
d4:f9:e6:8b:3f:fb:d1:89:70:9c:f6:cc:1c:a4:fd:
6b:b9:dd:34:29:a3:f3:ea:31:92:81:86:89:d1:9c:
b2:97:e3:d5:01:35:00:64:3c:bd:6f:68:41:4d:f0:
04:bb:65:7f:af:14:47:91:d7:e7:69:c6:57:e9:79:
3c:be:06:f8:6c:df:fa:3f:b6:27:77:4a:1d:81:fb:
02:7f:42:7b:08:ac:fc:65:67:01:8e:bf:a4:bc:9c:
ba:30:f4:c2:fb:10:93:97:03:86:9d:9e:92:54:7e:
d8:14:1d:37:dc:eb:9f:79:96:98:f0:52:5a:16:fd:
65:31:5e:2c:a3:db:ca:e2:80:29:26:83:f2:58:55:
f3:72:4e:55:79:68:a7:b1:74:c7:48:c9:c7:4c:e5:
da:03:24:c6:14:08:cc:45:9b:3a:e0:9f:98:4e:7f:
5a:e8:99:a0:b3:d0:0b:67:fc:97:b4:f4:fd:8e:29:
54:67:6b:ed:82:0b:17:66:8c:36:b9:3c:6e:ff:0c:
27:47:68:31:7b:4b:07:18:c8:30:6b:3c:47:05:bc:
c3:1a:b1:8a:b7:b4:8b:c3:14:db:c9:73:6a:0e:73:
b7:e3:55:1b:7e:5b:dd:db:bb:6a:ad:89:6d:3d:cc:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7F:38:FF:F6:88:75:1D:81:9B:D5:C8:22:DE:18:C2:76:B7:D0:13
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9a9ec3a2-50ad-4c72-8232-fc4d32f4cb9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:56:3b:13:68:eb:bd:e9:58:31:24:66:44:bb:45:a8:75:4d:
72:5b:1e:4b:21:11:b1:78:32:18:0d:7f:b8:28:b3:b4:53:8f:
b6:38:3f:21:86:65:51:b2:a3:51:e2:19:39:8b:df:a0:07:69:
ec:d6:63:8f:5b:c6:a8:8e:73:81:55:a6:92:cb:ea:c5:c0:fe:
b5:2b:39:8a:2d:25:7f:b5:88:25:60:0b:dc:3c:e8:c5:c6:f4:
23:38:28:54:4b:24:7f:5c:5c:8b:4e:92:70:1a:20:3a:5b:c5:
5e:41:26:9c:25:6c:ed:03:c2:e9:54:b4:eb:f8:62:db:05:43:
20:96:00:8d:63:72:3b:5e:a5:4d:34:08:88:49:44:7d:7b:b0:
b5:38:aa:87:25:6e:46:59:7e:6a:37:e3:c1:a5:ca:d4:e8:7d:
95:5a:10:6f:7b:69:66:d5:88:46:28:82:65:c2:bb:da:0c:19:
27:fb:59:78:e5:83:73:0b:ab:a3:80:4a:6d:81:ca:d6:27:bb:
0c:60:3e:5f:5d:77:91:91:53:a6:6f:e8:34:00:ff:59:1e:4c:
fa:f4:8e:5f:8d:91:e7:92:89:22:29:20:c5:e4:e0:46:f8:a6:
f9:de:ac:e4:50:c7:bc:48:3a:96:90:1c:bc:18:5b:95:89:83:
4b:46:37:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:35 2025 by rpki-client