Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9d3f48f8-0e4c-422c-ad8c-0b2692cf0b5f.roa
File: 9d3f48f8-0e4c-422c-ad8c-0b2692cf0b5f.roa (raw, json)
Hash identifier: DDH6l2A5+LHCLZObb1FSFjqK91URbZb5QKtCRS8fvQA=
Subject key identifier: 4B:3F:4F:FA:37:79:46:E0:C2:B0:1C:12:A4:9C:B8:92:D1:9F:A7:4C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 72BF6A1C6A1D62B00E2E8A94E93C9846EE854B75
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9d3f48f8-0e4c-422c-ad8c-0b2692cf0b5f.roa
Signing time: Fri 22 Nov 2024 00:00:00 +0000
ROA not before: Fri 22 Nov 2024 00:00:00 +0000
ROA not after: Fri 27 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:bf:6a:1c:6a:1d:62:b0:0e:2e:8a:94:e9:3c:98:46:ee:85:4b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 22 00:00:00 2024 GMT
Not After : Dec 27 23:59:59 2024 GMT
Subject: serialNumber=e5a04f0a27fd1beab5457c42811d3ced00b279a910cc2fb2b43b723e0eba049e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:9f:57:76:cd:d3:c5:c4:44:4d:90:e6:f2:
bd:41:38:66:33:3d:d2:fa:bf:fd:41:19:39:94:ea:
2c:ad:09:0b:fb:26:d7:53:d0:0e:20:3f:d7:27:38:
3c:f7:14:24:d7:f5:98:2b:f7:26:ba:84:70:c4:b7:
78:00:4e:06:a7:f3:12:af:18:22:a1:3b:66:85:df:
3b:b5:df:54:0d:7c:3e:c4:b8:18:e6:6d:eb:12:18:
1b:0d:83:4c:eb:2d:9d:c7:78:c9:13:cc:c0:82:33:
7a:e2:64:ae:66:b2:b4:5b:25:72:ac:54:84:be:0d:
3b:5f:e7:f7:90:91:e5:73:dd:2e:98:24:d9:25:be:
77:3c:b3:bd:df:e0:50:91:30:cc:fb:8e:75:9a:95:
fb:d9:eb:b6:bd:9f:cd:1f:16:36:43:08:50:dd:3f:
6a:ed:e4:cc:d1:fb:57:8c:43:fa:17:42:e7:51:70:
8e:83:89:20:74:02:9a:2f:c7:ee:3a:6a:b1:9e:fa:
70:3f:e1:e6:91:14:fc:2e:a5:e1:a9:a6:73:04:34:
3c:db:5d:9a:a6:4b:e9:98:11:a5:3d:62:26:76:4e:
90:33:80:02:f7:f2:ac:3e:78:f3:a5:b4:09:13:03:
cb:c2:6d:51:c8:5b:d6:2d:b2:6d:c8:b7:6e:af:cf:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3F:4F:FA:37:79:46:E0:C2:B0:1C:12:A4:9C:B8:92:D1:9F:A7:4C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9d3f48f8-0e4c-422c-ad8c-0b2692cf0b5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:5d:e3:ea:c8:ed:e9:f1:05:80:db:3f:15:fd:51:84:73:88:
7a:0a:d6:ca:1e:3a:67:8d:a3:64:75:57:0a:09:3b:5b:80:00:
62:2b:3b:e0:94:84:c3:79:9a:7d:42:35:32:4c:2b:81:b9:8e:
7f:80:89:0f:e6:fc:a0:85:74:1e:31:9a:da:49:e0:bf:6a:a3:
5b:1e:2d:38:c2:c3:1f:16:a6:22:8a:55:15:da:2a:df:db:e2:
c3:2b:b9:f2:31:92:3b:78:5a:77:6d:ba:12:29:d6:e0:2f:c7:
85:1a:a1:38:b0:99:4a:46:77:9f:cb:37:c3:f6:75:1b:69:d4:
0f:ec:d2:e6:99:1f:68:40:6d:3a:53:5d:8c:f1:f0:1d:87:fd:
d5:38:ce:ad:81:8f:67:9a:89:11:5d:80:d6:73:b5:8f:c6:18:
d7:8b:7b:8d:2e:fc:43:ee:f8:88:3c:22:90:56:53:f5:ae:a0:
a4:a5:5d:01:fe:12:89:5a:9c:18:b4:95:84:e7:e1:0b:57:1e:
46:71:e8:ba:4d:63:73:97:6b:10:1a:08:bb:de:c4:73:b3:c2:
3a:bd:7d:8e:e3:79:0c:06:25:9f:ed:64:85:7e:5f:a1:aa:2f:
36:8f:fc:58:1d:54:e2:0f:00:1b:4e:f4:6b:0d:c9:f0:63:d2:
3b:a0:12:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:27:56 2025 by rpki-client