Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9fac18ff-2bbb-42e4-a180-3ab21482465b.roa
File: 9fac18ff-2bbb-42e4-a180-3ab21482465b.roa (raw, json)
Hash identifier: DKmxawiz22smsf6r8sea1MXexBDBi2vURkKc2g6Wrqg=
Subject key identifier: 1D:F8:0C:92:22:81:BD:BE:9D:C0:91:03:63:E6:22:06:C1:80:A5:A6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0724A84DCF189A58F581B4D8FB254BE805D356C2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9fac18ff-2bbb-42e4-a180-3ab21482465b.roa
Signing time: Wed 20 Mar 2024 00:00:00 +0000
ROA not before: Wed 20 Mar 2024 00:00:00 +0000
ROA not after: Wed 24 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:24:a8:4d:cf:18:9a:58:f5:81:b4:d8:fb:25:4b:e8:05:d3:56:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 20 00:00:00 2024 GMT
Not After : Apr 24 23:59:59 2024 GMT
Subject: serialNumber=58ed7f412c706b4030ab80083b6e779904e43eaf265844a5d28aae1abe42591c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:6d:af:92:c7:75:cf:1f:6d:0f:e7:75:1e:
55:10:24:d8:1d:2b:0e:2d:60:41:6f:53:d9:f5:48:
c0:4b:9e:84:c0:18:44:56:65:74:b8:d5:8b:71:69:
22:b7:01:fa:3d:14:2d:63:4a:c9:b5:f9:be:d2:1f:
4d:35:10:71:7e:31:6d:d6:09:e8:26:13:0c:0d:f9:
79:b4:28:1f:93:31:0e:8a:02:da:2d:eb:5a:d7:33:
e0:93:8c:28:56:ea:24:bc:9c:8b:31:d1:85:6d:00:
9f:35:16:e8:d4:20:06:94:c1:50:b4:ed:2f:d0:d9:
19:44:53:05:89:ef:26:d5:db:dc:d6:88:bc:bd:7c:
f1:6a:66:74:3b:44:48:94:b0:93:45:56:b9:11:ad:
44:b3:43:4c:51:87:c9:04:2c:25:b4:52:34:8b:7a:
c5:51:e2:07:40:d5:b2:ab:63:40:62:19:ec:c4:4f:
ac:16:75:97:6f:a6:20:b2:f1:7d:16:b0:30:3a:8a:
53:4b:54:b8:59:33:62:b7:83:18:40:35:28:8f:c5:
5f:30:44:9d:ee:e5:ff:45:bd:5f:31:75:61:30:53:
fc:dc:7f:05:eb:66:7d:5c:be:7d:a8:d0:6f:4c:36:
1f:d0:c9:53:a2:90:95:ed:d2:50:1a:bd:ac:e0:a9:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F8:0C:92:22:81:BD:BE:9D:C0:91:03:63:E6:22:06:C1:80:A5:A6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9fac18ff-2bbb-42e4-a180-3ab21482465b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c2:ac:40:13:cd:65:72:5f:3a:0f:32:38:fa:87:54:8b:c9:
2c:f7:b4:89:44:38:b5:aa:e1:d2:cd:a3:fc:38:cf:cd:3e:17:
ae:5b:c9:72:88:dc:cb:0e:bd:bf:e3:8b:07:cd:22:4b:98:c3:
0e:2f:f8:39:8f:19:76:6f:89:1e:c7:59:fc:8a:bd:62:85:bb:
48:11:5b:35:8f:7c:37:03:06:3b:50:48:3c:4c:a0:f4:cc:c1:
6c:9b:8f:36:79:6b:0d:dd:d5:6f:98:9a:bf:91:10:e1:45:65:
41:b1:28:6f:57:dd:30:44:46:d4:3c:ce:ec:85:6b:f7:6c:7b:
f5:cf:b8:f3:76:b2:d7:3b:fa:86:7c:00:d2:8a:19:58:2f:9d:
ce:ab:93:fe:65:6a:f7:37:8c:0d:f8:17:b1:23:14:b8:68:09:
b1:70:5f:bd:bd:7f:60:a3:f9:0a:43:d1:6d:20:20:43:c0:6f:
e2:41:68:c0:8b:55:28:e4:79:38:d6:18:96:a1:63:9b:10:b1:
1c:08:0c:e2:67:7e:8d:8b:2d:fe:33:6e:2a:7e:e3:96:92:7a:
56:d6:ea:07:a5:e2:ce:8f:bb:42:7a:7d:7c:83:11:9c:49:68:
e9:43:79:79:09:8e:75:6f:5a:c7:00:47:62:36:20:fe:73:b0:
00:a7:cf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:10:34 2025 by rpki-client