Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0408d41-0161-43fa-8c7a-219c685941a5.roa
File: a0408d41-0161-43fa-8c7a-219c685941a5.roa (raw, json)
Hash identifier: /Qi1J0jWUT9fP2AEhh7ZwNk+dkXFjQEUJashLUBVvL4=
Subject key identifier: 7A:75:75:DD:9F:B4:B2:84:77:A5:F3:D4:A4:2B:A3:93:61:FD:FF:E8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 23A55BFA67A1316704030F75DF079ECA6A05E175
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0408d41-0161-43fa-8c7a-219c685941a5.roa
Signing time: Tue 15 Oct 2024 00:00:00 +0000
ROA not before: Tue 15 Oct 2024 00:00:00 +0000
ROA not after: Tue 19 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a5:5b:fa:67:a1:31:67:04:03:0f:75:df:07:9e:ca:6a:05:e1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 15 00:00:00 2024 GMT
Not After : Nov 19 23:59:59 2024 GMT
Subject: serialNumber=d594d84e3dca1d366ee47482c192bd2e14e6dccd39b24c513c910577bf3353ff, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:b8:6a:6f:01:a5:be:1a:ab:4a:76:9c:c9:
10:9c:fb:b8:03:95:f5:a7:35:03:21:e3:7f:58:e4:
bf:03:25:a0:e0:5c:32:74:d1:d2:33:a0:04:c2:02:
12:4c:be:b9:d0:69:3b:2e:66:f9:c5:ad:3a:d8:89:
3c:fe:2c:a0:a4:b0:17:fb:f2:76:72:0f:e3:4e:3b:
b2:e2:89:dc:38:e0:b9:77:54:e0:2f:db:9e:85:00:
9e:4c:92:1a:6b:1e:39:1a:e7:8a:ed:4c:a7:61:c3:
c6:3b:b2:9f:f5:cd:3d:1d:f0:b6:b5:dd:31:6a:a3:
65:ac:13:14:4f:e6:7f:10:2f:4c:eb:6d:51:d2:31:
13:b3:7b:dc:8c:56:2f:b0:4b:89:63:1f:fc:10:36:
7b:5f:2f:2d:8f:39:9e:b3:1f:cf:25:b5:c3:48:fa:
c4:c3:66:8a:42:ff:be:94:06:37:1d:06:bf:04:19:
2e:48:95:c6:6c:28:34:90:8c:bb:db:86:7b:66:55:
b6:6d:2b:d7:cb:1c:bf:f0:d9:4f:f1:60:18:a9:d8:
60:bf:d9:a8:7e:18:bd:3f:dd:85:0f:dc:47:4d:01:
37:cf:da:00:cd:10:17:42:01:1f:82:08:c8:e2:b3:
f4:5c:69:2a:c7:ab:bc:31:c1:5b:7b:49:86:76:3d:
c3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:75:75:DD:9F:B4:B2:84:77:A5:F3:D4:A4:2B:A3:93:61:FD:FF:E8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0408d41-0161-43fa-8c7a-219c685941a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
92:11:49:c1:bc:19:34:87:80:ca:c8:ed:0b:0b:af:34:73:72:
a7:45:8c:99:50:3f:a4:d5:ca:ac:ec:6f:20:df:89:48:c6:55:
f8:c7:90:5b:67:11:6d:ba:64:5f:18:d4:1a:1d:09:8d:0b:2d:
81:1e:a8:01:c2:e3:7b:de:cd:40:85:3c:16:1f:90:99:e9:ac:
14:90:d5:c9:8d:bb:99:65:38:38:49:c4:0d:c4:c9:1f:e6:95:
2c:ae:30:c2:19:fd:f2:63:90:8b:d0:6b:ef:40:fe:9c:06:2d:
9c:83:81:7d:12:ba:f2:a3:5b:bf:23:ed:8a:ee:d5:dc:b7:d1:
cd:b7:a2:f0:d7:9c:c3:41:d8:3d:16:50:58:4f:a7:f7:36:04:
7b:07:d2:22:06:b7:78:61:44:75:ae:6a:c3:c0:25:42:82:85:
89:35:b0:2f:a5:a4:c1:12:cd:cc:8d:97:e8:c4:d0:28:80:32:
de:e1:bf:82:0e:15:75:71:68:f2:be:c4:5f:f2:a6:37:e8:12:
0b:c0:31:8a:a4:56:4d:76:27:86:79:d1:ee:8f:71:2f:df:fc:
0b:60:9c:19:8e:4a:86:2b:9e:52:e2:00:dd:5e:eb:dc:1c:24:
ea:9f:4e:90:83:f7:26:39:85:4a:c8:fd:3f:58:cd:83:97:31:
56:1b:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:19:50 2025 by rpki-client