Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ac14c4d2-07bb-49ba-a66a-ae8a16f112be.roa
File: ac14c4d2-07bb-49ba-a66a-ae8a16f112be.roa (raw, json)
Hash identifier: K2o+t8zV3M/cfzJir2OhHszxqbmOml3gvuAk90nVvgQ=
Subject key identifier: 6E:96:3E:3F:7D:07:27:75:D7:26:08:0C:7F:E2:6C:B5:F1:DF:2D:87
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 391CA682C055C9CC1067161CD238CF958B5C127B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ac14c4d2-07bb-49ba-a66a-ae8a16f112be.roa
Signing time: Thu 16 Jan 2025 00:00:00 +0000
ROA not before: Thu 16 Jan 2025 00:00:00 +0000
ROA not after: Thu 20 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1c:a6:82:c0:55:c9:cc:10:67:16:1c:d2:38:cf:95:8b:5c:12:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 16 00:00:00 2025 GMT
Not After : Feb 20 23:59:59 2025 GMT
Subject: serialNumber=786211343fb41d495ca20c6eb0c200c816544dd81d0edb4ef91091b929027dc0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:60:9b:cc:15:f1:0c:f5:88:20:95:e8:49:
7b:a0:d1:01:a7:dd:a0:99:14:ef:80:06:19:26:46:
85:47:59:da:13:c2:3e:ea:e4:15:a7:fe:22:5e:be:
8f:a9:41:ef:77:e2:a4:80:36:3b:95:61:73:1a:f9:
1c:21:f0:9e:45:89:85:c4:51:2f:59:27:0c:31:2f:
ee:97:90:b6:4d:c7:a9:0e:5b:3d:95:42:72:a1:81:
da:61:d4:af:84:ad:44:06:05:3e:f5:68:13:d0:d4:
84:bd:e2:b4:1a:63:5e:99:a6:84:e0:a6:25:2c:16:
3c:7f:89:ef:54:4e:94:92:65:51:f1:db:44:eb:93:
51:7b:54:62:10:2b:18:3f:ae:de:4d:70:ad:e5:94:
d8:a9:ab:26:d8:22:cd:62:8d:db:16:83:84:a9:7c:
76:b4:ca:25:91:b1:24:29:4c:78:63:9e:07:9d:da:
52:46:c4:de:31:c1:5f:1f:82:b8:7b:34:7b:6d:93:
ee:57:6a:b8:ea:59:8b:6b:99:e3:3c:28:ea:03:56:
4e:df:a1:ee:cd:b3:c1:7e:7b:1a:ee:9f:8a:93:85:
36:71:03:35:33:2a:f4:9e:ae:d6:8c:68:cc:56:25:
a0:98:99:ce:b7:55:77:e7:e4:27:d5:fd:6d:34:6f:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:96:3E:3F:7D:07:27:75:D7:26:08:0C:7F:E2:6C:B5:F1:DF:2D:87
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ac14c4d2-07bb-49ba-a66a-ae8a16f112be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b3:35:56:28:24:ce:b4:25:3e:8f:2c:9e:71:0b:72:f3:fc:
e7:95:77:25:97:50:73:f1:4d:1a:bd:15:5a:10:9b:10:ab:a0:
23:ce:ca:1f:5c:8d:d4:9d:45:c5:8c:af:65:35:39:f2:98:cd:
8e:39:be:2e:94:d2:36:b6:c6:e0:d9:c9:94:b2:11:dd:24:18:
f7:c1:6b:fb:50:a4:9b:a0:0e:8b:be:30:c8:63:dd:66:7d:6f:
56:ed:62:da:d7:92:ed:2d:87:5e:a0:84:a7:3a:73:92:1a:3e:
4d:cb:f6:2c:c0:1a:84:f1:4a:77:8b:46:1d:6b:e6:2e:75:72:
b4:9f:40:d5:75:b5:12:10:f0:7e:b9:24:19:bf:cd:2b:c8:09:
d9:d5:6c:1a:3e:f6:55:e8:6f:c6:f0:f6:e9:88:2d:fa:03:03:
dc:e1:62:61:1d:23:9a:97:39:2e:26:27:8a:6c:6d:75:6e:e5:
b8:e1:f0:a6:e9:b4:a6:dc:de:23:74:55:9c:9f:5e:97:24:d0:
d5:3f:6c:6c:fe:84:60:d6:8c:dc:8b:f5:14:c0:8d:2a:45:65:
6c:80:0b:79:3d:5a:72:29:36:75:40:3d:bc:7e:1d:80:b5:0e:
2d:48:ed:7f:68:9e:b3:e5:28:b7:f5:51:59:a5:de:e6:01:37:
97:a8:06:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:23:39 2025 by rpki-client