Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/acc8d27a-5bcc-42be-afc1-168686cfac53.roa
File: acc8d27a-5bcc-42be-afc1-168686cfac53.roa (raw, json)
Hash identifier: xTRwB0wUZU+UP+hb13U0uiV4+i61dDnTtqINYMSBR/c=
Subject key identifier: D9:5E:AC:8F:8E:2D:83:AD:BB:0C:AF:18:C8:85:19:12:A8:8C:5C:23
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5D8934957AB6FDB37910EAB2B6046C6EFAF71183
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/acc8d27a-5bcc-42be-afc1-168686cfac53.roa
Signing time: Sun 19 Jan 2025 00:00:00 +0000
ROA not before: Sun 19 Jan 2025 00:00:00 +0000
ROA not after: Sun 23 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:89:34:95:7a:b6:fd:b3:79:10:ea:b2:b6:04:6c:6e:fa:f7:11:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 19 00:00:00 2025 GMT
Not After : Feb 23 23:59:59 2025 GMT
Subject: serialNumber=1a1986f61288e2b80da1e60e9cf8caee8933f2f8e02576da6cbcca2ef256e083, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:52:64:33:16:0d:5e:cd:92:a0:73:b8:d0:
31:05:31:70:eb:d7:27:c7:08:eb:be:a7:ee:db:4f:
fe:6b:2a:bb:e3:26:96:00:b0:12:df:9e:d3:cc:46:
e2:0f:dc:c5:b6:10:21:f6:21:b2:a8:21:a0:64:0d:
98:7c:ed:a5:08:74:9e:5b:3c:5a:37:25:83:58:bd:
36:3d:c0:6c:80:0f:5f:da:ad:51:b7:ec:e9:ff:3f:
1a:93:79:56:94:9c:1b:a1:86:ab:52:69:c1:27:6a:
25:0a:4d:d0:e6:58:cd:5e:8f:3e:7f:f0:99:d4:c0:
77:74:c0:c3:d1:a1:1c:7e:56:b9:9d:e7:92:e5:37:
9a:a1:d3:4a:59:1c:bc:5e:e1:07:3f:7f:26:1c:c4:
66:a4:ac:d9:ba:c8:30:a5:1d:c8:92:09:19:fe:1b:
4b:61:91:f1:80:f6:93:b0:e8:c5:92:09:b7:74:db:
d7:4b:79:b9:a0:d6:f3:0e:60:ee:a8:4f:8b:f0:15:
f1:ad:8d:e4:17:0f:bc:e8:72:c0:db:2e:6c:41:a3:
cc:b4:fa:8e:7f:cf:c1:f4:c6:67:00:8f:b1:61:ac:
89:b2:7a:b4:d6:fd:d9:ac:b9:68:48:f8:ac:f0:b8:
5b:87:f1:df:4c:71:5e:5a:36:9f:5c:8a:55:46:59:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5E:AC:8F:8E:2D:83:AD:BB:0C:AF:18:C8:85:19:12:A8:8C:5C:23
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/acc8d27a-5bcc-42be-afc1-168686cfac53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d0:ab:56:d7:ec:5f:fb:f9:0b:37:63:c1:35:3c:bf:27:5a:
7a:15:c7:bc:f2:22:94:02:fc:2e:41:b4:cf:1b:b0:e4:b2:45:
3c:cb:17:15:6d:44:25:77:f3:a8:e8:93:56:99:0a:13:b8:2c:
a2:49:3b:d3:77:f4:d5:53:ed:cb:9f:cc:a3:4a:61:28:12:74:
8e:e9:b9:ad:2a:27:49:12:bd:09:2e:83:d3:66:11:a4:af:79:
23:26:b8:30:8d:71:ef:53:46:01:17:2b:c9:a1:99:f1:4e:31:
8c:68:a7:2b:00:82:f6:fb:ff:a5:04:db:4d:a8:19:e1:51:7b:
e1:ac:09:37:87:bd:4e:96:0c:bf:54:e3:f2:23:80:3b:b7:16:
47:03:3a:95:db:de:d2:c0:15:24:be:54:cb:0f:0f:62:3d:75:
a1:80:59:00:23:b0:ed:b4:38:fa:c7:94:17:0f:f6:4c:27:fe:
f4:98:bd:3f:66:a0:f2:31:50:4c:67:8b:ea:53:5a:b6:85:7d:
59:1f:1b:00:f1:b9:a6:95:54:b9:72:fd:1e:7e:5b:25:d3:3f:
42:08:38:0f:b9:f3:98:36:89:dc:56:7c:e7:a7:1a:4a:60:7e:
da:aa:60:73:bf:3b:a4:70:23:58:93:4c:0e:92:93:f5:d8:0c:
8e:dc:85:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:01:49 2025 by rpki-client