Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/adafb948-dd15-4d8a-97b3-742476160c1b.roa
File: adafb948-dd15-4d8a-97b3-742476160c1b.roa (raw, json)
Hash identifier: 234olXHWE+wWQDWmYs9k6uYolfqC3OaIexhUNRhKbfU=
Subject key identifier: 0C:44:5B:DD:81:07:EF:AD:1B:98:99:15:D0:B9:3A:43:37:84:32:DC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 76D6975C7C0F0FF971C672F92E89A6EAAFCBA6EF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/adafb948-dd15-4d8a-97b3-742476160c1b.roa
Signing time: Sun 17 Mar 2024 00:00:00 +0000
ROA not before: Sun 17 Mar 2024 00:00:00 +0000
ROA not after: Sun 21 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d6:97:5c:7c:0f:0f:f9:71:c6:72:f9:2e:89:a6:ea:af:cb:a6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 17 00:00:00 2024 GMT
Not After : Apr 21 23:59:59 2024 GMT
Subject: serialNumber=a910355b85aaf6a8bd237c76d06629d544aaf3c851a816158e51c90ea1a8d6c3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:d3:9d:ca:24:f2:d4:3a:b7:26:3b:da:f6:
e3:27:ed:a5:05:1c:5d:57:49:6b:0c:81:9c:14:3c:
b3:45:47:e1:fb:a5:99:a2:9c:81:b5:7e:43:3f:08:
e9:18:40:4f:58:9f:b7:7f:c6:ab:7b:4c:f4:43:29:
64:a3:b7:c9:1b:32:77:61:a5:49:74:0a:69:17:ed:
dc:a6:57:9c:da:a8:64:e6:bf:ff:93:4f:fc:74:71:
2e:1f:90:6f:71:c4:b6:85:69:f7:96:50:3c:5f:38:
47:a5:8a:08:e3:6c:bf:8b:39:0d:19:73:bc:e5:08:
87:60:3b:73:05:0c:a0:4d:08:81:87:7e:58:10:8b:
c6:0d:05:d6:89:c0:dc:d2:cd:44:d0:3d:f1:b3:19:
7d:35:8c:eb:72:ee:98:f3:95:d9:2a:a2:ae:3e:24:
74:e6:99:31:38:01:6e:68:68:0b:28:cb:72:de:c4:
d6:40:88:39:27:ad:e2:d0:a9:6d:a4:d3:aa:78:4a:
c8:44:df:7d:a7:ee:9d:34:40:b9:36:e5:6d:87:b2:
a2:2f:20:2e:b5:99:11:1e:7d:85:e7:d1:42:80:6a:
ff:dc:a9:fc:07:57:3f:44:6c:78:97:55:08:3e:b8:
47:33:12:0a:00:50:5d:48:36:05:8b:eb:92:85:a0:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:44:5B:DD:81:07:EF:AD:1B:98:99:15:D0:B9:3A:43:37:84:32:DC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/adafb948-dd15-4d8a-97b3-742476160c1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f8:1d:73:b4:66:be:0e:a5:76:1d:70:82:f0:4a:a5:ce:d6:
32:a1:3c:70:64:6c:e6:35:06:82:a5:4b:2d:c1:bc:53:51:78:
9c:cc:9b:3f:1e:7f:ae:77:6b:62:f5:17:0b:7b:e3:8d:61:b2:
1e:2a:38:06:cb:3f:73:eb:4e:de:16:7d:b7:51:50:44:8d:77:
11:45:9f:bb:35:31:b5:df:2e:c8:89:33:96:9e:33:9e:1b:ef:
c7:73:bb:d0:53:6e:a9:d8:da:6a:bc:8f:d9:48:6e:ed:53:51:
38:12:13:e8:f2:bf:a2:97:03:18:3b:84:87:28:88:3f:50:8b:
8d:64:99:09:71:ac:20:20:be:a3:42:cf:cf:d5:71:1b:07:58:
5b:61:73:c2:88:e5:6c:c8:c8:9b:14:ad:ea:a2:70:3d:6e:c6:
dc:24:81:6a:e4:40:b0:fd:5b:ef:22:4a:6d:cf:8b:fd:0a:2a:
cb:95:24:58:ba:20:0b:37:96:5f:f0:3f:28:e8:17:7c:44:55:
84:c3:38:d8:72:59:80:a1:52:2b:65:3c:a0:e3:c0:ad:6d:1f:
8b:89:63:5b:74:2b:29:8a:25:97:49:73:1b:14:20:0a:ab:c9:
40:8a:f3:1c:48:6d:4d:a6:5d:42:68:c6:bc:02:8f:44:9e:08:
00:b9:2a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:05:18 2025 by rpki-client