Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/afb518f7-f63d-41f2-93e6-e53f30aa9ce4.roa
File: afb518f7-f63d-41f2-93e6-e53f30aa9ce4.roa (raw, json)
Hash identifier: 9pIDbXrADmZiitt/e8rJ+n5xn5t33keKP6Uzfg+ciF8=
Subject key identifier: 37:59:23:D8:5D:9F:5E:8F:DC:65:15:C2:CA:23:FE:3C:BA:DA:6A:1F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 538275F1AB6BD472C67A55BA26D447E28B37C3D2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/afb518f7-f63d-41f2-93e6-e53f30aa9ce4.roa
Signing time: Mon 10 Jun 2024 00:00:00 +0000
ROA not before: Mon 10 Jun 2024 00:00:00 +0000
ROA not after: Mon 15 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:82:75:f1:ab:6b:d4:72:c6:7a:55:ba:26:d4:47:e2:8b:37:c3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 10 00:00:00 2024 GMT
Not After : Jul 15 23:59:59 2024 GMT
Subject: serialNumber=bc0d65c962816fc6b8e24c8b6594ea4b0fd7c750d07615a61e67ed06b65fc9d8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:1a:8e:fe:67:7b:5f:80:4e:68:54:f2:76:
09:c2:a8:d6:aa:3b:5d:34:13:b6:e2:2e:03:49:4f:
b4:bd:5c:3d:c4:c6:fc:d7:9c:af:5b:67:81:32:f1:
cd:12:7f:39:4f:a3:79:ac:c2:0a:13:d9:b5:64:47:
64:98:94:38:d2:65:1d:9c:7c:4a:06:26:e7:ae:c4:
fa:41:47:b3:11:aa:81:1b:eb:82:36:ae:d2:23:b8:
a8:96:da:26:89:7c:0e:b7:bd:09:9e:e8:76:c3:85:
81:f7:3a:2d:2d:f5:47:2f:92:2c:d9:f6:52:20:13:
35:da:67:d5:22:1e:3d:cf:ed:1b:b0:d7:e8:7f:e8:
1b:4f:66:cf:25:da:3f:2b:8e:a3:4a:dc:9c:44:f7:
e5:42:ed:a6:f8:ab:65:48:b3:fa:02:49:32:78:e7:
72:00:32:3b:cf:45:6b:ce:4f:aa:aa:9c:12:71:97:
32:78:38:cd:03:c3:34:b3:35:a2:4c:d7:42:95:6e:
90:36:cb:8c:9b:f8:30:5f:a3:f8:83:c5:37:15:b9:
46:1e:9b:9d:3b:e0:e2:dd:35:6d:06:b2:ac:c5:41:
50:de:be:47:03:f0:8f:8a:6f:a6:5a:1a:bf:4d:ff:
82:96:29:a6:d5:a6:dc:4c:d4:b9:21:f9:96:bb:16:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:59:23:D8:5D:9F:5E:8F:DC:65:15:C2:CA:23:FE:3C:BA:DA:6A:1F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/afb518f7-f63d-41f2-93e6-e53f30aa9ce4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:77:6a:dc:6c:d0:16:47:cc:c2:ce:08:83:6e:34:0f:dd:70:
62:ea:d8:89:27:7f:e1:80:2b:a5:be:86:35:88:f1:e4:19:ae:
f5:4d:af:d3:f9:86:d0:76:c7:c1:41:22:29:05:5f:97:01:19:
62:56:a4:a7:7e:6c:03:87:db:83:71:1e:40:74:6a:7b:21:ca:
e2:b6:9f:4b:a0:04:11:b3:39:b7:d2:f1:3d:e4:42:ca:fa:9a:
f3:7f:55:56:20:b3:b7:70:38:d6:20:a7:c2:62:8c:4d:c8:f9:
99:17:c2:73:79:be:7d:24:53:a3:cc:de:32:c3:43:dd:76:24:
f0:2f:e5:76:db:c6:e2:4b:82:85:ca:12:83:5f:ec:96:5f:b0:
86:d6:80:f7:a3:ae:27:82:71:bf:bc:d2:e0:e1:4b:f1:db:66:
27:8e:d1:06:9b:4b:a4:5d:f7:1d:ea:8c:fe:75:30:c0:28:77:
e5:91:7c:84:2e:84:8f:70:88:ed:d5:f2:24:f4:18:da:0a:cc:
22:b0:66:0a:e8:de:04:d4:3d:3b:b9:99:53:15:0b:f5:7c:8d:
7d:da:a1:34:32:64:aa:eb:1b:d1:2d:20:84:86:bc:18:bf:e2:
fc:9c:c9:c3:70:34:e6:2e:44:a6:ae:e3:9e:5e:40:3a:80:3e:
50:0b:26:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:44:35 2025 by rpki-client