Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b7d6421f-d9af-4a95-be75-88fefd49f827.roa
File: b7d6421f-d9af-4a95-be75-88fefd49f827.roa (raw, json)
Hash identifier: m/DIBY09/QBvFpHxu+vd0QRm/APVIjq44l7ceb+ISeE=
Subject key identifier: C0:02:55:20:86:33:2E:A2:79:A2:8C:6F:4D:E0:4B:0B:D4:F6:4C:0E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 071B2D643E1A860809B9B10F35F424280804A82F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b7d6421f-d9af-4a95-be75-88fefd49f827.roa
Signing time: Thu 06 Jun 2024 00:00:00 +0000
ROA not before: Thu 06 Jun 2024 00:00:00 +0000
ROA not after: Thu 11 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:1b:2d:64:3e:1a:86:08:09:b9:b1:0f:35:f4:24:28:08:04:a8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 6 00:00:00 2024 GMT
Not After : Jul 11 23:59:59 2024 GMT
Subject: serialNumber=9b322a6c5fdcd4395c00a5aae21e550afc7dc472b087e623168cdc63e65604a7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:53:e5:7e:18:f0:88:8b:43:87:95:4f:63:
ad:be:18:56:90:65:cc:39:19:7f:dd:3e:64:e9:28:
a2:ea:b8:7e:0a:ed:98:72:c7:16:7c:15:fe:e2:f0:
10:08:8d:18:c2:1b:cd:41:6d:b1:6c:f0:03:dd:c5:
da:9f:4d:5c:f9:54:61:54:28:8a:cd:00:45:51:c7:
76:a3:fa:a3:a7:79:e1:28:e2:32:dd:78:9f:c5:18:
31:d1:5e:ee:ce:20:fb:4c:16:6f:89:c5:89:f2:95:
14:bb:85:2b:84:46:2f:ac:30:62:bc:7d:f2:cc:02:
cb:4f:2f:71:fc:df:ea:82:29:38:be:5b:e6:0b:80:
3d:0c:72:fc:ec:b7:80:41:e1:68:6a:02:4b:82:bb:
ef:f5:1d:e6:01:87:d4:9e:00:b4:d0:81:5c:6f:fa:
68:c3:48:c5:b9:a5:96:83:a2:69:0d:91:78:21:63:
a8:5f:cf:57:bf:84:2d:74:ef:a2:dc:07:cb:eb:d2:
5e:a8:93:c4:a3:c6:60:0f:e6:cf:be:b5:f3:74:15:
be:7c:2e:cd:72:30:e4:d6:0c:0e:de:cc:67:45:ce:
83:9b:a1:4e:03:07:bb:7e:2b:84:e7:95:a8:e2:fd:
e4:76:f0:f6:e1:a6:19:36:36:f6:83:8f:48:6a:f8:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:02:55:20:86:33:2E:A2:79:A2:8C:6F:4D:E0:4B:0B:D4:F6:4C:0E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b7d6421f-d9af-4a95-be75-88fefd49f827.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:82:c9:f2:a2:9e:b8:ae:77:0a:96:07:a9:b0:ff:68:12:21:
a5:26:07:e1:1e:2e:43:32:cb:db:8b:c5:f4:21:a3:e0:ce:f5:
f0:ce:a9:23:99:c0:2e:ed:92:71:d0:47:bb:73:21:cb:4f:0c:
3c:7e:f2:41:9d:b0:78:4a:4e:7b:5e:8c:45:9a:b1:28:81:8f:
b4:38:b9:f6:17:46:39:89:fa:fd:2f:09:15:dc:af:1d:fc:02:
fd:83:97:e4:7f:e7:19:05:20:36:26:2a:87:07:3d:c0:ab:44:
f9:9c:43:f4:a0:73:63:2e:30:64:9b:eb:0b:31:ba:7a:07:cc:
f9:a9:05:2e:f4:d9:2d:c8:7f:32:ef:af:2e:b7:c8:d9:c2:bd:
a4:d5:87:d5:0a:3d:39:8d:94:16:09:c0:5e:19:86:e5:fa:2d:
d6:67:ce:6f:ea:84:60:09:82:74:2d:6b:93:ce:6d:28:7e:6f:
77:c6:74:c1:c2:06:05:55:b5:3d:10:32:1d:fd:18:e3:03:e7:
49:44:86:5f:20:d8:8c:84:6c:b2:b9:9b:ea:cf:4e:dd:1b:66:
e7:61:3a:38:d7:51:23:56:1c:72:88:38:26:d5:c6:eb:8c:a7:
4d:98:67:f4:12:4b:89:39:00:29:e2:d4:68:8a:56:03:0e:86:
48:16:bf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:35:48 2025 by rpki-client