Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b7f32750-08e4-4b1c-be7c-9a090c1efa0b.roa
File: b7f32750-08e4-4b1c-be7c-9a090c1efa0b.roa (raw, json)
Hash identifier: PKoerhfOGC0kK4C+We7gflBdZbXS13sZm+xkLQs5jak=
Subject key identifier: E6:DF:F8:BB:66:D1:60:86:BD:F5:A9:98:A1:D8:5E:03:CC:C3:8C:35
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 68079C910FAC6D33247C63359212D1C4357E7A3D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b7f32750-08e4-4b1c-be7c-9a090c1efa0b.roa
Signing time: Mon 28 Oct 2024 00:00:00 +0000
ROA not before: Mon 28 Oct 2024 00:00:00 +0000
ROA not after: Mon 02 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:07:9c:91:0f:ac:6d:33:24:7c:63:35:92:12:d1:c4:35:7e:7a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 28 00:00:00 2024 GMT
Not After : Dec 2 23:59:59 2024 GMT
Subject: serialNumber=4e9817591c090c3b4c693630ab1f40e55324090ce6b6317c00e9fe9593cca1ee, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:61:d1:38:8f:55:d2:a8:80:e4:26:24:df:
2d:00:4a:73:d9:98:48:66:8b:d4:d0:9d:aa:6d:fa:
31:45:8f:63:81:89:9b:9d:b5:ec:c4:e2:c9:e8:9d:
a4:58:90:04:8f:ed:45:4f:68:c5:7b:7f:e4:8c:62:
a5:0d:d9:12:46:d2:98:1f:9a:46:55:46:06:23:fb:
fc:4f:22:2f:d3:f4:8e:0b:e2:bc:88:8a:4c:05:d0:
f9:17:53:4f:dc:ae:eb:c0:d8:ff:94:d6:07:a6:7b:
0a:2c:c0:33:ef:6b:78:9a:91:7e:25:1c:97:95:87:
e2:ab:7e:96:36:a6:12:81:64:42:38:10:6d:7a:b1:
95:a1:71:9a:8d:65:03:0a:d4:0f:4f:f3:6b:15:7b:
92:dd:4b:4e:78:e9:4a:52:a1:bc:e3:e9:6d:04:33:
ce:97:87:f8:28:d3:f4:36:e9:28:b5:c2:37:b2:e6:
d9:62:b9:74:12:f0:70:58:60:9e:e3:3d:07:56:db:
da:2a:86:8b:1c:d0:70:a1:98:11:66:cb:31:90:3b:
bf:97:f5:ac:21:5b:bc:2c:23:78:41:7c:67:0e:fc:
45:d9:3d:f2:d0:3c:8b:97:46:79:87:12:e3:7c:d3:
5a:83:99:04:72:ba:55:d6:35:be:03:92:13:48:00:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DF:F8:BB:66:D1:60:86:BD:F5:A9:98:A1:D8:5E:03:CC:C3:8C:35
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b7f32750-08e4-4b1c-be7c-9a090c1efa0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
87:83:31:77:12:f7:9f:d1:c6:a5:45:ad:f0:d8:b6:c3:32:0f:
8f:94:a0:d0:5e:c9:15:bf:f1:76:6b:37:ce:6e:5d:5b:35:5d:
65:a7:25:15:29:e3:05:18:09:b6:a3:1a:b4:10:d9:bf:ca:40:
c1:b6:68:73:3b:57:32:0a:e0:e4:90:53:46:37:87:84:94:fa:
4e:e9:d6:2e:52:d6:ca:2d:7e:65:7f:12:29:6b:a7:ef:db:fe:
4d:35:9e:ce:53:d3:54:1b:d8:69:74:64:74:f0:b5:3b:b2:2f:
23:46:87:49:7f:9f:16:0a:02:ce:f0:e5:6f:1a:54:53:e0:3f:
ef:27:95:ae:dc:3d:47:bd:12:12:2f:07:49:da:53:ce:ee:b4:
c7:8d:28:f1:0a:b5:89:6a:c9:28:6c:7e:76:de:d8:66:d1:a4:
3a:61:89:49:5e:82:b1:fe:6b:03:6d:b5:3e:ef:d1:59:9c:5d:
28:c0:4c:21:e9:76:83:31:f2:4b:be:0f:5d:7d:8d:47:96:e8:
f2:9c:d9:af:2e:97:74:c4:f4:3b:79:da:79:a1:28:7b:69:21:
1e:0a:90:28:96:17:8b:9b:99:5c:f8:8a:2d:6b:c8:dd:73:59:
d7:3b:43:6c:03:ac:85:52:dc:c3:b9:b3:a1:bd:9a:03:3e:9c:
57:56:a6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:13:21 2025 by rpki-client