Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bd9d6270-7617-45cd-810c-4209652a8827.roa
File: bd9d6270-7617-45cd-810c-4209652a8827.roa (raw, json)
Hash identifier: a/b04WWALsOtWaPeZAG0/BN3JWvORYOID5afOQisN6U=
Subject key identifier: 55:69:4D:8B:44:FF:CD:39:0B:22:A3:24:0A:E8:C4:EF:C6:CF:2E:23
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5AF8EE167270A208F9C1F40BFEF47DFD5E2F3300
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bd9d6270-7617-45cd-810c-4209652a8827.roa
Signing time: Mon 17 Mar 2025 19:03:20 +0000
ROA not before: Mon 17 Mar 2025 19:03:20 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f8:ee:16:72:70:a2:08:f9:c1:f4:0b:fe:f4:7d:fd:5e:2f:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 17 19:03:20 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: serialNumber=6732c3d3bf6ee012c70c49debf5269cae39586668801a48befa00508c467e0e7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:60:18:f9:e3:d0:84:d5:97:8e:97:cd:37:
72:d1:88:20:79:6b:90:a6:36:54:80:98:bc:72:cf:
82:f2:41:30:8f:a2:64:76:5f:52:5d:ba:2f:37:ed:
5e:94:bb:91:b3:4b:0c:65:cb:75:30:e2:82:ea:97:
0b:7a:dd:57:83:3b:a7:bb:c8:1c:70:3c:fa:ff:07:
d6:30:f1:f9:92:e9:65:f2:1c:d6:68:65:71:6f:65:
ac:04:2a:07:91:20:1a:ed:86:3c:93:ad:09:67:5e:
b9:7b:cc:b0:8c:6b:ab:83:b7:4c:d0:cf:94:47:a3:
8b:49:e8:50:27:12:40:b4:06:40:d6:d5:ef:70:a8:
9e:c1:8d:c5:26:07:fd:f9:5f:90:16:4c:02:21:59:
84:55:cb:5b:a2:95:ff:c3:26:fa:48:f7:b3:83:90:
54:d7:a3:fd:c1:0e:e7:d0:5f:2d:b4:f1:2f:7c:fe:
20:4c:c7:8b:5c:51:6d:29:1e:74:73:43:49:bb:01:
3d:e1:7d:1a:7d:c0:b8:59:f5:af:97:fe:5a:8c:f7:
bd:71:43:56:9c:4a:fb:2a:57:18:b9:47:86:7c:5c:
4e:19:e7:41:99:b0:27:be:05:7f:6d:67:33:87:01:
de:0d:c6:b1:e2:df:c9:32:0e:7c:a6:e7:ed:99:ea:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:69:4D:8B:44:FF:CD:39:0B:22:A3:24:0A:E8:C4:EF:C6:CF:2E:23
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bd9d6270-7617-45cd-810c-4209652a8827.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:6b:1c:fb:e2:64:1b:be:74:aa:f0:56:fd:05:2c:60:b7:0d:
a7:d1:e2:8f:ee:d2:2d:d7:d7:24:1e:7f:32:d7:8c:4c:a7:1b:
88:42:e6:84:3e:c0:d9:22:5e:02:59:a4:4f:73:db:74:07:2e:
1a:e6:a4:59:ef:0b:56:a2:9d:0d:64:29:a2:db:23:49:0e:6d:
b3:a0:d6:97:ca:25:6b:28:73:52:30:a3:1f:e0:2e:ee:1e:93:
8b:87:27:ab:49:ca:b2:61:3d:a9:7e:55:28:2c:3b:35:19:b4:
4c:59:8b:77:02:c9:21:00:b0:a4:3e:ba:92:df:7c:6c:90:82:
01:9e:e0:80:b3:a7:e1:ff:76:05:0e:d3:5c:a4:59:bc:8c:4f:
86:65:34:b8:4e:ef:ad:3b:a4:49:6b:cb:4c:aa:d7:3c:4f:69:
29:91:25:c0:ab:0e:4f:ae:8c:c2:5a:e2:ee:d2:0e:21:1d:5a:
40:3b:c5:a0:aa:2a:df:75:ef:a6:84:99:16:61:dd:02:f1:c5:
b9:bb:ec:e3:27:6c:1a:8c:b5:1e:16:35:35:93:bb:8b:a3:f1:
49:1a:c8:7f:1d:15:e8:bd:0a:f6:13:83:05:45:a8:6a:17:a6:
39:10:55:13:15:53:30:51:0c:74:86:eb:43:1a:a5:5b:f1:dd:
da:18:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:15:51 2025 by rpki-client