Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/be8d5fb5-8808-4e94-84b1-bfdfed59fe27.roa
File: be8d5fb5-8808-4e94-84b1-bfdfed59fe27.roa (raw, json)
Hash identifier: znpR+lXdLdvb96Q7d5YwbeUK9uPMBnitFQFbpMBTkyk=
Subject key identifier: 6D:A1:58:82:4A:28:E4:AE:7F:AB:AA:E1:CC:9B:99:42:53:AA:EC:90
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2B6A6CB355D83D55A504B9522FB5C9C9B942E5C8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/be8d5fb5-8808-4e94-84b1-bfdfed59fe27.roa
Signing time: Sat 15 Feb 2025 06:13:22 +0000
ROA not before: Sat 15 Feb 2025 06:13:22 +0000
ROA not after: Sat 22 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:6a:6c:b3:55:d8:3d:55:a5:04:b9:52:2f:b5:c9:c9:b9:42:e5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 15 06:13:22 2025 GMT
Not After : Mar 22 23:59:59 2025 GMT
Subject: serialNumber=acb5f2f67f9c0f785c89fa584c83792ab9daab65857bd2e96353dad84095d07f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:34:a2:3a:a0:b1:47:30:2b:90:e0:f7:a9:
2c:81:51:ac:38:8a:15:8f:51:77:50:cb:a3:29:83:
4e:d1:4c:e8:8e:5d:ad:78:35:7d:24:0a:dd:e9:8b:
ff:b4:3a:36:af:01:41:2e:2a:7f:cd:55:65:45:fe:
22:84:2a:26:c3:73:9e:df:5c:68:6a:aa:18:55:cb:
43:24:af:2b:9c:ac:08:21:a8:8f:77:13:2e:02:41:
31:ee:14:a0:2c:39:b2:11:4d:43:4d:af:5a:4d:af:
7a:ae:9e:e7:b7:95:ba:86:17:3e:d4:32:29:f2:4e:
56:6f:5d:41:20:27:a0:6a:92:10:4b:7b:2d:09:2c:
eb:62:7d:41:19:35:8b:4a:28:19:79:e8:1e:d4:c6:
8c:37:1c:ad:61:c7:63:e8:81:22:97:2d:ec:02:26:
e5:99:25:a3:79:7c:ff:be:67:7f:b3:71:6e:d1:95:
54:95:95:48:5f:46:75:2f:d0:a2:ff:b9:cf:1f:ce:
07:eb:aa:a8:26:45:c3:b5:af:b1:05:5c:53:eb:28:
2a:19:0c:f0:92:86:f0:08:5a:78:80:4f:5a:8b:b0:
d9:e8:cd:34:dc:7f:b6:83:e8:ad:dd:78:3b:ab:9b:
59:95:67:82:c8:d6:00:53:b9:07:75:e8:97:c9:5d:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A1:58:82:4A:28:E4:AE:7F:AB:AA:E1:CC:9B:99:42:53:AA:EC:90
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/be8d5fb5-8808-4e94-84b1-bfdfed59fe27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:72:ff:52:72:3d:46:c3:6a:c0:6a:df:bc:cf:ff:1d:1e:e7:
67:b1:e6:52:76:7d:4c:3a:51:41:da:f2:47:6b:e6:17:d4:33:
e9:93:ac:22:83:8a:7f:f6:4b:90:d0:6a:21:a5:3d:9d:49:67:
6a:d0:f9:2c:26:ff:cc:2a:dd:ac:d2:62:9a:c1:e4:55:ba:a6:
ea:26:b4:93:bc:ca:b6:10:e2:a1:ac:a4:9e:28:cd:0b:80:01:
76:35:97:2f:7e:a6:02:a5:e4:9b:62:21:61:92:b5:2e:69:16:
a2:26:c5:dd:e9:cd:f8:fd:e6:dd:8e:e4:cf:9e:e2:b3:da:12:
f1:88:a2:15:49:b8:b8:59:9d:5a:67:e3:72:44:6f:e4:c6:da:
f9:08:de:27:b4:05:02:f6:5b:80:a5:ec:b7:4f:08:a8:fc:24:
04:dd:13:d5:15:3c:47:24:46:7f:21:de:ed:12:cd:87:5d:5c:
0f:23:62:8b:6c:6f:fa:b9:fe:04:96:de:0b:9c:44:ac:6b:a6:
30:1c:d0:ea:89:c3:63:6c:62:b3:e3:f9:a9:ea:79:eb:6a:72:
5b:c8:b9:ad:ee:2d:9d:b4:4b:c8:8d:4b:5f:5e:67:d4:f7:a1:
78:3a:0b:2e:b8:0f:0e:de:bc:5d:1f:f1:a3:7b:4e:b8:32:74:
20:00:1f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:29:31 2025 by rpki-client