Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c181af72-63dd-4427-9a91-fbf0e57587df.roa
File: c181af72-63dd-4427-9a91-fbf0e57587df.roa (raw, json)
Hash identifier: DQIbhZt+Lwuj3D53/RBPk40tzkx4iesjQVRzQywXAns=
Subject key identifier: FA:60:04:9A:9F:6E:56:87:68:9C:CF:EC:14:8F:1D:15:28:D6:FA:94
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 33FB40C5A4B309ED50DEB58698277FEBE3611F07
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c181af72-63dd-4427-9a91-fbf0e57587df.roa
Signing time: Mon 23 Sep 2024 00:00:00 +0000
ROA not before: Mon 23 Sep 2024 00:00:00 +0000
ROA not after: Mon 28 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:fb:40:c5:a4:b3:09:ed:50:de:b5:86:98:27:7f:eb:e3:61:1f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 23 00:00:00 2024 GMT
Not After : Oct 28 23:59:59 2024 GMT
Subject: serialNumber=eccdba0cd2c1f43e5375d968e9ce02906efaa6b8a801560637c4ccaeb46506d6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:21:11:b2:ab:e0:8e:c1:ac:4b:23:d3:f2:
79:72:e1:6d:aa:df:23:99:cf:60:11:08:ef:43:32:
5c:b9:8e:94:e3:c4:5c:5e:d6:e5:15:99:96:6b:9d:
41:27:02:ae:53:f1:cb:d6:b6:52:f5:ea:1f:68:71:
9b:d1:1e:35:b6:4f:4b:db:2e:ba:38:cb:24:b9:d2:
ef:45:43:c7:60:a2:16:fa:cd:a4:cb:7d:bf:c3:7d:
ad:75:0e:1e:0d:4c:86:7a:d9:71:d8:4a:e2:fe:14:
9f:04:a8:25:17:49:e9:17:59:0a:82:cd:e7:75:16:
b7:2e:bf:d5:bc:81:d2:88:66:c0:28:91:dc:3b:e1:
7b:8b:5f:5b:3b:27:fc:d9:b2:64:37:03:91:54:5f:
0c:53:b6:0e:9e:68:8b:aa:eb:80:2d:2f:34:c4:f5:
fe:a4:6f:90:3a:9a:53:18:9b:0a:da:c1:0c:4c:c6:
23:61:35:a1:a7:07:13:93:5f:8b:09:1d:3a:9b:90:
23:fd:29:5f:71:e9:83:56:eb:3b:25:a5:df:3e:a8:
27:20:18:38:51:7d:5a:a6:8f:92:d2:f6:c8:d0:f2:
21:f6:40:05:bd:5a:c0:36:f3:a5:4b:a2:df:47:51:
1e:1e:2f:85:02:e2:9b:b7:52:be:f1:1c:ac:d5:22:
db:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:60:04:9A:9F:6E:56:87:68:9C:CF:EC:14:8F:1D:15:28:D6:FA:94
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c181af72-63dd-4427-9a91-fbf0e57587df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f6:40:fb:30:02:99:fb:05:3c:8c:1c:f9:68:91:fa:d9:03:
49:41:be:ed:90:8e:da:6d:60:65:4f:ce:c7:c2:44:79:c4:41:
3a:38:14:b7:1f:e5:bc:b5:5a:93:55:25:c4:ef:d0:a1:63:bb:
2d:90:fa:9e:e9:40:bc:20:88:e6:ef:44:62:af:f4:55:69:d5:
1d:1a:a7:b9:44:5f:da:c9:d7:23:de:ef:07:6e:84:5e:f6:b8:
26:e2:70:75:b5:32:b8:86:46:e8:29:3a:90:3a:8c:12:2d:a7:
c1:5b:5e:f4:df:33:de:4e:c4:0c:fa:39:93:82:b0:49:61:6c:
9e:db:e8:6e:70:94:60:82:44:4a:f6:fa:3e:4d:da:b0:b6:6f:
8e:95:1f:21:2e:a2:22:ad:3c:b9:1b:b6:1f:70:20:88:b0:6b:
53:c7:6b:4a:00:b6:53:5f:c2:d4:4a:38:2b:12:2b:f6:d9:8c:
a9:0e:ea:97:55:eb:b4:9f:a0:ee:15:9b:9c:c9:22:7a:57:18:
50:e5:84:cc:e9:58:9d:54:55:c9:43:8c:2f:c5:ff:48:6f:9f:
d2:94:b4:48:97:73:84:82:b9:37:d2:6b:fd:46:0c:97:1d:22:
28:0e:3a:50:c5:e9:b3:37:16:45:d8:1e:e0:8a:fe:59:77:d0:
4a:a4:6e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:09:26 2025 by rpki-client