Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c43246c9-66ef-4a15-84dc-08e158981868.roa
File: c43246c9-66ef-4a15-84dc-08e158981868.roa (raw, json)
Hash identifier: 8iCvl2y5pyai2rxinkp0qy3MvNVJ5aFeNQl+jix/AVI=
Subject key identifier: 9A:E5:6E:E3:6A:42:9E:E9:5C:B0:74:2A:29:C5:92:DD:0D:B2:F8:92
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0789A3A1635D2F7771FFEFBE2ACF6199FFB19862
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c43246c9-66ef-4a15-84dc-08e158981868.roa
Signing time: Thu 05 Sep 2024 00:00:00 +0000
ROA not before: Thu 05 Sep 2024 00:00:00 +0000
ROA not after: Thu 10 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:89:a3:a1:63:5d:2f:77:71:ff:ef:be:2a:cf:61:99:ff:b1:98:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 5 00:00:00 2024 GMT
Not After : Oct 10 23:59:59 2024 GMT
Subject: serialNumber=272c119285d156dff495d19db91b85fe404f3aeca5639b47ec21ce2e23533447, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:44:5c:0a:62:38:a7:b1:36:a2:0c:e4:c6:
df:93:df:8f:03:06:26:d9:64:0e:a6:bc:ee:59:a6:
34:9d:1c:db:33:45:93:d8:fe:b1:7e:07:ee:28:fe:
29:97:21:c3:9e:ed:11:ec:cd:d5:f7:53:fb:bb:04:
a8:7f:b6:bb:45:f8:46:09:94:2c:22:4d:74:25:d2:
1d:9c:e8:11:42:9a:cd:8e:d7:fa:0b:ba:db:d5:db:
58:9b:b1:00:88:26:69:0c:1d:84:ed:07:5f:55:16:
21:8c:37:ff:ba:09:07:98:d8:2e:35:2d:a8:f6:d3:
dd:f6:17:bc:1a:f1:7d:03:66:e8:b6:b2:88:3f:8a:
11:94:18:9a:f6:2d:95:34:5b:2b:b9:46:a4:15:31:
99:37:e6:f7:c3:43:1f:36:05:ac:b0:2f:ff:8f:1c:
1e:d5:71:b7:e5:22:98:28:28:75:75:2c:b5:68:41:
4f:ea:a1:25:6b:e8:4c:c6:91:24:e9:9c:d5:d8:41:
7d:a2:61:54:6d:60:72:e0:be:03:ef:2e:da:11:f4:
5e:ce:5d:c6:1a:8d:83:95:32:f6:d2:0e:17:5d:f7:
b2:00:03:55:cc:f0:cb:e6:50:ad:c8:82:2f:c1:1e:
7b:be:38:60:55:7a:d8:2f:86:b8:b0:a0:da:92:8c:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E5:6E:E3:6A:42:9E:E9:5C:B0:74:2A:29:C5:92:DD:0D:B2:F8:92
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c43246c9-66ef-4a15-84dc-08e158981868.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e5:79:66:95:fd:af:a0:67:41:d6:21:32:0f:d3:27:69:f0:
00:1a:80:10:9e:1e:71:1f:87:0a:24:39:db:33:93:74:b4:d7:
ca:b6:11:c6:93:b9:a0:5e:54:12:38:19:41:bc:d9:a0:c7:0d:
69:01:d0:ea:38:6d:dc:e9:17:82:72:04:9e:89:59:d4:6a:b3:
0a:83:99:f7:11:ac:e0:43:b7:e1:be:95:d1:13:bf:a3:03:f4:
dc:43:c3:31:90:c2:c7:16:a4:4a:13:16:9c:0a:48:ff:44:e6:
38:58:b4:23:88:13:d8:21:9c:92:c9:8b:e0:0d:d0:ef:5a:cd:
e7:c2:d9:f4:d7:71:5f:5c:1d:3f:aa:4a:3b:ea:5e:c5:a5:5d:
c6:3d:a1:06:eb:a4:75:37:a7:21:cb:af:3a:8a:2e:50:31:e5:
bf:4c:4f:e9:d6:46:12:ef:06:59:64:8e:39:f5:4b:8a:c8:2c:
35:68:26:6f:3e:73:37:b0:22:e3:88:b7:e3:7c:66:50:ce:90:
0c:db:4b:a5:88:75:8e:bc:bb:82:76:9b:17:71:2d:7f:39:15:
77:61:b7:2a:2d:ee:e7:1d:e7:76:ea:19:ac:5c:09:94:af:f5:
6a:ce:9c:50:37:7c:4d:80:2d:c8:37:7e:2c:e5:b0:70:c8:17:
ba:c4:3b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:43 2025 by rpki-client