Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c9e939b8-136c-4886-a441-31b2e3083a44.roa
File: c9e939b8-136c-4886-a441-31b2e3083a44.roa (raw, json)
Hash identifier: XS6+DkjNFOb+pE3sXaVZppmiwPB9ZoNJlQFD8ke8Cc8=
Subject key identifier: 16:0A:68:46:1D:AE:4C:1D:BD:7F:E6:A8:06:94:90:E4:CB:8F:02:7D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 386228B292522B16BB7B5D82B356F4479DC6EA29
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c9e939b8-136c-4886-a441-31b2e3083a44.roa
Signing time: Sun 03 Nov 2024 00:00:00 +0000
ROA not before: Sun 03 Nov 2024 00:00:00 +0000
ROA not after: Sun 08 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:62:28:b2:92:52:2b:16:bb:7b:5d:82:b3:56:f4:47:9d:c6:ea:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 3 00:00:00 2024 GMT
Not After : Dec 8 23:59:59 2024 GMT
Subject: serialNumber=93c72301836051507fc4b3399afbd65cae5e2d82e5766203aa6e12a45347e67d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:d3:28:8d:c8:68:d1:76:c6:c6:7b:3e:25:
f3:2f:57:a7:d9:01:cc:ee:a3:d9:1e:0d:9d:93:94:
e9:f2:1d:4c:d5:66:e2:a4:4e:33:af:d6:e9:45:93:
b9:8b:0f:2e:fd:87:25:1c:10:e8:01:d2:09:62:0e:
c9:72:11:53:db:b4:90:fc:79:40:a3:67:1d:cb:ce:
6c:e6:2c:dd:58:69:89:6d:f9:ce:9d:39:cf:14:4b:
09:60:be:8e:f8:4d:e6:2a:04:4c:c4:66:d4:76:f8:
bd:38:5f:a2:36:b0:e7:3d:a7:e5:41:5f:b6:42:2b:
32:8d:d1:6b:0c:8b:1c:21:b5:50:b4:f8:33:15:9a:
f2:cd:79:ff:26:f1:39:b8:cc:3e:c0:d8:5e:08:71:
e8:99:f1:71:4d:b4:c8:4b:bb:27:29:79:59:fd:28:
fc:c0:da:5d:29:f8:db:da:61:31:b4:7b:88:ec:99:
e5:c3:cc:46:b1:3a:03:d7:71:16:00:f5:15:58:2d:
28:ea:ea:6d:86:b2:cf:b3:d5:46:42:3d:eb:7c:25:
33:71:7c:b8:e0:72:b8:44:9c:15:7b:be:34:79:84:
18:17:95:46:e9:40:95:94:67:0f:0c:93:78:b6:b8:
f8:ce:92:a4:2a:6b:1c:c4:f3:d0:35:d0:82:b3:1f:
28:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0A:68:46:1D:AE:4C:1D:BD:7F:E6:A8:06:94:90:E4:CB:8F:02:7D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c9e939b8-136c-4886-a441-31b2e3083a44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
99:5c:19:43:0b:99:f6:cb:8f:bf:f8:06:5d:b1:af:d2:10:25:
e5:26:0f:11:5d:3f:c2:0b:22:b8:5f:21:9f:fe:7e:f1:8f:8f:
67:ce:1d:9a:3b:ea:46:de:81:b4:42:5a:a7:86:19:16:1e:3e:
50:44:d6:7a:9c:a6:76:2e:72:c4:5f:f4:b1:6b:45:a5:b2:e6:
14:a7:ea:29:39:5b:95:8c:ab:1b:5e:22:bd:82:aa:c9:dc:12:
70:dd:d5:dd:ab:f6:72:b7:66:da:66:d9:2e:f2:49:d7:d4:76:
5c:7f:12:76:b7:71:d9:4e:ba:7f:c2:f9:54:b7:20:64:49:bc:
74:cf:21:d6:bb:91:5b:c4:a9:1a:0f:fd:09:88:fd:11:3a:ae:
47:fb:2f:50:a4:a6:9f:c5:3c:2a:87:11:81:aa:9d:42:8e:e0:
0e:f6:ad:57:e1:87:32:76:87:dd:db:ff:a3:71:b9:01:9b:b1:
10:03:29:85:4e:5f:ef:64:6c:4c:ae:1c:3d:40:c7:af:6b:0f:
07:4d:c4:68:f4:50:0a:57:e5:bf:95:bc:41:2c:70:19:ae:a4:
bc:98:4b:d9:06:50:28:10:87:23:53:34:4a:36:f9:70:38:63:
ca:0e:55:78:8e:78:26:6f:be:c4:45:26:e0:a6:47:14:14:6f:
6a:57:7a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:06:14 2025 by rpki-client