Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc4018e1-dd6a-4661-bca7-e46b2337689e.roa
File: cc4018e1-dd6a-4661-bca7-e46b2337689e.roa (raw, json)
Hash identifier: ED6yE8vF2EZTO80A2ioS5UGIrzmq2p2aiy549kSWbx4=
Subject key identifier: 3D:8F:1B:6C:BE:BE:28:19:8D:F6:33:12:6B:46:22:7F:0A:C4:E4:8C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 61DED91C7A80CC1959D03BF8CBC7DB138275D028
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc4018e1-dd6a-4661-bca7-e46b2337689e.roa
Signing time: Mon 03 Jun 2024 00:00:00 +0000
ROA not before: Mon 03 Jun 2024 00:00:00 +0000
ROA not after: Mon 08 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:de:d9:1c:7a:80:cc:19:59:d0:3b:f8:cb:c7:db:13:82:75:d0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 3 00:00:00 2024 GMT
Not After : Jul 8 23:59:59 2024 GMT
Subject: serialNumber=a747a2a0a1be3c778f9972020d0c54455af269e9f43413827640e651d573dd55, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:c7:fc:80:ba:48:06:06:a0:b5:96:96:2c:
bd:a7:6b:08:e6:53:90:ea:63:39:32:ed:15:68:86:
8a:d5:65:36:ea:6d:62:13:3a:48:01:8d:04:45:ce:
e3:d6:c8:08:7f:c7:09:8a:97:c0:21:11:e7:7c:cb:
98:90:62:3d:99:47:80:70:ee:7a:a4:ff:65:30:db:
88:34:cb:d2:3b:8f:8e:e8:db:4c:06:c6:46:a4:9f:
14:70:1a:6e:24:92:d7:0f:fc:46:be:d1:4c:f2:ea:
db:7d:b3:59:b9:35:95:84:55:59:37:ba:59:72:59:
70:28:19:53:ac:b1:75:f0:4a:b8:8e:dd:3d:4a:a9:
34:b3:75:7c:d7:28:78:7d:32:3b:d9:80:43:b5:0a:
f5:a5:e6:48:c0:e5:68:d2:07:8b:07:30:a0:71:73:
3c:76:d3:c8:97:5b:36:fb:cf:4b:3a:a5:44:34:dc:
b9:f3:17:25:8c:ee:e7:26:21:4e:ba:b6:35:e3:04:
a1:c1:b3:8d:6e:2b:7f:f7:f0:db:be:98:16:2a:ab:
68:02:4c:9e:70:c9:2e:62:a0:01:71:4a:2c:9a:7d:
ff:4f:1d:a8:fb:03:c5:7b:ae:db:f4:e7:30:71:71:
7e:2a:31:b9:5b:09:a1:21:c1:a4:78:11:c0:0e:5e:
8c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8F:1B:6C:BE:BE:28:19:8D:F6:33:12:6B:46:22:7F:0A:C4:E4:8C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc4018e1-dd6a-4661-bca7-e46b2337689e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:6f:05:ce:5c:07:29:55:f8:73:a6:d1:78:c3:e2:ca:92:4c:
58:ff:81:3d:68:08:b6:49:36:ed:bb:68:92:28:6a:78:4c:e8:
6d:1b:75:40:61:c4:b9:29:1b:5e:a8:b5:f1:42:34:57:79:16:
5e:f6:72:1a:72:df:bc:dd:bf:fc:5b:e5:90:90:02:26:48:bc:
7f:63:b3:2d:f6:d0:de:c2:3a:0f:b3:69:de:23:e2:cb:04:98:
7e:0f:4f:c5:eb:0d:28:81:59:b3:8f:3f:3d:8f:c0:67:16:03:
fe:65:d6:20:9f:31:01:e8:db:62:e3:9e:3f:b9:56:08:e5:39:
7f:42:fd:0b:d9:80:9f:2a:75:34:c6:a5:e2:ff:37:d1:0a:75:
a9:ac:33:9f:cd:64:25:96:42:d0:33:96:98:ab:da:02:88:d5:
34:7d:58:05:bd:aa:4a:6e:b2:dc:d1:eb:49:ab:30:38:fc:bb:
e5:2f:b2:68:80:bc:47:22:e8:39:dc:94:29:87:73:bf:fd:9e:
59:85:aa:77:99:5e:34:fc:a9:b0:68:7a:5d:75:88:83:3a:dd:
7e:78:bf:de:a3:3b:09:a5:0c:d7:72:48:cb:f6:44:53:db:e4:
58:52:8f:78:74:62:eb:85:3f:0a:a0:4c:a8:9e:31:57:9f:04:
95:d5:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:50:29 2025 by rpki-client