Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf529155-cb90-4491-be1a-9923228c521d.roa
File: cf529155-cb90-4491-be1a-9923228c521d.roa (raw, json)
Hash identifier: VfOhz5ZXWDkiTg2Avinl531R/GDJ6U78kcvM5Bx3DkU=
Subject key identifier: 0B:94:72:21:A0:35:E4:DE:79:BC:AE:6A:00:A8:2E:60:D2:BB:C5:B2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0DEE5340D39D16AB65C133533109B9D1CB277525
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf529155-cb90-4491-be1a-9923228c521d.roa
Signing time: Fri 12 Jul 2024 00:00:00 +0000
ROA not before: Fri 12 Jul 2024 00:00:00 +0000
ROA not after: Fri 16 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:ee:53:40:d3:9d:16:ab:65:c1:33:53:31:09:b9:d1:cb:27:75:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 12 00:00:00 2024 GMT
Not After : Aug 16 23:59:59 2024 GMT
Subject: serialNumber=e79ead4e3b465303ca91301d6a24b8d1b9aa240973156cf857697c9ddbef0be5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a4:6a:f1:f3:27:5c:b0:84:93:09:01:5f:62:
ed:de:42:f8:d0:e9:1a:36:7c:b8:50:ce:a4:de:02:
b1:72:95:d1:f3:24:f1:e6:65:ca:15:18:d3:b2:50:
55:e4:4d:2d:26:8c:96:c0:81:a0:79:91:05:39:fd:
ec:db:f2:8c:79:ff:cd:ad:17:40:bf:e6:15:5b:0a:
33:8c:32:2b:cc:78:bb:80:43:9e:51:c8:bc:fe:9d:
bb:d7:37:bb:06:09:50:1d:12:cc:c5:82:64:a3:4f:
ec:d2:25:df:74:45:bf:2b:de:58:33:77:43:b3:d9:
de:ee:3b:b4:68:7e:e0:ef:ae:06:fb:eb:ef:45:00:
9c:a4:59:c7:d3:3e:b2:0f:5f:6b:9f:95:87:e5:a3:
c3:65:e2:d0:ad:00:0b:be:ab:68:95:d1:c6:fa:d6:
db:2d:2a:df:36:4b:a7:82:68:5a:38:23:a5:e0:8e:
04:00:7c:bf:29:38:20:49:cd:05:de:73:b0:f4:f4:
0f:53:39:87:6d:eb:f8:03:a6:12:bb:3d:00:35:f4:
cc:07:d8:5b:31:d1:e5:10:35:44:0d:9a:bc:96:c8:
0d:50:67:f1:5a:3d:70:03:8e:c9:4b:32:d2:47:de:
3b:2d:0d:3b:9b:99:56:4c:a8:c8:1d:05:0b:d4:06:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:94:72:21:A0:35:E4:DE:79:BC:AE:6A:00:A8:2E:60:D2:BB:C5:B2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf529155-cb90-4491-be1a-9923228c521d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5d:4f:05:1d:24:90:87:b0:0f:45:dc:61:0a:fa:a1:06:68:
55:cb:74:9c:1e:8e:9a:7a:68:0a:05:a5:42:50:65:dc:70:70:
4f:3a:85:6e:d2:f0:89:d6:d4:d1:70:57:a1:30:72:25:77:57:
79:2d:f8:4d:12:05:a6:05:4f:a0:e1:61:0f:49:49:ed:27:33:
6f:22:c8:7b:e1:be:2d:28:2f:9c:5b:7b:62:53:f9:19:0b:6e:
3f:4e:bd:d7:25:dc:60:fa:7f:6f:4b:15:4a:9b:c5:9c:48:2b:
18:76:ca:d1:62:1e:7c:3f:62:01:a8:61:eb:b3:5f:38:d4:05:
fc:68:52:e3:91:6e:64:07:da:a1:3e:5a:22:41:8d:c4:ce:bd:
18:ce:6d:a3:2e:51:5d:85:e7:9e:c5:04:f2:62:5d:70:6d:84:
c3:49:90:a4:22:1a:d0:01:cb:06:75:4d:03:72:7e:7d:2b:f6:
1c:e1:be:1a:44:f7:0b:86:96:89:5e:a6:9a:5f:1b:70:01:7e:
87:ee:51:d3:ef:29:66:01:7b:f1:59:54:87:a4:de:21:e0:53:
87:54:ec:70:32:d0:ba:9a:3f:3e:77:8c:4a:19:f7:4f:08:39:
d0:ce:50:28:47:e3:be:c1:c4:64:59:78:8a:ac:41:d9:12:bc:
47:7c:c3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:33:25 2025 by rpki-client