Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf9396e7-6cef-4b6d-9be4-bf62478ca44b.roa
File: cf9396e7-6cef-4b6d-9be4-bf62478ca44b.roa (raw, json)
Hash identifier: h3R+E0x3+o15zhrAD0VOuF+VZdkVokk/J+CbA9//zEk=
Subject key identifier: EC:C6:57:9D:14:3B:34:7F:2D:A5:94:B9:AA:FE:AC:E5:B0:B7:FB:72
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7049B6843307C785E1F22B421EBAF020082B9E94
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf9396e7-6cef-4b6d-9be4-bf62478ca44b.roa
Signing time: Tue 25 Feb 2025 01:08:20 +0000
ROA not before: Tue 25 Feb 2025 01:08:20 +0000
ROA not after: Tue 01 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:49:b6:84:33:07:c7:85:e1:f2:2b:42:1e:ba:f0:20:08:2b:9e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 25 01:08:20 2025 GMT
Not After : Apr 1 23:59:59 2025 GMT
Subject: serialNumber=1747114a81e2988ba53f2f23b0f32bc81eb625a2765da6d1a0418e71f7d9d3ea, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bd:14:c0:74:d3:93:ce:15:c4:1e:88:16:52:
cc:52:38:58:00:bf:fa:51:f1:5d:cc:e7:af:47:d7:
df:e3:94:56:6d:b8:d3:97:58:4f:05:c6:5c:40:fa:
bf:10:1c:f8:13:48:31:b4:e2:e8:a1:ef:44:ef:93:
b3:75:bb:45:0f:d8:04:fe:df:9e:68:a1:37:df:41:
7d:52:c5:b4:77:be:d8:ac:f0:b3:89:17:a1:59:a7:
0f:ac:33:4e:00:ac:e0:5a:5c:ea:ba:63:4e:fa:73:
d3:67:b9:f7:bc:83:66:ea:a4:13:79:0a:14:88:aa:
3b:e8:93:b5:21:47:83:33:eb:bc:e3:3a:88:9d:b2:
2d:6c:63:c6:02:df:d0:1b:2d:c1:68:c2:de:3c:fe:
b4:1a:69:99:33:2b:bf:57:d1:d0:e0:d2:53:9d:53:
12:3b:3f:5e:51:6b:f2:af:ed:fd:16:b3:eb:38:8e:
94:9a:89:f7:98:63:0b:f0:4e:c7:6c:02:2c:45:6f:
fa:cb:57:52:f3:92:10:4c:43:38:4c:af:46:03:39:
5c:1b:45:f1:51:13:e7:6c:3f:95:46:95:4d:ef:61:
86:da:4f:3f:b2:da:e1:45:7c:ac:9a:33:6b:9c:9d:
25:3d:26:46:4c:82:fb:18:d1:fb:f7:75:13:a8:d1:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C6:57:9D:14:3B:34:7F:2D:A5:94:B9:AA:FE:AC:E5:B0:B7:FB:72
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf9396e7-6cef-4b6d-9be4-bf62478ca44b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a6:bc:c3:45:c1:dc:58:26:76:cc:f3:0a:d0:f1:cf:ae:24:
48:be:a1:c3:79:1e:89:bd:cc:cc:c0:ed:d4:39:a2:b9:83:c5:
f6:34:52:da:71:a5:12:03:c6:e4:f8:9c:ac:81:32:9b:bc:86:
83:95:e8:c1:b9:a1:e5:b5:88:be:89:19:50:98:3d:14:1d:ac:
88:24:fb:42:0e:c9:e5:fd:ce:4b:55:53:f1:21:e0:9c:ea:c8:
42:8f:71:94:c1:c1:a1:46:25:44:da:10:e2:e2:bc:3e:e1:48:
b8:74:85:2c:5f:42:22:d8:f6:1d:ff:aa:74:59:83:24:06:f9:
9c:81:28:1b:8e:22:e7:db:c8:ac:04:12:8d:c8:17:25:52:aa:
63:e6:2e:17:34:61:6b:97:34:1c:77:02:2a:7c:35:bd:94:a5:
88:bb:08:5d:08:34:1f:58:b3:8e:af:42:d8:da:47:f6:90:37:
4f:23:fd:6c:44:ed:be:b1:fb:91:3f:8c:da:48:78:1c:e4:82:
1d:14:67:fb:f8:be:29:a8:ce:7e:c9:c3:a3:10:b5:f8:41:0e:
4e:e8:a1:ed:3f:89:60:c9:90:3f:42:51:4a:6b:3c:dd:13:e2:
39:c4:73:23:26:42:84:aa:c8:f1:52:27:7e:f0:7e:5a:e8:93:
d2:d4:e7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:52:04 2025 by rpki-client