Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d1f22cce-06da-4cc0-830e-2162747c3dfd.roa
File: d1f22cce-06da-4cc0-830e-2162747c3dfd.roa (raw, json)
Hash identifier: j3KrGF044+dPhIbe3eHyqr2R+2YyiuDyJ7ey2iC5M2A=
Subject key identifier: 07:52:CE:12:29:3C:F9:A8:41:25:8F:AE:F0:9C:D3:48:D8:9B:94:2E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 285941A1ADBD67463B50B5180F7BBE3D489F1257
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d1f22cce-06da-4cc0-830e-2162747c3dfd.roa
Signing time: Fri 08 Nov 2024 00:00:00 +0000
ROA not before: Fri 08 Nov 2024 00:00:00 +0000
ROA not after: Fri 13 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:59:41:a1:ad:bd:67:46:3b:50:b5:18:0f:7b:be:3d:48:9f:12:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 8 00:00:00 2024 GMT
Not After : Dec 13 23:59:59 2024 GMT
Subject: serialNumber=2d92e177ae6f14148ee336b8dfe8b4b1424511bbb59d9cfcc55c924d47bf08e7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:ec:fe:5e:f2:ad:f8:90:2e:07:47:18:dc:
f1:38:7e:aa:ce:ab:d7:1e:36:eb:ac:67:99:42:8a:
41:95:b3:61:b8:31:07:3b:1d:54:07:26:ce:b3:c7:
ae:34:49:c3:d1:43:6b:92:e3:29:64:a4:c2:b8:6b:
14:2b:b7:5d:8c:7b:18:d0:10:8c:a2:4a:2c:2d:4b:
b3:75:67:b0:16:61:69:c6:73:72:73:00:cc:e3:81:
20:5d:6e:05:f9:cc:53:35:ec:dd:63:37:21:f7:1d:
7d:67:93:8d:d6:2d:58:c7:1b:89:ed:b8:9d:20:75:
85:f4:d7:44:b7:06:11:45:e6:7e:d3:bb:2c:52:d8:
5a:04:af:6f:00:ae:ac:c2:a7:23:72:bc:8f:db:77:
c6:57:02:48:b7:03:25:38:06:f7:a2:0a:54:bd:fb:
d5:18:78:53:ad:5a:fa:64:b2:eb:87:a9:80:ae:12:
b3:9b:7e:a2:1f:1a:e7:81:f5:49:85:86:1a:f1:e0:
63:49:2d:77:bd:2a:0f:ca:57:65:0e:07:57:55:78:
29:ac:80:2b:e1:86:40:f4:73:4d:67:42:86:8f:28:
34:ea:35:ab:8a:03:22:e9:ff:c4:b3:62:ab:a8:09:
d5:b0:e9:bf:90:ea:0e:ce:91:4d:b8:25:7a:04:97:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:52:CE:12:29:3C:F9:A8:41:25:8F:AE:F0:9C:D3:48:D8:9B:94:2E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d1f22cce-06da-4cc0-830e-2162747c3dfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:46:ee:01:f1:42:90:75:31:e3:31:1a:c6:83:49:fb:52:23:
a7:d6:e0:8a:34:0c:1c:c0:67:90:37:89:c5:ff:f3:ad:59:32:
52:98:f8:22:31:5f:2d:d3:1c:f6:c0:5c:5e:62:0f:db:f3:50:
eb:ed:9a:04:1d:69:9d:e2:23:ce:59:45:10:6d:3e:2d:0d:bd:
ac:ac:a1:9b:36:6a:ec:ea:f8:b3:90:53:27:3d:0d:65:72:79:
a8:bb:d0:f7:61:e8:11:18:54:1b:6e:33:65:39:57:22:e5:79:
b7:33:28:f1:20:76:f1:4f:ee:67:43:ec:cb:32:83:4d:80:16:
8d:1e:25:fd:29:a7:10:12:08:54:23:24:65:8b:be:c9:b7:b2:
cb:02:b8:12:46:40:d8:e1:9b:3a:9a:6f:af:c7:57:48:cb:d0:
54:8b:63:64:a8:16:5f:80:ab:8c:c1:4d:27:aa:09:43:1d:9a:
ed:23:44:91:4a:9f:22:72:e7:34:51:1b:7a:dd:15:7d:30:c1:
79:23:66:85:10:b1:c0:60:9e:65:25:f0:98:b7:b7:63:3d:a6:
a7:13:ea:98:83:57:df:3e:10:e5:55:86:79:a6:00:7c:d5:34:
07:fc:5c:1f:2b:a5:8e:7c:aa:1f:8f:8c:fb:16:6f:d4:61:3d:
ad:30:34:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:20 2025 by rpki-client