Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d3746c34-9eb8-4f34-8682-1efad059c9c5.roa
File: d3746c34-9eb8-4f34-8682-1efad059c9c5.roa (raw, json)
Hash identifier: J6jpA6imohF/1MUKTljGgVAdr2xUR0zlwUMxMy83Es4=
Subject key identifier: C6:34:2E:6A:BA:3F:0E:5E:B6:F4:83:C3:A3:2C:50:1B:9A:18:A1:9F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5D41F155F02580064AB1D42812E5870332902389
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d3746c34-9eb8-4f34-8682-1efad059c9c5.roa
Signing time: Sun 07 Apr 2024 00:00:00 +0000
ROA not before: Sun 07 Apr 2024 00:00:00 +0000
ROA not after: Sun 12 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:41:f1:55:f0:25:80:06:4a:b1:d4:28:12:e5:87:03:32:90:23:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 7 00:00:00 2024 GMT
Not After : May 12 23:59:59 2024 GMT
Subject: serialNumber=d97bb27169d48f83beabf3107f5eceedef381d957871794e45019587ebc1f4db, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:da:6e:d0:ed:f6:f3:4a:b0:68:23:00:57:97:
f4:af:f7:73:7e:e4:d7:0c:f0:e9:21:2c:35:84:1f:
29:28:54:00:6b:cd:48:03:7b:95:94:78:34:39:31:
23:89:c1:a5:c0:2a:dd:f7:1b:b0:6c:7c:08:48:da:
0f:da:78:94:d3:71:41:cd:02:1a:43:d5:72:85:47:
61:f3:d1:22:99:fc:23:d0:86:27:7d:0f:3c:3b:15:
b2:b2:e5:a3:83:bd:55:90:d8:1e:e3:6b:7c:35:c6:
b0:4e:66:2d:b1:38:26:8e:08:b0:24:3e:db:69:2a:
f2:55:c3:f5:9f:34:74:2c:cf:a1:37:9d:96:a2:86:
a8:4c:8b:33:6c:df:fd:44:42:7f:c1:34:04:bd:9e:
6b:61:8b:7c:b6:e9:33:ac:64:b5:33:af:e0:5a:67:
bc:9c:49:eb:e8:40:f5:3a:4c:79:78:43:02:d0:b3:
a8:6a:a7:e2:3e:3d:61:8f:af:80:39:52:7d:06:dd:
ba:ae:f4:19:d9:7a:96:7c:72:2b:22:94:4f:d2:75:
75:af:7b:fa:61:9d:0d:ef:36:f4:00:fd:05:63:88:
10:47:47:7a:65:52:31:1e:66:a5:85:a0:d6:5a:7d:
09:49:ad:d9:34:36:8c:4b:d2:76:55:2c:0d:70:3d:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:34:2E:6A:BA:3F:0E:5E:B6:F4:83:C3:A3:2C:50:1B:9A:18:A1:9F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d3746c34-9eb8-4f34-8682-1efad059c9c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:54:df:28:23:6e:40:11:9e:57:79:b0:4d:b3:77:99:1c:25:
de:98:b3:a4:00:41:d8:9a:ce:09:22:0e:a7:fd:d3:8d:b3:f5:
20:97:24:4c:16:dd:c3:ba:c0:af:cb:b6:69:80:d7:ef:fb:b5:
c7:f5:c1:c7:7c:2f:3e:7c:74:50:3a:9a:ef:12:ff:f0:14:7e:
5c:dd:d7:8b:02:d3:42:b0:e7:b2:cb:e9:e0:74:3b:d6:9d:c1:
4c:35:da:e8:ec:9b:55:b8:d5:4f:65:3d:20:00:2b:a9:88:95:
db:b8:ba:6c:eb:4b:9c:23:c6:79:90:63:c5:6e:a6:0e:97:eb:
70:f2:e8:55:7f:9c:0b:4a:49:86:a3:20:79:3d:b0:dd:b3:42:
74:c5:bb:5a:68:86:7f:a9:fe:23:65:48:df:4d:a0:34:0e:c1:
79:52:04:27:64:0b:0a:c4:5d:b4:95:ef:5a:5a:87:75:dd:8c:
77:0c:db:77:ea:a8:93:c4:71:a8:0a:54:c7:5e:79:66:b9:3b:
7f:3e:42:fb:8b:f8:54:04:e7:dc:f8:a2:a2:a8:ea:c6:77:60:
6e:84:71:4d:fd:3f:6e:31:24:0d:93:6f:84:89:ee:ae:40:71:
36:33:62:32:83:f1:c1:45:60:e5:c7:0d:d9:64:5b:9f:45:3d:
8d:2d:a2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:54:30 2025 by rpki-client