Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d9fb887f-b18b-453f-9491-4ff1ce4af395.roa
File: d9fb887f-b18b-453f-9491-4ff1ce4af395.roa (raw, json)
Hash identifier: vgrg+UUZit3QRBoHyCzkIkj4K1fqwcmkDYLKayfYJAY=
Subject key identifier: 62:F7:6D:9E:B3:33:78:5C:AE:2B:63:66:90:75:B9:5B:61:88:4B:15
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0C4922AB7E6462CB51EEC4DD0247E8E617FD3653
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d9fb887f-b18b-453f-9491-4ff1ce4af395.roa
Signing time: Sun 12 May 2024 00:00:00 +0000
ROA not before: Sun 12 May 2024 00:00:00 +0000
ROA not after: Sun 16 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:49:22:ab:7e:64:62:cb:51:ee:c4:dd:02:47:e8:e6:17:fd:36:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 12 00:00:00 2024 GMT
Not After : Jun 16 23:59:59 2024 GMT
Subject: serialNumber=5b66aff1a3d351dd5a58ccb221604b2b2d81826b4b21146918860b05ba5e9b8a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:7a:db:e1:3a:bb:8f:9c:00:41:3f:f1:3a:
5e:05:a9:70:48:54:6e:cf:70:30:4b:28:36:0d:32:
0c:e6:07:61:d8:00:11:ff:63:f4:d5:c8:f6:ae:07:
a0:93:0e:30:b1:08:43:55:ee:b0:f9:0b:12:b4:94:
8a:15:06:36:9e:69:38:dc:72:2b:18:0d:c9:93:28:
c3:e5:e1:94:47:a2:5f:e2:cf:0a:2b:5d:6e:e5:68:
fc:36:14:33:7d:90:fc:16:0c:86:9d:04:07:32:cd:
88:22:6a:bd:fe:b7:25:80:e1:ad:7f:21:ac:c6:62:
c9:ed:68:6e:64:44:a6:83:0d:1e:ca:3a:d4:9b:09:
bd:46:dd:2a:82:b0:50:b3:4a:09:28:0f:53:86:3f:
e8:1a:24:ad:5c:6e:36:4e:b0:16:ab:63:8a:2b:98:
bf:90:66:26:47:c5:0f:81:6d:be:cf:2a:8d:48:e7:
53:f4:1e:cc:cc:0e:9e:a8:d1:41:c3:c5:ff:61:f7:
4c:10:0e:b0:20:a1:ae:cf:23:d2:76:c6:a5:e2:07:
8f:0b:e2:d3:cf:a7:97:ee:cf:5c:f6:ea:58:a7:8d:
63:1d:8a:f7:8e:24:be:9f:7e:d1:48:4f:a5:bd:de:
dc:3d:6b:ed:05:5c:38:1d:f8:a0:b3:23:15:40:04:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F7:6D:9E:B3:33:78:5C:AE:2B:63:66:90:75:B9:5B:61:88:4B:15
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d9fb887f-b18b-453f-9491-4ff1ce4af395.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
36:9a:33:54:d3:c7:c8:f8:69:d7:98:35:51:b9:ee:05:3b:3c:
10:de:c5:62:19:a3:1f:84:dc:4f:2c:5b:23:02:bb:e0:14:c4:
1f:bf:1c:2f:f7:17:55:a5:93:a9:6a:eb:d9:e0:57:fd:91:d7:
13:19:27:4b:4c:55:55:9d:56:38:30:91:ec:79:9b:78:fa:da:
35:4a:2c:46:1e:54:e6:81:47:ee:01:a8:cc:6c:4f:18:b3:be:
c7:0e:28:c6:0d:4c:2b:6c:04:09:a3:e3:96:ea:35:60:e7:c1:
0d:d4:55:ad:d7:97:22:7d:68:e3:d1:0e:d7:0d:53:15:f7:5b:
8c:f8:60:c7:ab:11:98:b5:cc:fe:60:bd:4a:24:9a:b9:7b:37:
27:cc:76:eb:e2:c0:fb:61:d8:a3:41:2f:e5:88:b3:8d:49:64:
0e:b3:2f:9b:86:19:c2:4f:1b:ba:12:b2:fc:88:fe:23:41:85:
f0:15:70:30:13:b6:19:8a:a5:4a:e2:07:4a:46:e8:2a:c8:48:
a7:23:ad:8a:84:3e:a8:d1:0d:0c:68:0f:bd:87:2a:11:6c:e8:
c6:90:89:c6:6c:db:62:2d:e2:b7:55:e5:8c:ad:1f:99:26:28:
b5:6e:cc:85:2f:d8:9f:85:9a:0e:4f:16:de:96:87:d5:dc:36:
73:56:db:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:51 2025 by rpki-client