Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dbbe6238-d3aa-4fa1-8edf-a90c772d2904.roa
File: dbbe6238-d3aa-4fa1-8edf-a90c772d2904.roa (raw, json)
Hash identifier: J9q5fY8OVuWLqueFjQ6uB2w6llW7QXQyBca06jsIb1w=
Subject key identifier: 37:1E:97:43:FD:EF:8C:00:5F:49:84:05:2E:68:5E:7A:B0:07:E7:A2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 37235DD0AFF140EAB2C4B20A19E892B336D1FB88
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dbbe6238-d3aa-4fa1-8edf-a90c772d2904.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:23:5d:d0:af:f1:40:ea:b2:c4:b2:0a:19:e8:92:b3:36:d1:fb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: serialNumber=1d21356dfbeac7db1e71d927ae50d8a45a2652e1d50cd5c2c63a690a2c9ab227, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d7:f8:d1:37:71:fb:4b:9b:bf:e3:e0:92:2c:
b9:0d:01:61:19:2e:2a:f1:66:2e:ae:2b:00:32:af:
d4:f6:b8:0a:46:ca:a7:00:ff:3f:19:bd:f7:a6:0e:
17:39:b2:ae:55:b8:6f:43:8f:ff:7c:84:47:c4:36:
24:18:ae:4c:76:f3:dc:70:ec:9d:a6:d7:ac:7a:ec:
e3:08:b2:d9:0c:58:04:19:62:d8:4b:57:d4:be:a3:
04:b5:4b:f7:d9:a7:a3:f0:e7:7b:30:36:58:09:39:
0c:cc:b6:52:b0:9a:4c:8a:2d:a1:28:c5:c8:d7:12:
94:0d:fa:3f:c8:fb:ca:de:18:d7:84:04:e8:b7:ae:
62:49:fc:14:92:03:93:88:ae:6d:a8:d1:19:17:90:
d4:4f:8e:c9:83:24:76:ea:5a:49:f6:a7:58:fd:40:
8c:58:49:98:0e:6b:c0:9f:30:4c:e2:cf:36:a6:3b:
c9:32:32:da:61:0a:3b:a6:63:6a:72:f0:32:62:50:
92:87:2b:84:ad:51:f1:bc:13:31:a3:50:fe:40:99:
40:a2:38:0c:85:65:b1:86:e5:01:7a:a2:f0:1f:6c:
dd:1b:4d:9a:a0:38:b0:d4:48:fd:21:f8:7b:d6:59:
c6:5d:67:2b:29:92:3d:22:02:0f:5c:3c:e0:d2:da:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1E:97:43:FD:EF:8C:00:5F:49:84:05:2E:68:5E:7A:B0:07:E7:A2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dbbe6238-d3aa-4fa1-8edf-a90c772d2904.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:0e:96:c9:4b:ba:a6:db:5c:02:71:b6:5f:3b:f8:2d:29:83:
85:27:61:dd:9d:dd:69:bb:e3:8f:0a:63:c1:61:22:d8:42:92:
f3:76:49:3e:90:40:e6:d4:9d:ce:b2:f2:9f:a8:09:bc:4a:35:
f2:d2:87:87:48:1c:e5:8e:2b:db:f0:fd:7f:32:e8:76:95:27:
91:22:d5:0b:b7:00:5c:91:13:85:b1:f9:91:46:26:6f:0c:83:
70:48:7d:40:d7:dd:de:74:1f:5b:2b:b0:80:7b:20:9e:da:90:
3f:db:02:dd:c6:e8:11:ad:1b:0a:d9:72:12:e7:0f:58:ce:85:
26:8a:22:fe:fb:a6:8a:f7:14:b0:f9:3b:dc:4e:9c:e3:36:1e:
f2:98:7e:2b:e7:40:6e:85:aa:40:cd:50:72:3b:40:3f:83:60:
cd:fa:bd:d0:b1:cc:7b:d1:f4:2b:bd:d8:e7:91:b1:4d:ae:43:
a9:69:3f:44:cd:6e:aa:ca:bb:7c:4c:3b:ea:90:8a:9c:03:10:
79:be:f9:f0:f5:07:9e:c5:24:12:16:98:6f:f6:5e:1f:a7:48:
75:b8:92:95:e7:03:f2:e9:82:61:ce:02:fb:1c:76:02:c2:3a:
e7:e5:9a:cf:37:58:a4:41:37:ce:ed:f2:38:cc:40:13:d5:c0:
40:ef:ff:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:29:47 2025 by rpki-client