Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e9800370-547f-4653-be84-7756bad8a3b2.roa
File: e9800370-547f-4653-be84-7756bad8a3b2.roa (raw, json)
Hash identifier: qI/WgBecByVIwH2eF4bg9mG9lhBL16jb/t8u4Fz29rk=
Subject key identifier: 7E:64:7D:EB:94:30:AF:45:6F:B1:14:22:4A:C5:E5:B1:35:54:C3:13
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6EDF22EDC0A48501C4A7A8D370812F12D30B1B87
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e9800370-547f-4653-be84-7756bad8a3b2.roa
Signing time: Sun 19 May 2024 00:00:00 +0000
ROA not before: Sun 19 May 2024 00:00:00 +0000
ROA not after: Sun 23 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:df:22:ed:c0:a4:85:01:c4:a7:a8:d3:70:81:2f:12:d3:0b:1b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 19 00:00:00 2024 GMT
Not After : Jun 23 23:59:59 2024 GMT
Subject: serialNumber=4327a5925c1bc6aa480e40bfbd50bc5760dbbd0b855a1beb94af950275b16d09, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:95:7d:fd:8d:fd:54:73:aa:0a:42:46:cd:
fe:6c:11:5e:c3:0d:29:2c:70:ec:f7:d5:86:ad:f9:
48:29:d1:6c:d9:a5:af:35:07:53:5b:3d:94:0f:48:
49:46:dc:c8:a5:f9:cf:d8:3d:ba:b1:6c:7c:7b:b4:
b7:17:7b:29:1c:fc:ab:ca:ed:45:4c:d2:61:0b:74:
a4:ab:30:45:77:7c:65:6f:86:96:a1:0f:3d:07:66:
55:7a:eb:9d:77:80:9c:18:eb:bd:b4:44:c3:5e:c4:
e2:3c:60:68:6f:36:4b:d5:2c:af:c0:41:11:cb:3a:
ed:9c:48:81:55:84:4b:d3:a0:6c:d4:f4:b1:83:8b:
5f:09:23:e4:4a:b3:61:f3:63:89:3f:96:de:df:2f:
54:1e:6d:70:f7:5b:bc:8d:3c:8a:b6:14:f6:de:ff:
1b:e1:a1:b0:14:b9:29:ed:51:6d:4a:36:34:ff:28:
da:44:9a:77:70:cc:f5:56:56:a1:6b:4d:d2:41:c8:
d4:8e:f2:26:6b:98:cd:76:b0:70:bd:85:18:f3:ce:
2a:d0:14:c3:ce:2b:64:e1:3d:a0:14:7a:50:2b:dc:
07:1e:bf:b4:55:87:2a:fb:34:eb:55:82:21:d7:1d:
ec:ce:e8:17:3b:c1:e8:61:89:e4:67:05:6d:76:eb:
0c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:64:7D:EB:94:30:AF:45:6F:B1:14:22:4A:C5:E5:B1:35:54:C3:13
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e9800370-547f-4653-be84-7756bad8a3b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
32:81:86:e6:15:36:c4:ef:0d:ea:fb:a5:ed:66:04:0f:73:1a:
31:aa:b1:77:00:b5:38:2f:5f:32:6f:a9:3a:99:49:5b:a0:7b:
9d:f8:81:d2:71:2a:6d:28:96:2a:4e:91:27:64:38:9a:94:cb:
dd:9e:a9:7f:87:49:b8:7c:60:ce:58:cb:58:63:c5:64:db:d3:
48:68:11:7c:e6:22:64:f9:d2:c1:31:00:ba:12:51:8f:a9:9d:
07:1c:ac:ae:33:22:6c:9c:47:9d:16:58:e7:19:64:6e:70:4f:
2a:44:90:97:0e:35:88:d7:b7:29:ee:c9:aa:8d:a4:f0:ab:14:
b4:c9:a1:fd:ca:b5:ec:77:6b:48:3f:a2:14:87:3f:f5:ee:f9:
26:f5:0a:b9:f7:46:e6:9b:58:9f:9a:b1:24:32:cd:1e:54:99:
6f:f5:1a:45:05:3a:d4:c3:b6:cc:6f:93:46:9e:80:56:1b:75:
94:b6:2f:3d:ac:bc:e2:24:1a:33:46:bb:62:78:bd:7b:9a:06:
e6:25:ef:a4:f7:57:aa:3a:6c:6a:9f:33:14:f5:20:1c:82:51:
32:0d:30:6c:39:b9:a4:de:7d:4f:41:02:33:20:db:71:6b:f4:
42:fd:bd:a6:95:f1:b7:a0:4f:8f:de:41:22:37:17:77:55:1e:
76:60:f3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:36 2025 by rpki-client