Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e9aea08d-e8d5-4ab1-9083-5f2d7c89b6ad.roa
File: e9aea08d-e8d5-4ab1-9083-5f2d7c89b6ad.roa (raw, json)
Hash identifier: StdhfZcIjU0uQEZP8YZa1l7WRT42UXYvjo2RSLoSrgc=
Subject key identifier: 3B:72:45:CC:02:5A:01:9F:22:0E:6F:AB:3E:58:B0:81:C1:A9:29:6E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4E624C3E0322B67FC447B7E1B30A4CA07923EF3B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e9aea08d-e8d5-4ab1-9083-5f2d7c89b6ad.roa
Signing time: Sun 28 Jul 2024 00:00:00 +0000
ROA not before: Sun 28 Jul 2024 00:00:00 +0000
ROA not after: Sun 01 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:62:4c:3e:03:22:b6:7f:c4:47:b7:e1:b3:0a:4c:a0:79:23:ef:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 28 00:00:00 2024 GMT
Not After : Sep 1 23:59:59 2024 GMT
Subject: serialNumber=05fe52a605010a350cf170977f101901d9cf474f379bf01d8933b959650a4d17, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:44:ae:d7:8e:76:3e:22:6e:c8:0e:6b:2a:77:
fb:99:28:fe:b3:80:a3:f5:bd:43:16:b4:6e:59:80:
09:8c:db:c9:d1:2a:43:59:f5:8f:b0:b1:0e:84:47:
4c:2c:a6:d2:36:4d:ca:e1:8a:8c:07:c5:e9:1c:06:
67:1f:9e:d6:b3:c9:3f:22:39:02:cc:21:39:8a:76:
04:60:0d:76:3a:a5:40:f6:64:08:40:e3:c3:8d:01:
14:d1:c8:dd:e9:c6:bb:7e:80:92:48:0f:89:8f:b1:
e4:93:02:9e:65:37:a0:07:81:9d:1f:b7:bc:53:eb:
8f:d5:03:e5:b0:6a:f9:df:e3:94:6d:6a:16:20:11:
34:44:73:2b:a5:bb:4f:b6:92:a2:95:c2:5d:39:99:
5d:84:fa:49:05:70:dc:4c:34:05:55:8e:1d:00:99:
ef:59:0c:a0:bc:8c:b8:f6:07:03:34:67:98:fb:3e:
88:1b:7a:59:1d:88:ff:de:85:03:29:48:10:69:41:
cd:0a:0a:88:50:c5:14:c8:08:5d:34:10:2b:3f:e0:
53:24:ba:9d:b5:ee:20:58:0e:f8:83:81:ae:46:60:
0d:a7:6b:23:8b:7e:eb:26:bf:e8:b2:3f:42:67:9c:
82:b7:a3:6a:60:92:b2:67:a1:b5:aa:83:bb:d1:b1:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:72:45:CC:02:5A:01:9F:22:0E:6F:AB:3E:58:B0:81:C1:A9:29:6E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e9aea08d-e8d5-4ab1-9083-5f2d7c89b6ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ba:18:7a:c8:7e:91:08:1a:9f:5b:5c:c7:c0:bd:b0:d3:fa:
c5:0e:43:7e:26:3b:bb:37:22:00:13:8c:99:9f:7f:36:7a:76:
3d:f1:9f:48:c6:d7:da:26:f9:38:18:c0:de:e6:de:b7:be:2e:
de:8d:dc:e3:4b:d5:4c:26:2f:22:d1:10:de:f0:d5:95:6c:2f:
3d:bb:b9:ed:03:90:2c:2c:5f:22:17:95:cb:18:0c:f1:b3:11:
eb:d6:48:5d:44:e3:13:19:dc:0c:51:b8:f3:45:d6:40:c7:38:
06:1e:9f:6b:5c:20:d6:7f:f6:ca:5a:9d:ec:82:7f:27:4a:e9:
14:1a:d9:5b:1c:ff:45:37:a1:14:e3:18:1d:c1:5b:40:52:ca:
b0:b4:86:49:da:f4:90:c0:62:88:94:53:2f:e3:a4:a6:ad:c0:
b4:14:b1:2e:20:78:0b:9c:ac:77:70:e4:8f:14:57:a2:d0:6e:
f6:48:02:6d:04:49:5a:bf:64:d7:0a:0c:af:ab:2e:35:97:b3:
84:64:35:98:e7:b8:5e:b2:2e:a7:15:d2:50:26:cb:0d:53:d4:
c5:56:9c:af:07:ae:d2:ca:21:70:b6:29:b8:3f:89:53:46:a6:
ea:1e:61:3e:14:d0:6c:be:3a:6f:cb:71:ba:f4:2c:14:3d:9c:
d0:38:9d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:35:32 2025 by rpki-client