Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb325edd-18b4-4783-9ca9-3b361e402ea1.roa
File: eb325edd-18b4-4783-9ca9-3b361e402ea1.roa (raw, json)
Hash identifier: ozcOkWpuYnMYLEWdxcFnkPRpsu1zYkrqJ4XUdtG/lwc=
Subject key identifier: BC:AE:8D:60:5A:B9:FF:67:91:37:21:07:69:18:27:95:98:AA:17:A9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1C8EC32E3FBF250E871562BAD4AFBD9D96450AF0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb325edd-18b4-4783-9ca9-3b361e402ea1.roa
Signing time: Thu 15 Feb 2024 00:00:00 +0000
ROA not before: Thu 15 Feb 2024 00:00:00 +0000
ROA not after: Thu 21 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:8e:c3:2e:3f:bf:25:0e:87:15:62:ba:d4:af:bd:9d:96:45:0a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 15 00:00:00 2024 GMT
Not After : Mar 21 23:59:59 2024 GMT
Subject: serialNumber=e1b7446ef733b539b50469afceb7a2b8881347dcb6b8882ea7e810a5e5d49a74, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:ad:1e:5f:6f:cc:c8:22:55:ff:87:8f:e2:
f8:a1:88:94:f7:fe:5f:2f:22:21:88:d5:82:de:db:
6c:d3:de:f4:44:19:02:6a:81:a6:96:be:a1:50:be:
41:66:af:f4:b2:c5:d2:fb:c4:90:4f:10:2b:2b:fa:
62:c4:98:2b:27:7c:58:68:df:07:f2:2b:2a:4e:92:
f6:9c:15:ef:5f:30:80:29:e1:f5:50:76:2d:bf:fb:
61:c5:60:ae:5e:d1:9a:65:b9:fb:f3:09:e6:35:78:
74:8b:0f:cf:b0:77:f0:82:32:88:04:00:e9:4e:3f:
0b:cd:24:bc:be:7b:ea:4b:2c:a7:2a:d8:21:16:22:
5b:b0:4f:ce:fd:ae:71:0d:69:d9:b3:67:2d:c2:0b:
40:4d:fb:7b:4c:ac:d1:13:c4:23:11:d8:fb:24:9c:
4b:a6:53:7a:0f:9c:9a:ab:4e:b0:34:38:8b:0d:fa:
42:96:61:75:4b:6f:7c:c4:74:31:61:4c:0f:d9:2d:
e1:f8:bc:da:eb:77:82:dc:10:75:1a:69:71:74:ab:
e2:b9:fa:5a:9a:b8:ca:10:cd:a2:df:17:4d:8e:a2:
42:c3:8c:bc:8d:95:a2:f0:d3:37:02:3f:43:bc:d5:
d3:d9:ca:75:b2:66:f6:7d:80:47:79:67:61:de:0b:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AE:8D:60:5A:B9:FF:67:91:37:21:07:69:18:27:95:98:AA:17:A9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb325edd-18b4-4783-9ca9-3b361e402ea1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
43:81:d1:98:99:86:c4:c0:13:7d:78:94:01:18:56:cd:b2:d7:
71:6d:d0:db:56:69:ff:bf:63:23:9a:17:00:87:4d:f0:21:62:
50:b8:d8:7a:01:2b:ea:8d:91:f9:e0:6f:a1:bc:c7:a0:4e:62:
e3:39:f0:df:79:47:00:29:c8:61:f0:40:ad:bd:da:33:66:5e:
d6:22:71:61:15:4f:7f:5f:96:d9:27:32:a2:a9:52:b9:d8:5b:
2f:06:61:5b:a4:5f:95:1c:b2:d4:89:2f:98:68:d0:f9:be:95:
5f:02:a6:8d:55:e8:4e:d8:a0:9f:43:31:2d:2c:c4:cf:13:ab:
fb:6c:92:bf:26:9e:de:d4:e7:ab:fa:d8:da:fa:7d:a5:57:3f:
45:11:9e:03:9c:b5:da:e8:f6:d4:76:7c:e6:8d:50:be:57:17:
b8:aa:74:25:35:9d:95:c8:a9:03:d0:68:d2:90:d7:c2:47:4e:
15:e0:14:a9:35:2b:3a:04:ae:70:dc:fe:dc:50:ba:e9:ca:cf:
cc:8a:ef:44:b9:c7:2f:d2:92:77:df:c8:d5:b6:a4:86:20:46:
57:1a:84:58:7a:93:ed:34:3e:37:80:c6:f7:8e:a2:2b:4c:51:
71:37:9a:d8:de:5d:c7:34:3d:16:b1:4c:80:2b:35:86:49:b5:
af:65:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:07:43 2025 by rpki-client