Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed0394d5-4e28-4b71-b665-57ab03ae73b5.roa
File: ed0394d5-4e28-4b71-b665-57ab03ae73b5.roa (raw, json)
Hash identifier: JrlXgOkXYpObjemesTh2l2b+FUGoaGCjG0rhBl1D6qI=
Subject key identifier: B0:3C:7A:00:16:5E:A5:08:DE:25:C8:C3:29:22:5B:5C:C1:5A:3D:35
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0597B1BE5E1A60786BFC09F739E3B226B5082F29
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed0394d5-4e28-4b71-b665-57ab03ae73b5.roa
Signing time: Fri 05 Jan 2024 00:00:00 +0000
ROA not before: Fri 05 Jan 2024 00:00:00 +0000
ROA not after: Fri 09 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:97:b1:be:5e:1a:60:78:6b:fc:09:f7:39:e3:b2:26:b5:08:2f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 5 00:00:00 2024 GMT
Not After : Feb 9 23:59:59 2024 GMT
Subject: serialNumber=ec128a81c3779b4bc8a6ff9a06f9ad779cf7a2f46b6fc8ad97b501727b00920b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:d0:8e:2c:3e:3f:b9:23:1b:b5:b5:af:f2:
05:eb:0d:52:5c:e7:44:0f:98:8f:97:fb:bf:f2:06:
20:67:e8:a9:d6:ae:f2:08:3b:28:74:cf:82:f5:45:
72:22:87:7c:db:0c:ff:70:71:66:d8:93:5a:73:1b:
99:b4:06:76:ce:4c:62:67:fa:77:94:0e:65:27:ed:
7b:f0:f9:0e:70:73:8a:14:1e:84:6a:03:4d:95:e3:
ee:f3:59:57:a5:30:11:e6:e9:a7:08:3b:10:ba:97:
35:2a:e7:58:79:e1:7c:7a:6c:0c:72:2a:5b:4b:92:
82:9b:69:1b:01:ce:d3:7c:d3:21:5f:e8:7f:13:8a:
12:88:8f:06:db:ea:fb:33:6b:74:c5:e8:36:7f:48:
28:72:be:04:3f:39:01:11:aa:9a:d9:f8:6e:49:0f:
a1:28:fc:be:51:d6:7c:06:c6:58:95:81:e4:9f:49:
2b:3f:8d:f4:10:d5:f0:8c:b2:db:59:0f:d4:ef:da:
89:f8:f9:69:c2:37:0b:cc:56:f8:68:6a:44:97:62:
86:82:ba:6a:ec:24:03:59:99:89:29:9a:4f:91:eb:
0c:e9:d3:b4:fa:38:10:95:92:81:44:86:15:8f:fd:
e5:21:a4:52:16:50:a7:be:83:8b:da:ef:51:57:1c:
03:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3C:7A:00:16:5E:A5:08:DE:25:C8:C3:29:22:5B:5C:C1:5A:3D:35
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed0394d5-4e28-4b71-b665-57ab03ae73b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b1:62:e0:49:07:4a:d3:3e:93:36:76:0f:10:bf:4a:8f:d5:
55:1c:ee:ac:92:93:83:5e:04:66:58:46:06:2f:2f:18:2d:0d:
b4:52:2c:62:4d:2d:79:5b:ed:07:ce:a8:43:ca:81:e2:af:68:
f9:6d:33:62:a3:0d:bf:8e:5c:b7:f9:60:99:25:a6:4e:54:7d:
f7:66:60:64:42:bb:1d:57:58:29:83:10:ea:c1:69:c5:77:3c:
ec:3e:ef:a5:e1:4d:23:40:53:28:4c:b4:1a:9b:f5:96:0e:6f:
c9:7d:7e:02:02:39:8c:7e:c1:b8:25:a1:d9:66:0c:21:96:8a:
d1:d8:1a:db:7a:66:60:5d:2b:06:5d:b8:08:4e:2e:a4:3e:f5:
12:d1:65:6d:a9:03:be:de:6e:3b:cb:39:ae:81:43:a2:f6:21:
02:6a:3d:38:83:b6:b3:e3:ce:3d:5b:a8:58:b0:eb:1b:66:f2:
dd:a3:33:d3:65:f9:c4:cf:41:9c:5e:5b:ce:46:d8:67:cb:00:
96:2f:32:e4:3a:13:58:24:52:57:48:9a:df:3e:af:71:1f:8e:
09:84:ab:48:56:14:32:3a:0a:b9:9a:09:98:f5:f4:c5:e0:36:
29:e8:d5:39:e7:5b:d6:59:da:41:f9:fd:40:ef:4d:58:56:ff:
21:c1:99:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:09:18 2025 by rpki-client