Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed1b8cdb-0eea-4542-b77c-e603be18c129.roa
File: ed1b8cdb-0eea-4542-b77c-e603be18c129.roa (raw, json)
Hash identifier: ikNMkL9qju951vhxv+zwmXgCJkB89uaYXcjz3/LiaZw=
Subject key identifier: 43:96:1C:ED:D9:FC:84:ED:2F:B8:9A:DD:06:60:3C:FF:AB:10:7D:2B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7A30A180A98A6BB9DF0880BB5F12B1C71128D066
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed1b8cdb-0eea-4542-b77c-e603be18c129.roa
Signing time: Wed 24 Jul 2024 00:00:00 +0000
ROA not before: Wed 24 Jul 2024 00:00:00 +0000
ROA not after: Wed 28 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:30:a1:80:a9:8a:6b:b9:df:08:80:bb:5f:12:b1:c7:11:28:d0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 24 00:00:00 2024 GMT
Not After : Aug 28 23:59:59 2024 GMT
Subject: serialNumber=4448ea05860d2464cb7a4cef0796ed090dccfae421f49b92c2952285b30daf12, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:48:8b:87:d5:72:d8:6d:67:34:b8:c6:0e:
a3:25:f0:c1:06:89:83:30:cb:9c:62:1e:fe:c8:b9:
22:ee:7b:57:21:f0:29:00:14:7e:77:eb:24:a9:71:
21:b4:18:92:45:d7:fd:c2:0c:45:b2:d0:19:50:33:
aa:df:ec:9f:e3:2e:ee:9e:29:68:a1:ac:51:d3:e2:
0a:fe:43:73:50:79:3b:ac:23:c5:9d:3a:4b:49:e9:
75:11:d4:36:b9:59:86:5f:8c:60:a7:73:4b:2c:c7:
c1:40:7f:f8:da:fe:40:fb:37:4e:f7:41:09:03:4f:
0a:d2:5d:d7:74:bf:71:02:59:1d:2a:fd:6a:f1:00:
be:3d:c5:5c:dc:31:8e:ab:9d:b8:2d:d7:32:0c:ed:
79:cc:99:11:1a:b8:96:23:57:35:6b:19:cd:40:b8:
d1:89:43:72:4f:f3:18:6e:82:44:6c:7b:5a:d9:5a:
44:fe:8b:39:d0:a6:cf:18:3f:c9:4a:14:48:1a:04:
96:12:1b:4c:61:fd:4a:9b:8c:bd:af:38:91:0c:de:
82:84:e8:72:9b:f4:f6:fc:66:85:e5:df:f3:cf:ff:
d3:bd:e2:de:dd:16:77:14:8d:6e:d5:7e:da:12:0f:
90:bf:2a:13:5e:72:b3:a7:de:7f:bd:a8:24:e8:4c:
a3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:96:1C:ED:D9:FC:84:ED:2F:B8:9A:DD:06:60:3C:FF:AB:10:7D:2B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed1b8cdb-0eea-4542-b77c-e603be18c129.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
97:15:fa:c1:cd:22:24:15:34:b4:22:2c:bb:1a:04:cb:fa:e8:
b0:0d:65:af:b3:eb:90:93:c3:f9:01:6c:66:31:ef:82:97:75:
ea:93:2a:31:5d:82:e8:60:32:51:80:49:2c:72:8e:2e:45:92:
74:8d:9e:2e:d9:a4:94:13:d7:79:d2:00:cc:27:d1:e2:ce:56:
ff:62:9b:f8:72:8d:19:6e:a5:df:3e:36:dc:c8:23:72:7f:74:
86:61:e5:ec:13:89:7b:4e:48:37:7a:44:47:5d:d7:f4:ee:8f:
ba:20:ae:31:71:bc:16:fb:43:74:fa:d8:5d:24:05:f1:1f:88:
60:8b:97:84:f5:f2:7c:1c:22:1c:4f:1b:55:e5:d1:53:23:30:
be:a8:00:b3:42:c2:ac:85:19:8b:03:26:d4:05:32:ce:7b:c1:
15:b9:a5:76:53:2d:2c:2c:30:cd:92:9e:3b:90:ae:51:b7:58:
27:96:7b:9e:24:82:34:07:17:23:cc:11:c0:9b:3f:de:8b:bf:
22:ec:3f:92:17:35:d3:14:f8:b0:0a:17:10:75:a8:2e:3c:1b:
d0:65:88:5e:17:6c:6e:d0:99:96:b7:0e:35:eb:9e:08:45:9c:
ed:7d:6f:2d:35:bb:cd:63:38:12:e2:94:20:12:e9:83:24:12:
d7:df:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:51:20 2025 by rpki-client