Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f00f452d-cfd0-4c16-8b7d-19e7e98ef68f.roa
File: f00f452d-cfd0-4c16-8b7d-19e7e98ef68f.roa (raw, json)
Hash identifier: 8G/qEGJKfgIx7y/vHeg/w8DkkVHPjZhSrP3TIVqlwYQ=
Subject key identifier: 12:AA:EC:B3:C9:1D:12:A2:98:52:00:77:8A:7A:B0:3F:73:D4:A4:25
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 206292A5387F10650FA3F160930C435E214DC126
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f00f452d-cfd0-4c16-8b7d-19e7e98ef68f.roa
Signing time: Wed 20 Mar 2024 00:00:00 +0000
ROA not before: Wed 20 Mar 2024 00:00:00 +0000
ROA not after: Wed 24 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:62:92:a5:38:7f:10:65:0f:a3:f1:60:93:0c:43:5e:21:4d:c1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 20 00:00:00 2024 GMT
Not After : Apr 24 23:59:59 2024 GMT
Subject: serialNumber=ee6d258ed79fc9d3fc4dee9a03869e35ee9370a0c9745a01e6ede9918932f8c7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:f6:e2:cb:f4:7e:b2:e0:b9:62:b6:0a:42:
af:06:10:38:49:3f:a5:e4:0b:d2:5d:a6:09:bf:58:
84:87:72:2a:86:6b:c1:3b:04:26:2f:ca:84:2a:5c:
49:68:a3:02:1e:f5:b5:d0:bd:95:8d:e6:b3:0b:1b:
65:d9:44:1b:2c:3d:99:b5:47:3d:e8:bc:85:b3:cf:
a5:e6:22:02:8f:f3:47:c4:ac:db:c4:58:4e:3c:41:
59:17:e3:eb:57:c6:60:3c:f5:ad:08:e0:69:ee:6e:
c2:7f:92:c5:87:3d:35:c5:f3:a1:42:6c:d5:ae:ec:
82:88:fc:c0:7a:d4:b6:f9:d6:7e:d6:11:cf:4a:f0:
93:db:52:fa:43:d0:2f:2e:dd:ac:97:43:8d:77:2e:
66:5a:c1:48:bb:05:76:62:dd:21:66:48:88:0a:3a:
dc:61:ac:09:66:91:13:47:ec:24:1f:f6:54:0d:34:
16:fa:f3:2e:84:27:a4:58:be:7b:8b:5e:0b:71:ab:
f3:a5:11:ed:f0:b9:c2:62:9b:c6:01:97:20:a0:e0:
a6:8f:2d:e7:13:b5:e8:b2:78:4e:e9:ee:09:5a:7f:
ed:bd:f6:fd:6f:b5:b5:39:0b:2a:42:92:cf:af:3d:
43:50:de:7f:96:99:e9:0e:78:07:55:b1:39:50:5f:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AA:EC:B3:C9:1D:12:A2:98:52:00:77:8A:7A:B0:3F:73:D4:A4:25
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f00f452d-cfd0-4c16-8b7d-19e7e98ef68f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:aa:87:d5:62:89:8b:e0:5b:af:c0:71:10:a0:40:42:1d:5b:
30:63:b5:82:40:5f:02:b5:15:63:48:37:44:31:69:85:93:dd:
81:a2:f3:cd:ed:85:62:39:76:b6:e0:c5:1e:f8:6f:0d:01:21:
de:ab:63:15:72:86:95:10:10:f8:be:5e:3b:f4:f1:a4:c5:77:
0e:f6:80:ab:e4:9a:1d:39:fc:24:d2:d1:50:ce:f8:ce:bf:e2:
dd:88:27:3c:5b:c7:a6:64:4c:12:c3:2e:cf:3e:65:38:f1:18:
40:3e:2e:a1:2e:85:77:e3:0f:4e:87:96:17:04:81:30:ae:f9:
56:07:9c:05:de:e4:15:fa:87:57:c7:18:72:e4:dd:7d:59:2c:
56:05:c5:1f:38:9a:19:49:f3:95:16:3d:da:b6:55:3b:c9:3c:
45:80:0f:b5:02:bf:a5:1a:07:be:59:1d:d3:9d:a2:25:bd:e4:
bb:ef:2b:55:b9:03:ad:e1:db:eb:e3:cc:b3:8b:5f:ad:a8:0f:
f5:8e:ae:94:83:bd:0d:1f:c2:71:2b:03:18:30:86:5d:46:7a:
a2:f3:06:f9:6e:5c:60:be:ef:bc:d6:17:35:fb:68:3d:00:7d:
3c:6b:7d:29:35:b7:a0:b9:79:be:f6:c1:bb:df:f2:db:63:cd:
56:62:15:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:07:42 2025 by rpki-client