Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fb8013ca-cec6-414b-b545-b814fc6e699c.roa
File: fb8013ca-cec6-414b-b545-b814fc6e699c.roa (raw, json)
Hash identifier: o4LDZw7jTjGs2sA/RWYcJjjy4NytSE1nkyQNlLR5B20=
Subject key identifier: 0D:BD:D0:82:5F:71:7F:46:F1:2B:32:8A:61:B9:26:B8:F7:8B:85:A5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 330124AAE0D1283F033F4C8A4309761489908F2D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fb8013ca-cec6-414b-b545-b814fc6e699c.roa
Signing time: Sun 28 Jul 2024 00:00:00 +0000
ROA not before: Sun 28 Jul 2024 00:00:00 +0000
ROA not after: Sun 01 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:01:24:aa:e0:d1:28:3f:03:3f:4c:8a:43:09:76:14:89:90:8f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 28 00:00:00 2024 GMT
Not After : Sep 1 23:59:59 2024 GMT
Subject: serialNumber=70cc40a18d1395de0073fee822a0ebdb5f7479182ac42f9aa9815d9a3e104b7c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:72:7a:56:24:2e:cc:65:54:1a:42:7d:42:
28:03:53:f4:82:80:a6:3d:92:41:57:20:b4:27:c3:
32:35:8a:98:fb:5a:9a:81:9c:0c:9c:10:d2:e0:99:
32:dc:b4:a5:1c:5b:52:80:fb:b4:8b:75:df:aa:78:
03:a8:0f:ac:b3:ac:9e:8b:f6:9d:6e:86:b4:e8:0e:
fc:94:f2:04:54:9f:49:75:23:56:0d:f9:cf:d1:ed:
47:00:2b:42:f8:42:3b:6e:bd:80:82:7c:ef:a7:3e:
d8:da:39:9c:64:15:3c:7d:8d:d1:1e:e0:79:51:67:
c3:0f:62:17:15:41:90:2a:37:84:d5:46:35:ea:74:
17:5c:e6:45:79:e0:32:e2:0d:32:f9:fc:d1:10:87:
ed:f0:b1:e9:1b:8b:c8:48:93:50:09:fa:8d:d7:50:
cb:1c:30:0f:14:ff:fd:0e:69:77:f4:70:6c:18:00:
72:3f:b0:1e:85:8d:55:f8:1a:91:5a:fe:04:c1:48:
51:63:07:46:9e:77:61:68:20:22:8a:20:0c:11:91:
e9:37:c9:81:21:8c:d6:ce:e3:9c:59:8b:9d:36:17:
ce:2a:8a:2a:a5:26:a0:1f:86:87:ab:af:7e:9e:f9:
4b:54:33:8b:9c:ba:f0:e8:14:bf:65:79:91:8e:61:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BD:D0:82:5F:71:7F:46:F1:2B:32:8A:61:B9:26:B8:F7:8B:85:A5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fb8013ca-cec6-414b-b545-b814fc6e699c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:cc:58:6d:9a:d1:d3:30:12:f4:51:97:e0:dd:9b:aa:30:75:
84:19:5e:3d:98:d6:57:29:2a:10:f0:93:b9:70:e5:59:61:c4:
5c:c9:15:ec:d7:71:2e:f5:dc:0d:89:93:9b:3f:fa:7b:cc:c4:
a2:d8:c0:e3:87:b4:cd:bf:9a:d6:d9:a3:85:d0:78:1a:eb:1e:
68:28:b1:4a:f6:74:3b:55:7e:8e:be:8e:7c:3c:16:9c:71:72:
aa:e0:46:44:50:97:c5:26:02:d5:53:11:ef:d4:1c:94:32:aa:
3c:1f:c2:35:63:4e:a9:3d:5e:99:d4:69:48:c3:45:da:5d:85:
6f:e9:17:e7:4d:77:a6:21:fb:ab:05:86:eb:54:9d:1e:49:b1:
42:76:5f:68:f4:69:99:56:f6:16:ef:06:95:0e:e0:5a:01:78:
db:95:63:6a:f1:da:f1:b0:0e:05:3a:e8:ca:3a:33:9d:ec:c4:
12:e1:4a:4d:d0:84:69:e8:c7:6d:43:f3:c2:b2:5e:a0:7e:a7:
c5:41:ba:f5:9e:41:b6:60:14:0b:67:c1:45:0f:c0:b9:79:e3:
45:45:a2:09:01:86:7b:22:c7:1f:08:05:94:66:a6:bc:ca:58:
36:bb:52:f0:5f:24:22:60:3b:47:77:a1:cb:15:18:f0:1c:06:
95:db:9a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:22:46 2025 by rpki-client