Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/03225996-1ea7-48ff-894e-12dd63d17fb1.roa
File: 03225996-1ea7-48ff-894e-12dd63d17fb1.roa (raw, json)
Hash identifier: ++S/eq88w2ymi9sv1cxBKOyxhrgkB4LltU6GZj4GW60=
Subject key identifier: BF:F7:12:03:82:3F:52:3B:B5:CA:1E:51:57:87:9A:C9:E6:A4:5E:75
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 106AD8C63E48B2173FC4C233B2BE7CAC137831C3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/03225996-1ea7-48ff-894e-12dd63d17fb1.roa
Signing time: Sat 22 Feb 2025 13:18:19 +0000
ROA not before: Sat 22 Feb 2025 13:18:19 +0000
ROA not after: Sat 29 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:6a:d8:c6:3e:48:b2:17:3f:c4:c2:33:b2:be:7c:ac:13:78:31:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 22 13:18:19 2025 GMT
Not After : Mar 29 23:59:59 2025 GMT
Subject: serialNumber=bddef16bac08da44bf47de8cbe527d6e05cace4d96f38a69475aaf5afd76f69f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:88:76:b0:4c:fa:34:1f:dc:e3:44:d5:08:
f9:9a:5b:70:11:3b:6b:66:c5:04:1c:49:89:c6:4b:
d9:79:fd:08:33:45:9f:ec:02:68:ed:3c:d0:04:7e:
2e:9a:e4:db:99:fd:3b:87:ea:71:20:49:7d:a1:72:
2e:9b:14:29:6c:5f:c9:bf:16:17:a0:06:24:fc:98:
df:fd:ab:dc:51:ea:a5:41:ca:67:39:e0:2c:85:10:
3a:5e:e1:e5:76:60:8d:69:7e:f4:3d:81:2f:05:dd:
f8:ac:5f:33:29:57:ac:48:db:e4:f0:a6:1d:0a:8b:
14:05:e1:40:b0:fd:fd:21:11:c8:97:13:30:f1:c0:
6d:4b:21:89:32:9a:ce:e5:d1:4d:52:56:36:48:75:
43:1c:e1:40:09:78:78:0f:67:05:de:74:4c:57:83:
3c:8f:46:f2:d5:2d:3f:92:73:74:fd:36:17:c9:e6:
ff:57:d8:f6:1b:6c:cf:a7:4a:ee:59:57:24:34:b2:
60:db:27:22:e6:73:28:d7:dc:5e:ee:d5:c3:93:cf:
f9:ba:f3:25:4b:04:a3:52:1b:fc:66:de:28:f9:9d:
97:95:88:8b:d5:e7:f2:0c:b5:69:d5:91:64:0d:fb:
ff:33:ad:32:24:9e:82:b3:39:4b:86:9b:79:98:9c:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F7:12:03:82:3F:52:3B:B5:CA:1E:51:57:87:9A:C9:E6:A4:5E:75
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/03225996-1ea7-48ff-894e-12dd63d17fb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:b5:16:d2:a9:9b:59:c5:e4:84:e3:bf:39:68:e4:0e:4b:7c:
7b:e5:8f:e2:4b:77:b6:b2:cf:b9:60:c8:74:ba:3b:ef:b1:89:
cc:93:a9:8c:f1:3d:79:12:67:2e:be:37:bf:40:b9:5d:ad:ad:
41:33:e4:6b:79:fe:d3:72:b5:9c:d7:fd:98:c2:df:e3:aa:bd:
07:08:e3:fd:d4:13:0f:19:34:9d:2a:74:87:6b:e3:99:bf:5e:
e2:6e:6c:f5:d2:26:ac:57:83:81:58:94:b0:59:94:f3:a7:87:
0e:bc:aa:f9:13:d7:17:dc:a1:60:76:b3:e2:d9:1c:2f:59:d4:
48:f1:a5:28:46:95:a9:99:eb:6b:af:f1:f0:0e:fb:59:db:1b:
bf:c0:29:e2:33:5e:12:26:06:11:1d:fa:21:de:36:09:05:4c:
14:e4:8e:81:50:56:a2:39:d6:11:7e:02:c6:09:89:2f:cf:64:
4e:99:e7:06:bd:9b:e0:72:3a:6b:cb:0e:42:74:2f:17:0e:43:
86:35:e8:d2:00:c5:34:e3:73:0e:0b:7a:b2:b3:d4:ef:87:5f:
2b:33:63:27:3b:8a:82:66:ad:3e:ee:b5:2a:30:de:fd:f3:b4:
c1:14:26:29:95:32:fc:59:e1:0a:62:67:06:e3:04:97:23:0a:
ef:7e:c2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:25:24 2025 by rpki-client