Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d42224c-f7a6-4acd-902c-966ded3d6787.roa
File: 0d42224c-f7a6-4acd-902c-966ded3d6787.roa (raw, json)
Hash identifier: mJtjuOClZK0WylGXzFSqLw3t2Im8W61A5tNo66lrucU=
Subject key identifier: A0:B9:FF:67:DC:59:25:ED:B4:E8:C6:B0:74:59:DC:81:69:69:83:35
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3A4D37AB1408F2A66FE2F48DA24C978D4C172F34
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d42224c-f7a6-4acd-902c-966ded3d6787.roa
Signing time: Fri 21 Feb 2025 05:03:21 +0000
ROA not before: Fri 21 Feb 2025 05:03:21 +0000
ROA not after: Fri 28 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:4d:37:ab:14:08:f2:a6:6f:e2:f4:8d:a2:4c:97:8d:4c:17:2f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 21 05:03:21 2025 GMT
Not After : Mar 28 23:59:59 2025 GMT
Subject: serialNumber=6d33d91470e21287186308f2210c43d8b676e77be5d6daef7e8f3fa8ee25107c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:e0:ce:31:ac:1f:2e:20:ab:f5:76:ad:f7:
be:bb:ac:ee:77:30:24:66:08:e3:38:10:b5:1b:dc:
10:65:48:f9:00:8e:4c:3a:d6:65:55:61:fa:73:45:
33:3f:2e:36:cd:9f:76:05:be:4d:51:51:35:bb:5d:
c8:b4:b8:59:5a:d8:4a:b0:83:b9:81:fe:14:ad:3d:
66:e8:bc:26:78:9d:78:98:62:20:49:14:4d:de:aa:
0f:1a:15:f4:35:d1:4e:b4:21:f0:6a:f5:5b:88:f7:
c7:ce:e9:28:ea:d2:81:94:c5:c3:9d:7f:a0:06:df:
00:53:f0:48:64:12:b1:0c:b5:68:4a:cf:36:7c:1c:
f5:87:56:30:4f:58:9c:86:64:ef:5b:65:20:2c:51:
ed:a5:17:13:75:fa:c2:61:54:9d:83:dd:9f:7b:a9:
5a:7d:02:16:d3:60:21:41:08:1b:87:54:a2:0f:73:
a8:fe:50:5d:16:48:b1:c1:a5:b3:49:a8:e3:5c:24:
cc:66:e0:a0:2e:1a:db:6b:8f:72:07:30:c8:35:d6:
6e:1d:b4:45:58:e3:65:d0:3f:1b:50:42:5f:49:e2:
51:48:2c:c2:4f:da:c6:34:a9:81:2f:02:4c:a9:23:
aa:37:2b:63:10:85:42:e1:58:5e:3c:25:68:3a:0c:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B9:FF:67:DC:59:25:ED:B4:E8:C6:B0:74:59:DC:81:69:69:83:35
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d42224c-f7a6-4acd-902c-966ded3d6787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ff:ec:8f:11:ad:d5:f3:77:5e:24:a1:a7:29:9c:02:ba:44:
fb:8a:50:02:e2:a8:6c:7b:87:59:2b:77:27:96:33:cd:f5:3a:
51:4b:4a:e0:f4:c9:90:80:01:f2:b2:e5:ee:2b:5b:8c:ab:a4:
87:97:ba:fc:4c:6c:c9:be:86:cd:fb:94:fe:9d:e7:66:7b:1b:
b9:d2:90:a9:08:08:e7:1b:fe:74:31:16:b7:2e:76:bc:db:16:
f2:17:3c:eb:aa:0f:35:5b:55:6a:8e:49:b9:38:31:44:93:07:
64:eb:9c:77:e6:3c:0a:79:5c:6b:e8:f0:e6:f2:06:33:84:15:
92:46:79:d9:5d:df:98:7f:9e:9e:9d:7b:03:c6:cc:77:1a:80:
26:5e:8f:6a:5c:91:eb:d6:d1:70:46:92:ac:da:20:3d:d4:04:
5a:ed:b5:f8:e2:88:89:3b:fa:a8:90:97:d3:9e:21:45:ed:f6:
86:ec:65:d9:2f:9f:b8:15:25:3e:2b:97:81:70:f6:49:4d:25:
50:87:ea:4d:ac:af:91:c8:e5:a8:e3:c5:fa:de:6b:08:25:75:
5f:46:f1:c8:bd:e5:7c:1c:59:b8:41:a2:7d:1f:7e:35:ed:a1:
e8:80:9b:0d:1d:cf:89:13:ef:bc:a0:64:43:4f:78:b0:64:a3:
75:34:0a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:23:19 2025 by rpki-client