Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0de02c0b-83b4-4189-a802-ed9cc9bfb59a.roa
File: 0de02c0b-83b4-4189-a802-ed9cc9bfb59a.roa (raw, json)
Hash identifier: nXDMaiGhdQDJHvjLoNI5UEdglFnDePnpb5judB2dzqo=
Subject key identifier: 5F:FA:DF:09:48:3D:C6:6E:26:7F:FB:24:8A:96:6B:C5:B6:7C:D6:B4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 390F46ADA6D626D2B018883CC48E56113E66D868
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0de02c0b-83b4-4189-a802-ed9cc9bfb59a.roa
Signing time: Mon 26 Aug 2024 00:00:00 +0000
ROA not before: Mon 26 Aug 2024 00:00:00 +0000
ROA not after: Mon 30 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:0f:46:ad:a6:d6:26:d2:b0:18:88:3c:c4:8e:56:11:3e:66:d8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 26 00:00:00 2024 GMT
Not After : Sep 30 23:59:59 2024 GMT
Subject: serialNumber=69cd77ab6437ec5296f72c567bd86f9c4c1d004b09b4a6c9aec43881b0669123, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:96:d4:d3:84:40:cd:46:1e:2a:0b:8c:e3:
ba:ba:11:32:38:b6:06:dd:b0:ea:5e:c7:cd:37:c1:
db:ca:32:81:20:10:de:75:cc:56:64:dc:02:58:b9:
ca:c7:cc:84:bc:e2:72:6d:cc:55:82:ee:82:0a:d2:
fb:6c:19:ac:75:2b:40:86:0d:82:74:aa:9f:a4:03:
d7:7a:11:ab:a0:8e:54:1a:45:06:60:9a:a9:20:a8:
20:b3:85:fb:bc:ba:c2:c7:ca:9a:4d:8c:25:6b:1d:
23:67:17:ae:64:5a:ac:91:7f:e6:bd:4d:14:4f:be:
15:84:a4:23:b9:1f:39:4c:74:36:41:6b:c6:9e:b4:
d7:5d:11:ad:c7:b1:b3:a7:48:cd:48:58:df:51:bd:
68:14:0e:32:10:05:4d:9d:30:7a:c1:13:d1:6d:25:
ab:b1:62:bd:f0:eb:01:f0:54:b9:4a:90:a3:bb:92:
bf:b2:fb:3a:d3:00:14:e9:58:31:76:bc:59:e8:97:
b2:ff:8c:22:7c:5e:84:b7:66:0a:43:98:f6:2c:54:
1b:60:62:25:e6:cb:ae:5a:bf:c9:09:3a:e5:5e:28:
fa:4e:d6:dd:90:f0:21:b2:df:62:20:65:73:6a:1b:
b7:b9:c8:c1:27:91:90:eb:89:61:c6:17:01:2b:c1:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FA:DF:09:48:3D:C6:6E:26:7F:FB:24:8A:96:6B:C5:B6:7C:D6:B4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0de02c0b-83b4-4189-a802-ed9cc9bfb59a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:9f:a0:77:c2:62:b6:d1:1a:b8:20:26:be:13:1d:35:ac:a9:
a7:6b:43:5f:a7:92:8f:bc:d6:8d:da:b5:ad:de:f0:f6:ed:b4:
36:d1:78:90:4b:72:e6:0b:ba:5a:c5:26:eb:cd:21:23:f2:6f:
1f:21:8d:58:6b:e2:8d:67:9a:bf:25:8c:92:00:99:de:24:eb:
7a:f1:4f:d5:c3:ec:47:85:ef:12:0c:d0:74:41:c2:b3:4e:e1:
c8:45:bf:3e:8a:04:bd:34:db:77:e0:3e:4f:a1:e3:1f:e3:4a:
12:d7:77:1a:02:58:e5:3e:e1:b4:57:45:ad:9e:ae:e9:4c:e2:
55:c5:e2:ad:94:40:9a:57:d4:78:9f:8a:38:2e:cf:55:cc:12:
9b:95:4f:8b:5e:88:37:22:63:f2:a6:89:62:f0:e2:fe:66:f7:
2d:69:99:0b:fc:cb:01:55:a1:69:72:fa:d6:64:0b:44:99:20:
eb:65:21:97:1c:f7:ef:4d:6d:f8:0f:2a:5e:d1:4e:62:99:23:
b1:72:e0:37:50:59:da:02:71:c5:c7:70:91:9c:f0:29:d2:4a:
fe:cf:73:c0:1e:48:68:22:d1:59:f6:92:2d:78:2d:65:74:4c:
73:55:70:60:f1:ac:5f:45:fb:7a:8e:06:99:22:93:f7:29:5d:
78:f1:10:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:35:45 2025 by rpki-client