Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/113326c8-6350-4b70-aae0-8370fc68ff72.roa
File: 113326c8-6350-4b70-aae0-8370fc68ff72.roa (raw, json)
Hash identifier: WMKTw3f/B5M954HpLkHM0DUyMSTVWj7SAzkQ19pxL/0=
Subject key identifier: FB:5C:70:07:CD:46:D5:48:2B:13:D0:11:EE:79:C7:F8:7D:39:E3:85
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 27ED40CD0395C60AE404DF3F3DBCC62E4FF104B4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/113326c8-6350-4b70-aae0-8370fc68ff72.roa
Signing time: Thu 03 Oct 2024 00:00:00 +0000
ROA not before: Thu 03 Oct 2024 00:00:00 +0000
ROA not after: Thu 07 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ed:40:cd:03:95:c6:0a:e4:04:df:3f:3d:bc:c6:2e:4f:f1:04:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 3 00:00:00 2024 GMT
Not After : Nov 7 23:59:59 2024 GMT
Subject: serialNumber=68e42647a473644f3a449c5642817fcd467d4220a270dfbbd96fd20e2dec613b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:11:dc:f0:a3:8a:a9:90:26:9c:b5:34:09:
55:f5:41:16:83:2f:77:8e:ce:eb:97:bc:89:0f:9e:
b4:1f:5d:29:d2:1f:fa:3a:b5:e1:4a:67:30:1e:70:
0e:18:3e:27:84:e7:c8:fd:95:3f:f4:77:4b:97:55:
dd:32:85:2c:a5:3e:a1:75:c6:6e:c9:f8:69:71:72:
25:97:04:6b:54:29:44:58:ab:7a:9d:af:f6:70:af:
c3:2d:5f:19:06:a8:b1:0a:07:f4:fd:ce:b2:58:9a:
bb:ee:fe:7b:a3:ce:25:7f:eb:4c:67:52:1e:b7:54:
22:37:00:3a:6b:b4:92:63:09:a9:4c:dc:75:27:55:
5f:26:1a:d9:35:86:7a:f3:33:ec:53:15:06:bd:5c:
a5:1b:a3:64:06:00:90:6c:af:32:eb:aa:e8:c7:81:
2e:2b:49:a0:e2:a7:60:5a:51:2e:41:3a:26:1c:39:
6c:d8:6e:5e:b2:0c:72:a2:5b:9b:b1:1c:af:95:4d:
89:55:e3:65:f2:ae:b6:e0:51:51:31:4c:9d:4d:56:
a4:81:1a:44:3a:78:6b:33:52:aa:3d:42:b4:a5:ff:
d7:23:c2:6d:c8:75:78:80:7c:1d:35:1a:39:4d:8b:
51:a2:14:05:db:00:74:d9:75:4d:8b:37:98:54:fd:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5C:70:07:CD:46:D5:48:2B:13:D0:11:EE:79:C7:F8:7D:39:E3:85
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/113326c8-6350-4b70-aae0-8370fc68ff72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:c1:d9:bb:ea:68:0b:b6:2e:5b:08:9d:c8:42:af:ab:1f:95:
1d:f5:2e:f6:b6:fe:93:c5:f5:6f:bb:5b:23:cf:3f:d8:a4:4b:
75:1c:46:ff:17:d9:b7:29:ff:30:e9:1e:a2:1b:05:da:b1:cf:
a3:d2:6c:2b:50:d6:c2:29:da:b7:76:9e:13:c4:60:16:50:dd:
4b:1d:27:61:95:a0:65:7b:01:0a:65:72:6f:50:d1:e5:00:09:
44:06:5b:b4:b7:7c:47:df:62:8b:8a:ac:ca:61:45:74:41:99:
90:5c:08:70:ca:f8:ec:f5:b1:5c:7c:f5:13:18:6f:31:d2:13:
02:ae:df:1a:70:58:22:da:a2:ed:84:88:21:5e:95:70:08:fc:
45:fe:86:60:b1:bd:e4:f8:22:83:55:70:d8:08:61:28:7e:ae:
84:01:07:b7:d8:10:2e:d9:2b:78:c8:23:b4:a7:09:e5:1c:d4:
da:94:37:6d:20:2c:bb:2c:f3:5a:65:c4:50:dd:b7:7e:fa:9d:
03:7a:5a:e1:25:8e:74:b3:f2:99:f6:57:20:a9:c0:12:2d:f6:
9c:44:32:6f:2d:d7:cd:cf:08:e8:81:7d:d9:2a:d4:23:b3:bf:
5a:65:38:cb:5d:7c:fa:2f:5a:d7:34:e2:e1:f5:2b:d4:a1:48:
12:28:0b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:10:12 2025 by rpki-client