Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2b18d616-c83a-408f-8fbc-18a7a42972bf.roa
File: 2b18d616-c83a-408f-8fbc-18a7a42972bf.roa (raw, json)
Hash identifier: wslCKTHan9RkpSMFXzxHrD5hO1wXhhsUHUd78FWb490=
Subject key identifier: 41:F7:D0:96:6E:97:9E:6E:17:B7:D1:CD:41:2C:47:5F:8E:0A:49:52
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 05E24EDC8B1C32E60FA894A4D353F6D78EFE0A60
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2b18d616-c83a-408f-8fbc-18a7a42972bf.roa
Signing time: Fri 21 Feb 2025 08:58:20 +0000
ROA not before: Fri 21 Feb 2025 08:58:20 +0000
ROA not after: Fri 28 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e2:4e:dc:8b:1c:32:e6:0f:a8:94:a4:d3:53:f6:d7:8e:fe:0a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 21 08:58:20 2025 GMT
Not After : Mar 28 23:59:59 2025 GMT
Subject: serialNumber=f17fb4e813bb0caafbf4a7d17bb7d1f6a2411a55967deb8f5f1223f063b501a3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:92:b8:a8:a5:fa:1f:3c:05:a3:51:94:96:
dc:f6:61:33:00:d9:cd:22:41:d9:23:bc:1c:90:4b:
8d:02:de:01:af:27:4f:38:db:2c:91:9e:5f:ca:75:
f7:4e:24:4b:78:e7:fd:46:e7:1a:75:c2:e4:3a:f7:
59:e1:54:25:16:a1:f0:e3:ca:65:3b:8f:53:ba:e0:
10:0f:6c:c7:07:f2:01:d9:59:96:84:c4:5d:89:48:
f4:78:b1:8f:df:7c:d7:16:77:48:41:94:93:08:8d:
25:8d:6e:ee:cb:86:0b:a3:b1:fa:a8:c0:eb:20:4a:
4a:0c:70:e5:e6:b5:76:ee:78:49:f2:f9:e1:07:7a:
5d:e4:91:e8:6c:9c:22:31:bd:d5:5d:a8:3b:10:09:
1c:0d:35:b3:a9:82:1f:2a:74:57:3b:9a:3d:72:cc:
8e:8c:4f:21:8c:7b:63:bd:e2:7f:69:c4:1d:4c:59:
a9:21:c9:fc:26:66:da:a7:dd:a7:06:db:9e:7c:ab:
8a:78:19:14:8b:aa:91:3a:3e:b8:f3:03:78:a2:ba:
47:52:d2:87:c1:b6:e0:43:89:42:09:68:e4:f6:fd:
83:7d:7d:cc:cd:30:34:a2:44:e4:cd:91:ac:58:45:
44:75:c9:f7:ea:36:01:5a:44:4d:af:01:ef:ba:eb:
bf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F7:D0:96:6E:97:9E:6E:17:B7:D1:CD:41:2C:47:5F:8E:0A:49:52
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2b18d616-c83a-408f-8fbc-18a7a42972bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
46:47:e5:ca:ab:60:cf:4f:d7:d1:c0:29:7d:23:1e:bb:fb:98:
29:fc:df:81:4d:8f:d2:4b:fa:e0:79:34:6c:70:ce:7a:b5:8a:
0f:d4:6b:56:cd:50:13:68:3e:27:2f:82:9a:d5:55:55:b4:11:
7b:b4:f7:5a:a8:1e:4e:6d:ec:ec:2b:4f:c0:74:b7:49:01:ea:
4f:bb:32:5b:29:31:5e:ab:ec:23:f0:cd:ae:22:5a:21:39:0f:
1d:7e:f2:9b:6a:57:41:43:f4:01:f8:67:84:47:89:e4:ef:85:
92:fa:6b:2e:0a:f9:99:cf:7f:60:55:1c:bf:ce:2d:ca:05:0c:
46:94:bd:17:72:cf:59:ba:e4:d9:2e:e0:47:32:33:8e:e7:5d:
e4:26:12:6c:af:5a:96:57:b6:52:fd:ab:48:ce:b5:af:10:0c:
af:69:9c:53:80:1b:b1:09:01:c4:0d:e4:a5:88:de:d9:50:59:
33:7f:52:4b:a5:7f:ad:1b:bd:a9:ee:08:5f:c4:1b:ee:30:9c:
59:4e:38:98:e7:2e:50:4f:d8:79:ac:45:bd:7f:53:08:df:14:
44:6a:e5:51:20:34:18:ba:98:f6:81:af:fd:b0:c6:8c:0f:8e:
40:03:c9:b3:fb:3e:c7:f3:80:41:0f:a2:7e:2a:7a:58:d7:16:
48:93:7d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:43:43 2025 by rpki-client