Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2eaa1d3e-7657-440a-8a96-aef5589d6996.roa
File: 2eaa1d3e-7657-440a-8a96-aef5589d6996.roa (raw, json)
Hash identifier: aRS3Jy7OMRCwgr0rnq9RyaTRE/WqW2Ts33f5E1Jkyq0=
Subject key identifier: 32:8C:4D:1F:8C:AF:7B:C0:DC:21:0A:C6:EC:77:71:72:1A:53:CB:13
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7E1346DA4BB9D42E87338264A12AB1E4F1B23AC8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2eaa1d3e-7657-440a-8a96-aef5589d6996.roa
Signing time: Tue 04 Mar 2025 05:48:22 +0000
ROA not before: Tue 04 Mar 2025 05:48:22 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:13:46:da:4b:b9:d4:2e:87:33:82:64:a1:2a:b1:e4:f1:b2:3a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 4 05:48:22 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: serialNumber=2f7c19e1ef21205c9faf0a89560dc0380040a1bc8eb6a356a5e289c4d0329378, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:15:33:e0:a3:c4:a4:ea:1a:da:cc:13:eb:
ff:82:5b:f2:36:df:35:fd:6d:e3:62:34:2f:8c:cc:
f7:3b:16:15:81:35:1e:6b:7f:b6:33:88:e1:c6:38:
7c:7c:81:68:5b:50:d5:1e:81:12:d2:5c:a8:70:a5:
db:ad:6b:14:76:c3:14:e6:a5:b6:2c:e7:0d:af:7b:
45:df:a2:c9:2c:05:fe:ff:3c:55:23:77:6b:2b:4e:
b8:33:f4:f1:23:6c:7f:8f:b1:d9:35:e8:57:4f:87:
f4:6d:f2:20:60:8d:48:1e:e2:2c:de:01:f0:75:22:
f3:4b:b3:f3:66:07:b3:1c:7c:ed:2e:69:f5:c1:1c:
7e:20:d8:52:33:16:38:c5:b4:58:35:68:5e:88:30:
94:bc:a2:ab:31:bf:54:9d:e9:85:0d:67:2e:d7:66:
fd:07:58:32:49:e1:54:9a:32:d6:4b:ed:16:39:8f:
71:d5:04:62:ef:a1:c1:e1:56:4f:01:4d:e7:b0:0f:
e9:d4:05:4f:99:9c:8a:f3:da:7b:8c:ef:6b:de:d9:
01:ea:46:2e:c4:39:e3:b6:e3:0d:ea:ad:c5:c8:88:
12:ad:14:75:be:8f:f5:4b:82:de:40:01:5d:7d:5d:
fe:cd:c6:19:91:81:59:ab:b8:df:a4:3a:06:3b:07:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8C:4D:1F:8C:AF:7B:C0:DC:21:0A:C6:EC:77:71:72:1A:53:CB:13
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2eaa1d3e-7657-440a-8a96-aef5589d6996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ab:1d:03:8d:8b:80:15:3d:03:e7:8a:9b:22:97:b0:60:3e:
04:ce:45:75:1f:c1:4a:66:81:0a:0b:9a:05:84:cf:d9:85:f7:
e1:60:87:6f:ae:ad:d7:5a:03:ab:e1:ab:0d:a6:34:fb:bc:0a:
84:ed:70:fe:30:ba:bd:28:fe:b4:df:df:1b:cb:7f:0b:51:6e:
da:f4:0d:67:19:f0:85:05:0a:4c:f4:b3:58:15:fc:88:41:eb:
9f:b6:00:4d:21:57:d5:b9:28:a1:8b:c8:f9:e4:1f:c3:9e:1b:
e4:02:b2:3d:41:00:6f:d1:65:af:20:1f:48:1d:fd:59:cc:75:
5d:bd:33:00:9f:30:f2:99:65:cf:ac:13:da:60:e2:24:ce:c7:
36:8f:49:57:64:62:f5:54:30:d8:e8:a8:4a:db:45:10:1a:8a:
dc:4f:b5:ff:fe:ef:92:e7:4c:51:31:f7:f8:d1:7e:ef:be:32:
38:51:cc:54:fc:4e:73:ff:70:f5:27:1b:af:4a:94:b3:e9:b7:
70:8d:be:a3:18:14:42:9a:88:6d:b1:11:81:a4:66:ec:98:06:
f8:ee:9e:56:61:13:3a:bf:36:09:9b:7e:88:82:5f:c7:5d:aa:
55:65:97:d1:b1:73:6a:02:fb:15:03:da:60:0a:18:95:46:71:
86:1e:c8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:54:34 2025 by rpki-client