Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3314f96d-6d08-4f84-bc47-1703412cae1b.roa
File: 3314f96d-6d08-4f84-bc47-1703412cae1b.roa (raw, json)
Hash identifier: fr1c8RyYYDQ2Ew0XYQSfSTfpsrLFjdF3YQM6tfYkXoA=
Subject key identifier: 8A:64:3D:06:B0:EA:B5:3A:F0:E7:39:9E:A2:E4:03:22:BB:D6:0E:3A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0EF6FCFDB25226F046AAF882B27C1452F1C8E6C2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3314f96d-6d08-4f84-bc47-1703412cae1b.roa
Signing time: Sun 02 Feb 2025 00:00:00 +0000
ROA not before: Sun 02 Feb 2025 00:00:00 +0000
ROA not after: Sun 09 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f6:fc:fd:b2:52:26:f0:46:aa:f8:82:b2:7c:14:52:f1:c8:e6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 2 00:00:00 2025 GMT
Not After : Mar 9 23:59:59 2025 GMT
Subject: serialNumber=0d23c13b6f6014a6a99809e7905b250e6f8c70c455dba26b81be5f7ccb7f1cc1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:e4:72:f1:e8:54:ba:a3:13:c5:b7:3c:04:
2f:e5:56:84:b5:9d:fe:a2:42:68:e9:8a:02:bf:18:
23:66:9c:87:5d:39:8d:2b:2a:7c:36:d5:8a:38:b4:
33:7b:4d:4d:50:29:29:f2:74:41:f3:00:f7:29:14:
14:fa:95:a4:bf:40:f1:27:1d:63:71:d8:e8:f0:29:
e5:8c:4e:5e:96:60:8d:a0:ce:c6:7d:76:98:9d:9d:
e2:f3:5d:3e:13:ce:f2:48:6e:58:f4:2e:40:e2:5a:
29:26:14:26:50:e1:b3:51:63:75:ef:88:e8:6b:02:
3c:46:f7:a8:06:31:f5:e9:54:71:7c:6f:30:b7:f0:
24:a9:39:67:39:61:7b:82:b7:82:9e:12:34:07:a1:
1e:45:e4:ae:37:c6:6d:92:a6:77:b3:bf:bf:bb:3f:
0b:0d:2d:2e:9e:d2:f9:3a:3c:05:34:b3:a7:fb:80:
cf:30:56:17:f6:9b:a4:d3:35:9c:80:1d:e2:0a:ff:
c8:61:85:f1:0e:fc:0b:68:08:5e:c3:87:e1:0d:f2:
67:6a:62:98:bb:d3:d6:17:55:e4:4d:fc:c0:e9:f4:
c8:64:d5:d2:9b:06:3e:7f:9e:9d:7a:f9:9c:6a:f9:
46:25:02:13:37:f0:e2:54:0b:d6:b5:84:e9:ab:1e:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:64:3D:06:B0:EA:B5:3A:F0:E7:39:9E:A2:E4:03:22:BB:D6:0E:3A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3314f96d-6d08-4f84-bc47-1703412cae1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:12:35:2e:33:a6:34:09:3a:62:37:59:27:4a:8a:1a:e7:4f:
65:6d:8b:dc:a9:30:bd:2b:15:80:94:50:3d:45:f0:c5:d0:29:
b3:0d:13:e7:26:35:6d:d1:62:e0:37:88:bd:04:90:70:92:5a:
38:a4:45:f7:ea:61:2a:00:a5:0b:49:ff:12:00:41:51:ef:a3:
ec:a5:ae:30:b2:7f:ef:20:52:ad:cb:6e:87:91:23:87:34:47:
f6:f3:d1:69:79:92:61:28:44:98:c7:a5:04:af:16:90:ca:85:
63:3f:c4:00:6a:84:30:c7:9a:9d:a8:5d:1c:da:9a:5d:04:9e:
a9:af:9c:54:11:64:f7:7d:ff:5b:5f:16:99:4b:00:54:24:c8:
4d:c4:95:a6:7d:7c:30:7b:2d:fd:ee:ae:57:46:b7:61:5a:eb:
b9:8b:02:75:f2:a0:00:7d:04:6b:2e:9d:1f:c4:36:7f:76:fb:
b9:9a:2c:96:e3:d0:52:63:d1:cf:e8:d8:0a:12:45:d1:dd:8d:
b4:f6:21:4d:88:ff:7f:3b:0b:0f:e3:76:79:f8:47:7f:7d:47:
57:97:ed:24:2e:ff:64:9e:25:15:49:8d:7e:45:b1:13:f1:d5:
5f:5f:73:93:c8:58:93:ce:d5:2b:59:f1:b7:dc:3b:11:1f:c2:
75:0a:ad:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:43:56 2025 by rpki-client