Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/34787c5e-54bc-4437-bd16-56cf8e932050.roa
File: 34787c5e-54bc-4437-bd16-56cf8e932050.roa (raw, json)
Hash identifier: p5v5M9KcXdoOI8tM5lxa0j3MRnJ9EMladWakz83aJow=
Subject key identifier: 92:11:70:9D:74:80:96:70:8C:93:70:0B:35:48:A6:82:D5:FB:45:80
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1FE598F300C3D9420B1A308F506ECB6CECAC7592
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/34787c5e-54bc-4437-bd16-56cf8e932050.roa
Signing time: Sat 24 Feb 2024 00:00:00 +0000
ROA not before: Sat 24 Feb 2024 00:00:00 +0000
ROA not after: Sat 30 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e5:98:f3:00:c3:d9:42:0b:1a:30:8f:50:6e:cb:6c:ec:ac:75:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 24 00:00:00 2024 GMT
Not After : Mar 30 23:59:59 2024 GMT
Subject: serialNumber=8f83197eb53b9d5c5fb371884462d095f379b0771e529c6a3944b64aec592a48, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:47:95:32:1b:b9:07:a3:f5:15:75:48:c3:
7a:74:6f:ea:90:58:e0:47:c3:c9:70:5c:0c:ef:9b:
96:18:ee:ec:c0:24:53:8c:74:af:54:d5:12:ed:67:
18:7b:e3:c2:1d:4a:b7:32:5f:e7:2f:c8:90:e8:2b:
3a:ee:0c:d4:a9:0b:83:b9:03:85:ea:7d:20:2e:29:
c6:0f:b6:ad:b9:72:f7:53:a5:18:2d:90:2b:2e:f9:
72:6e:b3:62:a9:30:20:be:c4:a9:ac:75:a5:00:0a:
0e:00:ae:69:d7:77:cf:fe:32:88:3d:c8:5d:0c:a5:
55:46:f1:6a:4a:b4:82:2d:7d:5e:62:45:51:73:0c:
67:1a:ae:36:ae:56:fd:a6:11:f3:96:d7:3f:dc:99:
96:02:c3:1d:4a:92:4a:43:a6:70:24:48:37:7d:07:
30:4b:81:6f:51:fd:b1:1a:77:75:7c:7a:95:7c:25:
ef:61:62:90:9c:95:8c:24:ad:95:47:1b:93:7e:bc:
51:ed:36:58:a2:12:b8:88:08:26:56:12:2d:70:6e:
5d:6c:91:09:d0:50:53:59:d3:92:3b:f1:b7:c7:6b:
56:ca:18:75:7d:f0:4a:a7:dc:72:52:81:94:36:9c:
f4:a6:f9:30:7b:13:eb:06:f0:02:33:44:e1:a7:af:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:11:70:9D:74:80:96:70:8C:93:70:0B:35:48:A6:82:D5:FB:45:80
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/34787c5e-54bc-4437-bd16-56cf8e932050.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:10:c0:59:89:30:f3:2a:a9:c4:43:c3:53:2b:cb:b6:43:25:
ff:eb:cc:c3:d2:e6:ed:44:d2:95:02:de:b9:08:34:b6:08:e9:
88:88:ed:19:5a:fc:04:56:7d:b9:8d:6f:12:4a:e7:fe:73:3d:
9b:4b:4a:4d:2f:21:40:4a:00:99:98:98:b2:da:a5:67:06:b4:
3b:94:b5:8f:7b:1f:8f:40:b4:12:96:c3:92:cf:b3:35:54:31:
12:06:76:f3:b0:02:49:0b:56:27:f0:33:bd:bf:db:4e:f9:55:
1d:6c:9b:93:0a:ef:6d:03:45:ba:d2:77:e7:47:22:a1:63:4f:
fa:20:1b:86:08:97:47:64:74:dc:20:e4:ac:14:60:bd:61:9c:
87:00:9f:90:aa:25:69:0b:1d:26:bb:18:8e:42:43:16:10:ea:
cb:f0:c3:e4:83:2d:b0:25:8d:4e:c5:77:6c:f1:09:a2:1a:9c:
c4:6a:0e:63:78:f7:92:c1:22:66:14:45:ae:e7:f3:80:4e:58:
bc:59:16:56:41:13:dd:ac:fe:8f:72:c8:c8:92:6b:01:f9:a2:
09:1e:90:7f:72:5b:ba:e5:79:1c:7a:03:57:7f:27:65:4c:ce:
14:d2:7b:af:64:35:a6:00:e4:c4:2a:2c:38:ce:14:7e:9e:be:
32:b2:79:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:30:31 2025 by rpki-client