Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/382f8660-8e5e-4b44-ba1d-eff0c584564e.roa
File: 382f8660-8e5e-4b44-ba1d-eff0c584564e.roa (raw, json)
Hash identifier: zr1W+Dn0gU9xW4z+RCFl4inmZQZZvCK8ToyBvygS1Go=
Subject key identifier: 22:08:82:83:18:3D:F3:D8:2D:5F:DD:66:AF:21:C1:0A:71:42:36:32
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 421CC0B3913A624E786689D78D0EF78E559A2945
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/382f8660-8e5e-4b44-ba1d-eff0c584564e.roa
Signing time: Wed 22 Jan 2025 00:00:00 +0000
ROA not before: Wed 22 Jan 2025 00:00:00 +0000
ROA not after: Wed 26 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:1c:c0:b3:91:3a:62:4e:78:66:89:d7:8d:0e:f7:8e:55:9a:29:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 22 00:00:00 2025 GMT
Not After : Feb 26 23:59:59 2025 GMT
Subject: serialNumber=c957346851bce0f82e209cf3965daf1e87f4920c54f21e94015f1f5b9d3ab208, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:90:5c:25:b1:a5:81:be:72:61:db:eb:0b:
06:79:5b:cf:c2:1e:07:40:07:47:de:af:3e:66:15:
82:fb:70:f0:5b:3c:67:a9:d1:eb:0f:8a:04:4a:e2:
dd:46:95:71:d8:2a:03:90:03:6d:39:3b:56:9b:b4:
e4:16:3b:1a:42:bf:9a:b4:63:68:f5:39:bf:c9:4b:
66:93:ef:04:f1:6b:04:bd:03:22:90:51:65:f6:00:
3b:cd:25:18:cc:c0:6c:ad:b0:33:cb:1b:4c:1c:a1:
bb:69:19:24:7a:07:2f:d8:94:b7:10:be:87:b5:02:
90:35:f3:99:34:0d:2f:e3:64:4d:23:97:0d:e2:eb:
27:3a:88:56:16:ca:a7:f4:c0:19:3f:3f:b3:4e:fc:
82:61:96:f0:e5:a6:2f:b7:a8:d3:b7:09:13:f8:b9:
fe:85:d5:65:e7:b7:56:ba:ce:51:50:de:25:d1:5e:
b7:84:ab:dd:df:e1:19:9c:c6:5c:4c:b6:5e:27:58:
c4:ed:83:55:89:0d:3c:4e:af:1c:14:65:b7:28:84:
da:05:cb:77:93:0c:cf:ee:f3:6b:bc:3f:42:5b:1d:
c6:e2:dc:37:c8:ef:77:c6:e4:f1:bc:97:b1:0d:33:
10:8c:ad:7c:72:08:70:27:6f:ff:5e:a7:22:28:a4:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:08:82:83:18:3D:F3:D8:2D:5F:DD:66:AF:21:C1:0A:71:42:36:32
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/382f8660-8e5e-4b44-ba1d-eff0c584564e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:3a:00:71:c4:52:f7:40:d8:9f:78:d8:25:a1:7e:49:65:72:
f3:8d:fd:6b:71:5e:86:86:4e:d4:73:1e:66:cb:7a:fb:2d:50:
f4:d1:3f:ef:17:0d:01:11:97:bd:9b:ed:65:b4:1e:7d:52:d3:
f7:06:77:f2:00:58:fd:85:9f:d8:40:a7:57:2f:b2:2e:56:d8:
54:c0:bb:c3:23:65:77:80:4c:e9:c6:34:c3:87:a7:f1:17:a6:
27:47:50:76:fa:fa:be:52:df:df:79:b8:52:5f:ac:49:8a:61:
b9:b3:b0:40:5d:7c:9c:a5:0f:14:8d:e4:30:24:ee:ff:e8:e8:
8b:b8:32:68:0c:17:c9:ea:49:3b:42:77:8b:3e:df:bf:31:a1:
ce:d4:69:68:78:b0:3b:7a:a1:16:1a:c2:8a:63:df:70:74:36:
7f:d7:85:02:e9:31:db:87:e4:1a:55:6a:a5:c0:58:9f:e6:3a:
33:c1:bd:cb:6d:59:2b:a9:d0:79:51:0b:4e:0b:29:b7:7f:05:
de:70:0b:3e:aa:50:1f:d1:3e:96:39:39:fe:5d:cc:83:c4:3d:
9f:fb:d1:4c:1a:34:8e:46:5c:eb:2a:af:9d:45:ce:b0:1b:f1:
fb:54:95:fe:bf:e7:e2:87:06:3e:19:b1:4f:f1:91:06:1c:57:
1d:c6:a6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:21:42 2025 by rpki-client