Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/45bda023-8852-4ec1-8f07-a9ff5f67a5dd.roa
File: 45bda023-8852-4ec1-8f07-a9ff5f67a5dd.roa (raw, json)
Hash identifier: aWikxYVcPS4nAa9/gR4qYoRjeUGJuQ+IWJt9JfQL3Oo=
Subject key identifier: D5:33:FD:66:9E:0A:E3:EE:FB:0E:20:51:28:50:69:A2:3D:FF:08:C6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1216CAAC70E83653C129BEF1F13551AEB6504378
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/45bda023-8852-4ec1-8f07-a9ff5f67a5dd.roa
Signing time: Fri 21 Mar 2025 21:48:17 +0000
ROA not before: Fri 21 Mar 2025 21:48:17 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:16:ca:ac:70:e8:36:53:c1:29:be:f1:f1:35:51:ae:b6:50:43:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 21 21:48:17 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: serialNumber=9a48d69472c49374d1dadee8e06c33470cc11568db2b5d7eeeeb6ea1a3744a05, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:be:45:a9:c3:b2:ea:d4:c1:df:3b:39:11:
85:ef:87:f6:7e:02:f8:6a:2c:88:27:71:33:4d:c4:
55:fa:2f:88:03:32:38:49:43:d7:86:0e:45:05:5a:
41:6c:b6:31:14:9f:18:b1:96:b4:03:2c:7f:0f:36:
fc:d0:05:da:7d:d6:57:11:a2:08:51:29:cb:d4:33:
f5:f6:dc:af:f0:7a:f9:a6:76:e5:34:cc:4e:02:29:
bd:3f:f2:26:ff:1b:7e:31:61:cd:91:02:84:71:5a:
40:6e:fa:73:2f:a4:a3:f7:17:23:1d:c2:62:a0:e1:
5b:b5:a9:ab:c8:2d:98:7c:5e:bc:ab:36:44:6f:40:
ce:7f:fd:a5:2b:41:fc:c8:af:c3:52:ef:1d:ea:45:
ee:8f:9a:b3:e9:ea:dc:ee:78:c7:35:68:7b:41:c1:
e9:4f:71:d1:51:e0:c5:16:96:24:e9:04:04:1b:15:
ee:c2:c3:60:87:9a:14:7a:10:c7:dd:f7:2a:58:6c:
f0:09:fd:10:03:36:c1:b8:31:c5:a5:db:4d:90:0e:
67:30:e7:34:dd:9b:dd:64:c8:3f:2d:02:6d:bb:8a:
d1:fa:65:00:ce:8d:61:76:d3:15:ef:45:7a:07:a7:
a6:81:5b:32:00:9c:3c:83:25:a4:b1:6b:22:1a:7d:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:33:FD:66:9E:0A:E3:EE:FB:0E:20:51:28:50:69:A2:3D:FF:08:C6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/45bda023-8852-4ec1-8f07-a9ff5f67a5dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
56:1b:2f:3d:76:c7:fc:6d:f6:4e:bf:fb:1b:e6:67:48:38:21:
4a:20:7f:3a:ce:ff:7b:50:25:8b:ec:26:6e:05:9d:01:23:2d:
ff:34:a9:cb:86:01:f8:37:38:da:3d:db:21:0a:98:ba:bc:71:
d7:98:6a:d8:e2:63:c0:ed:a3:fb:0a:4b:df:34:63:18:8e:00:
62:fc:3f:2c:bf:ce:b1:b3:8c:cd:30:51:13:06:6f:05:40:69:
30:14:77:f6:c4:1e:a0:44:c1:51:7b:b2:d7:f2:3b:7f:c8:3f:
61:21:40:68:46:d9:0c:9d:1a:07:bc:71:17:1b:ab:ce:60:94:
66:fd:05:b1:d6:e0:58:72:52:1d:65:63:fb:16:88:71:15:60:
5d:35:39:fb:c7:6b:67:a7:4c:dc:c6:46:b3:00:60:b5:5c:cb:
24:e1:e6:9c:5d:00:7d:95:f0:30:c2:04:3b:6a:2a:73:f1:ce:
c1:d1:56:cf:e9:44:c6:af:f8:85:eb:77:c3:08:d0:3c:cf:5f:
d8:48:3c:7d:ed:f6:30:e1:ca:f7:c7:05:8a:c7:41:39:ec:b8:
ed:7b:1c:86:1e:22:82:8e:5d:af:0d:40:50:cc:15:74:93:56:
55:8d:d7:73:0c:82:e2:40:c7:89:df:69:3d:08:50:0a:55:51:
ff:7f:19:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:43:13 2025 by rpki-client