Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7751477e-8e0e-422c-853c-9bb5079ca6c6.roa
File: 7751477e-8e0e-422c-853c-9bb5079ca6c6.roa (raw, json)
Hash identifier: 3pftUhgsziGBo0cQbX0bPiVFZ2PpHaALukw/8QH+8Wg=
Subject key identifier: BA:72:5D:80:CF:72:73:CB:32:EF:A2:51:E8:2D:EE:76:BB:FF:E7:77
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 44FDC008290C3758533C62F5CF9E9B303E880DF6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7751477e-8e0e-422c-853c-9bb5079ca6c6.roa
Signing time: Tue 26 Nov 2024 00:00:00 +0000
ROA not before: Tue 26 Nov 2024 00:00:00 +0000
ROA not after: Tue 31 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:fd:c0:08:29:0c:37:58:53:3c:62:f5:cf:9e:9b:30:3e:88:0d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 26 00:00:00 2024 GMT
Not After : Dec 31 23:59:59 2024 GMT
Subject: serialNumber=715d2014d75871bf10fc9d898fc519269694581772dea524019b3039cedf45ff, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:13:ac:bc:9a:30:42:80:fa:88:87:68:5a:
e8:b0:93:ad:54:40:2d:90:81:67:d1:a5:b0:3a:23:
f8:13:49:84:c4:b8:c5:ec:9a:6b:22:3d:82:d9:7f:
4e:b9:e6:ab:4c:91:7f:c0:b9:39:74:e1:16:c8:64:
e4:54:13:44:ed:25:03:1e:7a:44:e8:42:a9:94:a3:
58:81:21:5d:4a:f9:e6:d3:9d:e9:10:d8:ee:9c:97:
ba:b9:c7:77:ef:fd:21:fd:52:5f:5a:ce:33:81:99:
67:a7:eb:bc:c7:c5:49:a0:0c:36:7c:57:73:4d:53:
62:67:22:86:28:65:2e:1d:fd:4f:1c:07:1d:3a:63:
dd:aa:65:91:73:d3:df:51:c3:61:f9:cc:3a:a2:98:
2f:bc:f4:62:33:3b:4a:01:34:78:76:06:8e:2e:7c:
22:07:a2:fa:e1:8c:44:25:ed:97:13:a6:72:a8:67:
b4:08:44:b0:7f:a1:05:26:dd:b2:9c:01:30:8e:60:
a9:4f:be:a7:8b:06:90:9a:dd:c6:2f:1d:87:d6:bf:
de:e2:77:1d:6e:82:85:f2:39:1a:ee:b5:80:6b:d8:
01:8a:38:93:c0:ea:c6:81:e2:fc:f7:e7:4e:f3:24:
16:d8:31:1b:ec:13:15:45:a1:8f:7a:d3:d1:fd:5a:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:72:5D:80:CF:72:73:CB:32:EF:A2:51:E8:2D:EE:76:BB:FF:E7:77
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7751477e-8e0e-422c-853c-9bb5079ca6c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
52:cd:3e:0e:85:47:6f:0c:15:7d:64:9d:cb:f0:78:19:72:00:
17:89:32:f2:3a:7b:5a:73:69:20:ae:53:51:b2:02:6f:5a:c5:
93:2c:90:f2:f8:f8:78:9c:3a:19:4c:d6:53:d1:ed:1e:9c:5e:
b9:58:65:8c:b5:c5:57:0e:c5:44:d4:dd:0d:cc:f4:f8:2e:2a:
c4:03:25:19:41:fe:bf:cf:f3:0f:45:26:d9:6d:97:34:08:b5:
63:07:95:cc:98:8f:6b:a4:77:62:b3:5c:da:ec:e4:2c:77:ec:
b4:7f:67:e6:4b:62:e4:ab:0d:fa:70:68:73:52:c1:47:44:d9:
2c:9f:06:a5:4b:ee:78:1d:f9:b3:e9:f9:22:c6:f2:dd:02:80:
50:10:02:c7:ec:d5:57:db:d0:bf:b7:6d:5e:0d:3b:96:ae:e4:
c8:66:3c:2b:e1:11:93:f8:28:79:99:31:f5:5e:f5:67:e9:80:
92:01:bd:0e:bf:9e:fa:fb:3c:16:bf:57:0a:00:4b:a4:ec:cb:
f1:41:fc:b1:68:08:27:21:c3:e0:c1:76:dc:df:6d:be:70:3f:
19:04:ab:8d:f4:f3:e4:53:2e:4b:79:10:b0:49:b0:27:a8:85:
00:3a:70:35:d0:71:ad:2e:b1:ea:a5:51:bd:50:42:a9:d8:fd:
a9:ca:f4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:06:07 2025 by rpki-client