Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c134128-aa3f-4008-8658-5e5b96c0ae65.roa
File: 7c134128-aa3f-4008-8658-5e5b96c0ae65.roa (raw, json)
Hash identifier: eR410LnybdC1lb7sBFN/46Cjlst61YmCfTkX98Aar3Q=
Subject key identifier: 72:BE:54:81:1F:36:8C:6F:A1:DA:C9:0A:11:1D:DB:A5:01:6E:56:E2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2CF2334BB78E5E0A57B800675B0F3A77892C7FF5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c134128-aa3f-4008-8658-5e5b96c0ae65.roa
Signing time: Sun 16 Feb 2025 10:43:22 +0000
ROA not before: Sun 16 Feb 2025 10:43:22 +0000
ROA not after: Sun 23 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f2:33:4b:b7:8e:5e:0a:57:b8:00:67:5b:0f:3a:77:89:2c:7f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 16 10:43:22 2025 GMT
Not After : Mar 23 23:59:59 2025 GMT
Subject: serialNumber=76521b50004f6472ac9c028f13b9a72e48e1c25e47e472963dd19af875c4d20d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:d5:67:1a:dc:37:e9:8e:ce:0f:ba:8e:aa:
6b:38:a1:f0:88:c5:37:54:56:68:fa:28:77:02:1b:
17:64:05:29:c1:1e:df:e2:14:fc:d2:80:f3:90:83:
50:50:e6:6f:d3:ec:db:70:14:eb:55:3b:51:80:54:
a0:21:a0:95:56:c9:b5:5c:47:f4:04:3c:72:b0:e9:
02:2e:5e:f6:7c:96:b4:6f:94:22:fc:16:c1:8e:12:
12:5f:96:19:a0:48:0f:a0:8d:61:ba:99:c7:13:73:
fd:4a:da:6b:01:25:31:77:95:eb:c5:cd:b0:c7:05:
4a:a8:c8:01:af:3d:b7:b4:0e:b5:61:e9:1a:6f:30:
09:05:98:ba:c5:09:f0:e4:d8:3e:f1:61:10:20:48:
bf:48:44:23:8d:18:b1:4b:1f:65:e6:2f:49:19:f0:
dc:50:20:59:4b:62:b3:c2:3b:43:52:4c:e7:83:71:
d4:4f:b2:c0:21:0f:de:36:08:c4:13:5d:d2:1a:8f:
9e:27:e7:9b:39:fa:59:ce:de:5e:b9:75:c2:c6:b8:
2d:f6:b2:bb:d9:28:5e:a4:be:5c:0e:3d:c6:66:c4:
2f:43:8c:17:28:89:50:bd:24:55:1a:aa:be:b9:25:
c9:83:62:cd:70:ee:35:6d:f0:12:36:15:5d:81:f5:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BE:54:81:1F:36:8C:6F:A1:DA:C9:0A:11:1D:DB:A5:01:6E:56:E2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c134128-aa3f-4008-8658-5e5b96c0ae65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
93:66:1d:45:a4:42:c4:d6:0e:b5:48:79:6b:05:93:83:f2:8b:
fc:52:bf:e2:2b:b8:38:93:af:32:1d:02:a4:52:ef:9b:3c:63:
9c:25:86:89:6d:a1:45:bd:3e:15:0e:88:22:5c:15:a3:9e:a3:
81:5e:85:ab:c8:3f:51:5a:af:eb:2a:f2:db:02:28:41:ac:99:
6a:7b:ee:07:a2:f9:b4:47:fc:f4:e4:e0:ee:46:5e:c9:8c:4e:
eb:d1:68:8f:44:3a:83:ad:04:c6:15:7c:c1:1d:c6:44:90:ad:
cc:ca:36:4e:b2:8f:8c:0e:37:0f:c3:58:b8:5f:e9:9a:d7:02:
93:3a:91:73:a7:43:61:73:4e:05:0a:d0:a8:a9:90:e4:7e:1c:
8c:23:8c:04:b2:88:01:b8:77:1e:f4:e3:11:c5:b4:7d:c7:b1:
eb:d2:c4:d3:a5:dc:0a:ef:9e:70:ca:51:d8:64:bf:a8:38:c7:
40:46:db:28:83:da:71:c0:ff:d0:56:29:c6:46:34:74:05:6e:
52:50:8c:db:c3:6e:d4:fd:5f:af:fa:71:95:e0:c4:b4:2b:7a:
18:b1:23:ed:05:f1:5a:cc:82:43:76:67:6e:8a:eb:0f:61:09:
bf:c4:cf:73:21:d7:e2:63:a8:f7:f0:dc:45:a6:5a:91:47:8a:
a0:b5:1c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:03:23 2025 by rpki-client