Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/94c408f0-e87b-4174-be05-d74671eaa9f6.roa
File: 94c408f0-e87b-4174-be05-d74671eaa9f6.roa (raw, json)
Hash identifier: T+acw/BvT78WEPF7AiPa2yzDuFVwLgyDPpjHS9NV9go=
Subject key identifier: 6F:F5:9F:54:F4:CB:32:BB:79:C8:86:B5:CF:29:0A:CB:80:F2:D9:BC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 15A27C4503A069EACDC393A784AD84F818268C6A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/94c408f0-e87b-4174-be05-d74671eaa9f6.roa
Signing time: Sun 28 Apr 2024 00:00:00 +0000
ROA not before: Sun 28 Apr 2024 00:00:00 +0000
ROA not after: Sun 02 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a2:7c:45:03:a0:69:ea:cd:c3:93:a7:84:ad:84:f8:18:26:8c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 28 00:00:00 2024 GMT
Not After : Jun 2 23:59:59 2024 GMT
Subject: serialNumber=13507fcf3db8b64c43c59192b00eb069b2d0029ab81b0a3843c040ef66bfaab6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a7:b8:90:c7:f5:52:72:32:e3:dd:30:91:b5:
0f:ca:19:ec:7b:20:db:65:f0:04:76:86:4d:72:4f:
bf:c4:41:b4:00:fb:47:82:49:fb:f3:4c:75:00:b0:
eb:95:66:2a:de:1d:a8:18:6a:14:9a:07:b8:9d:54:
84:ad:ec:30:95:33:6b:e5:19:9c:a0:db:fa:6e:f7:
2e:4d:50:c0:f8:74:19:40:59:af:ca:7c:ee:33:c4:
b2:c2:88:85:7e:af:a0:0e:23:b8:fe:22:ef:85:73:
82:5c:b6:52:a3:43:3c:f0:0a:65:04:00:8a:c2:95:
6e:ed:bd:aa:8c:d9:a4:45:d8:2c:93:c7:df:d7:41:
e7:32:35:44:d6:9b:03:65:9f:17:7f:4c:9b:1d:1e:
db:fd:17:f1:3b:43:ca:2f:61:1b:b0:97:e8:63:a0:
1b:5e:c9:61:69:1c:bf:85:4d:3a:e1:24:76:c8:e3:
5b:e6:56:02:c4:e9:9b:35:19:fb:22:0d:83:67:f9:
b9:4f:bb:4e:e6:aa:7c:9d:00:ba:d0:68:5c:3e:a7:
cc:44:79:07:31:08:3e:36:3c:9f:f8:f3:39:73:7e:
6a:12:e0:8e:46:8b:3d:bc:b4:8f:b9:57:e6:29:5b:
23:3f:ca:c2:f4:a1:cf:30:48:38:46:9c:ef:62:30:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F5:9F:54:F4:CB:32:BB:79:C8:86:B5:CF:29:0A:CB:80:F2:D9:BC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/94c408f0-e87b-4174-be05-d74671eaa9f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
75:48:97:10:a2:09:d1:3a:89:ed:d9:79:91:09:a1:74:e9:10:
ee:94:21:7a:a4:79:b0:23:6f:13:02:d1:37:af:42:f7:8c:28:
32:a7:ea:ec:f3:ee:81:1a:bc:95:a5:48:f1:51:72:33:68:b2:
21:cc:df:4c:d0:65:9a:b5:2e:71:20:51:b9:ea:2a:56:d4:76:
27:39:3b:f7:08:b3:00:18:da:ca:a5:47:12:d2:e7:d6:3a:8a:
e0:d6:b6:5e:0e:04:c1:9a:4c:17:90:78:42:2c:9f:88:a4:65:
8a:92:26:ff:37:c5:1e:93:46:73:66:f0:2a:42:c6:00:a5:c5:
28:bf:59:99:17:f9:dd:d1:06:f9:4e:d4:56:4c:ea:c8:42:f5:
2e:bf:bb:a8:1c:45:de:d8:a0:bd:c3:1b:f8:56:f9:fa:1c:72:
60:cc:d2:ac:d3:46:c4:32:46:91:88:70:84:e6:53:f6:58:5d:
94:2b:be:6e:fb:34:a0:70:3e:ad:5d:1c:35:39:86:47:60:92:
f0:34:a2:06:b9:40:a9:74:40:c0:c4:79:09:51:17:ee:85:8d:
be:73:bd:18:6d:ca:5a:1c:e4:fc:20:77:1b:8d:23:19:d2:60:
af:c7:aa:94:59:83:70:8d:3d:3e:53:6d:32:e0:6f:e6:f7:39:
c6:b1:8f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:22:47 2025 by rpki-client