Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a5a73328-212b-4b5d-85a9-e8846fa85423.roa
File: a5a73328-212b-4b5d-85a9-e8846fa85423.roa (raw, json)
Hash identifier: 1yfPVpnrBjZlflDLsbRXxo2VcfhBw57pwIBvsupqFUs=
Subject key identifier: 4D:1C:F6:6F:E0:AD:F5:57:A6:DF:5E:8B:EF:B1:C5:F6:49:13:5F:BE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 271B0B4E58C533A6DEDBF409901856002E10F5D3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a5a73328-212b-4b5d-85a9-e8846fa85423.roa
Signing time: Thu 27 Feb 2025 21:53:25 +0000
ROA not before: Thu 27 Feb 2025 21:53:25 +0000
ROA not after: Thu 03 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:1b:0b:4e:58:c5:33:a6:de:db:f4:09:90:18:56:00:2e:10:f5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 27 21:53:25 2025 GMT
Not After : Apr 3 23:59:59 2025 GMT
Subject: serialNumber=257b728a03f3973f21b0d9247092dea75c6f57fee4408c8fb0a4cce2e9999d94, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:8d:31:90:3b:fd:0e:82:96:fc:af:be:83:
7f:d4:85:c0:d5:2d:ca:f7:05:35:e8:ef:85:c2:8e:
a3:dd:66:54:48:00:a5:0d:10:d6:85:a1:11:40:a8:
11:0c:7c:d1:7f:5e:e4:e7:db:5b:e2:6b:ef:8e:87:
b8:03:00:b1:6f:f8:a3:1a:d0:0c:a9:05:45:cc:a9:
5e:6f:da:44:b5:5f:95:4b:43:f0:32:50:26:66:8d:
a0:79:16:20:8d:25:3f:c8:8b:37:9d:93:33:8d:67:
e0:86:15:78:12:f8:2c:3f:5c:96:39:b9:52:e5:ca:
19:aa:60:9d:36:7c:96:7f:a4:5c:3c:78:06:c5:57:
50:83:e3:5d:dc:17:56:14:66:fe:f2:8c:73:66:38:
31:f1:0b:a6:5d:10:fc:2c:70:8e:58:7a:88:72:1e:
54:ed:b5:b3:ee:d6:f2:3b:b9:40:ad:56:e9:b8:3b:
5f:48:ad:aa:aa:23:2e:29:6b:07:f0:75:94:c1:4b:
b1:11:dc:8b:1d:a3:c3:47:4f:26:48:0f:33:e1:ab:
72:0f:92:9a:02:7b:79:ae:05:d5:5c:a4:8b:99:43:
8e:a2:22:72:e7:08:4b:48:31:d1:ff:bc:df:93:1e:
02:01:fd:d3:f6:37:c8:2b:f0:67:f6:e3:66:1b:69:
3b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1C:F6:6F:E0:AD:F5:57:A6:DF:5E:8B:EF:B1:C5:F6:49:13:5F:BE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a5a73328-212b-4b5d-85a9-e8846fa85423.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a7:9e:40:c5:54:55:5c:81:22:5e:fe:a0:0c:64:4f:4a:d7:
6f:57:50:45:8f:50:61:a2:3a:f7:2b:4f:91:01:5b:ac:26:91:
1b:f1:05:ac:96:2a:2b:94:04:1b:47:59:60:2e:35:84:03:2d:
cc:62:ed:a7:ce:05:eb:6b:f6:a6:9a:cb:46:89:08:a9:64:fe:
8f:5b:94:41:15:15:ca:68:c4:40:50:92:a6:2e:bb:6d:c6:cd:
d7:73:f7:b1:95:c0:4a:9b:f6:6a:5c:b9:7b:ae:1f:2f:56:fc:
cd:03:83:c6:c9:fa:25:c7:8b:ba:70:20:3b:35:14:4a:23:99:
c8:d8:d9:25:76:31:70:15:69:be:27:d0:59:8a:80:61:6a:d9:
d7:10:6f:94:5f:55:0c:83:2b:bb:f2:03:57:a0:f4:1b:43:18:
c8:7f:c1:80:2d:14:e6:8d:32:be:f5:5d:06:63:3d:93:53:b6:
b4:81:10:63:00:95:35:2f:68:ec:5b:32:67:1d:84:3d:03:00:
e9:3a:9f:93:e5:03:c5:2a:ff:8b:7b:8f:c0:b0:9b:fb:e6:ff:
ae:bd:ea:4d:f7:a8:d1:cd:47:e6:a4:ae:98:96:28:47:12:9e:
1a:8b:19:01:e3:40:7b:61:91:ad:23:5c:5a:85:2a:43:9e:b5:
79:49:78:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:23:19 2025 by rpki-client