Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a6cf6087-4e11-4240-bd72-46b8f94df6c8.roa
File: a6cf6087-4e11-4240-bd72-46b8f94df6c8.roa (raw, json)
Hash identifier: 8W/wl9LzthhaQbkNP1xsxWOflggBfxXZTKqN5NPF8Ew=
Subject key identifier: 4D:17:64:FF:F5:1A:BD:B4:63:D8:C7:91:4E:F2:2B:AA:28:BE:8E:4A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 26E2AAC517577DB73E0BAA845482D68EBA628AA8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a6cf6087-4e11-4240-bd72-46b8f94df6c8.roa
Signing time: Sun 28 Apr 2024 00:00:00 +0000
ROA not before: Sun 28 Apr 2024 00:00:00 +0000
ROA not after: Sun 02 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e2:aa:c5:17:57:7d:b7:3e:0b:aa:84:54:82:d6:8e:ba:62:8a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 28 00:00:00 2024 GMT
Not After : Jun 2 23:59:59 2024 GMT
Subject: serialNumber=ee1e50f944a08f735419ceefbc4526299ffeb234e05e401a4b3418c290634300, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:06:31:10:4f:1e:35:e8:03:34:85:fc:99:
8a:2e:4e:dd:96:cf:3c:99:b7:0e:58:30:a0:78:e0:
15:f6:5e:6f:77:2e:b7:e9:89:72:a3:2c:c3:34:32:
fa:cd:f1:2c:b8:15:71:ca:b4:fa:43:60:5b:f2:ce:
a0:da:ee:97:82:9f:d7:fb:19:5b:8d:ea:66:aa:42:
fd:ef:fd:83:82:1a:12:b2:1b:c7:f3:8a:4c:ea:04:
a2:0b:c2:71:67:95:03:0e:a1:d3:63:67:86:74:3f:
de:25:e7:19:48:05:14:aa:d7:39:00:7d:14:23:58:
93:f0:3e:87:f6:c6:a0:f8:4c:2f:d3:e2:82:3d:2e:
77:42:0b:ca:d9:8a:80:6c:46:3d:be:35:47:9a:3d:
e8:82:98:2c:fb:24:9f:cf:fb:ed:ee:42:f9:38:e4:
7c:5c:06:1b:3c:ab:32:89:f5:77:4d:d3:4a:e4:21:
00:d1:2b:f9:bf:97:b1:71:36:1b:c3:a6:b1:a6:73:
90:61:6b:3e:58:e3:01:8b:ca:69:91:35:4f:e9:70:
69:42:5c:37:37:40:13:ab:8a:98:a3:ed:d1:cc:1c:
71:c4:ea:93:64:c2:90:c2:24:94:c3:51:a0:89:f3:
1a:ff:db:c7:e4:3c:c5:b0:a7:5b:25:62:9a:34:bd:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:17:64:FF:F5:1A:BD:B4:63:D8:C7:91:4E:F2:2B:AA:28:BE:8E:4A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a6cf6087-4e11-4240-bd72-46b8f94df6c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c8:30:fd:de:b6:d1:b3:02:2e:fb:5c:c0:b9:54:00:b0:dd:
0b:cd:40:26:ac:41:82:ce:c8:78:c1:bc:1b:46:dc:6f:1f:d3:
ba:6b:9f:18:ae:b0:ed:2f:ee:f2:1a:58:04:34:5c:1a:ba:dc:
02:e2:d9:95:05:74:27:65:d3:a4:92:ba:e5:04:1d:8f:32:6d:
c1:3b:d7:23:f9:8b:25:a3:74:cf:64:a2:26:f4:43:6d:1b:87:
1d:23:2a:e8:38:ce:cf:97:37:3c:e7:28:89:67:7a:f7:ea:f5:
63:ba:1d:c8:b4:2d:28:99:6d:88:b5:cf:5f:98:34:e0:f7:2c:
15:58:f8:d1:45:70:87:28:6c:8e:5c:5c:c0:20:06:af:09:4e:
c3:c2:07:96:f7:fb:f9:59:01:ae:66:19:33:4a:1b:5a:77:83:
37:97:83:ad:78:c6:a6:4a:6e:42:55:8f:b8:5c:09:ff:4f:61:
65:ad:65:99:f4:25:50:b4:24:cb:a6:0b:28:91:c7:86:b6:87:
f9:e0:1d:55:f9:94:60:ac:f3:83:a4:85:ef:bd:93:97:da:d5:
ec:7f:31:95:d3:c1:11:d7:74:c5:83:eb:69:38:80:ca:97:26:
f3:e0:3e:21:68:99:0d:88:85:c8:3c:b7:23:cd:f7:30:89:6e:
1a:36:b7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:35:34 2025 by rpki-client