Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b48fec68-33cb-4d75-a85a-ac6d0eaa3473.roa
File: b48fec68-33cb-4d75-a85a-ac6d0eaa3473.roa (raw, json)
Hash identifier: ptrQZOGYiLRCfdJ9T8HKmkniCYPPqw9uf0yyfJK8vBI=
Subject key identifier: 35:2F:65:C3:4E:CC:0C:9D:33:51:4B:51:45:9A:D1:2D:4E:C0:34:35
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3C76D1813F31A3377F3EA59DC80F76B658B57069
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b48fec68-33cb-4d75-a85a-ac6d0eaa3473.roa
Signing time: Mon 26 Feb 2024 00:00:00 +0000
ROA not before: Mon 26 Feb 2024 00:00:00 +0000
ROA not after: Mon 01 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:76:d1:81:3f:31:a3:37:7f:3e:a5:9d:c8:0f:76:b6:58:b5:70:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 26 00:00:00 2024 GMT
Not After : Apr 1 23:59:59 2024 GMT
Subject: serialNumber=002304acddf8c3a30ebe3eaab46f49dc6c0a3d257aa1914ecb0b055bd9ee2829, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:6f:d8:81:99:11:52:6b:b5:6e:d8:31:37:
a8:85:00:97:b8:69:b3:8e:1b:57:2c:75:ba:d0:23:
ae:5e:d4:4e:8a:e3:95:e6:a7:35:6a:d7:b4:ed:18:
1b:49:18:be:b2:f5:85:2a:45:9d:41:d1:03:4c:7d:
8c:36:d0:49:4d:a4:e3:a5:76:ec:55:38:37:72:34:
53:65:33:9a:7f:ab:c0:aa:48:7d:c9:c8:fd:f1:a4:
6a:33:48:60:08:d2:c7:a4:72:81:83:c4:7a:31:ea:
9c:4e:51:2b:bd:df:c1:d4:7f:1a:d9:90:2f:63:da:
f6:ae:4d:a3:41:38:17:69:61:83:66:dc:c2:1e:d1:
a4:11:5b:63:9b:41:05:dc:10:3a:6c:37:d1:56:ad:
7c:da:68:43:b5:01:55:46:c8:05:37:c8:09:2b:c1:
27:c9:a3:2a:03:5a:36:97:5a:59:ac:13:aa:91:c2:
87:6c:96:e0:ad:e6:7b:da:94:10:19:24:77:6c:11:
3d:69:e3:97:00:97:d3:00:f4:09:9e:b2:d5:39:17:
5a:ce:54:78:50:7f:7a:3a:92:29:11:9b:64:24:b0:
15:18:f4:62:76:e1:cc:24:3e:b7:2f:f0:ba:e1:b1:
21:66:01:cf:1f:81:5c:42:4f:f9:6e:cc:1f:0c:d8:
e2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2F:65:C3:4E:CC:0C:9D:33:51:4B:51:45:9A:D1:2D:4E:C0:34:35
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b48fec68-33cb-4d75-a85a-ac6d0eaa3473.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d3:6c:b3:e7:34:a9:4a:50:c3:c5:d8:72:6f:58:06:95:21:
49:53:5f:99:4e:95:ae:78:17:a6:60:4b:4f:08:fb:bb:a3:c6:
25:d2:ba:ce:fb:14:ab:86:d4:89:f6:fc:2f:15:c2:7b:bb:d3:
ac:f1:38:d5:65:33:ee:ff:b7:a2:b0:36:a2:5b:c8:c5:05:c7:
42:1d:24:86:80:79:9a:b1:34:c7:e9:a2:1b:5e:06:e7:0c:dd:
ef:03:69:8d:43:b8:bd:79:d7:19:8a:8f:95:7b:5e:ca:76:83:
b0:58:5b:82:b6:c7:38:82:97:9c:6d:72:17:09:63:c1:34:ab:
13:4d:eb:22:7f:4d:c3:be:d5:3d:d2:77:14:52:9d:bd:0a:f8:
a3:4a:ec:42:9c:e1:50:f1:80:7b:89:a9:3f:2d:85:ec:f4:22:
ac:35:9b:a2:aa:34:86:73:93:8c:05:b0:24:88:95:c8:b7:e3:
50:7d:77:77:dc:01:96:fe:36:4b:e1:b2:e9:2f:9e:ae:cd:74:
b2:6a:1d:99:f9:6d:7d:b0:88:ec:f7:a4:27:8d:0d:02:0d:1a:
dc:88:ef:56:2b:13:37:da:59:f4:1d:b7:5a:13:bd:de:63:c7:
5d:0a:89:80:c7:0c:e3:78:56:62:09:7c:ae:e3:b9:2d:71:0e:
ac:8d:a4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:47:17 2025 by rpki-client