Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5346a67-f0c1-4c2b-a9f6-f9868f4f0254.roa
File: b5346a67-f0c1-4c2b-a9f6-f9868f4f0254.roa (raw, json)
Hash identifier: 0ZVINpuwyT7BJ6c8BzK97N9hmezl59BuJkNMYZwhFJY=
Subject key identifier: E6:43:56:2A:6D:A5:C6:B7:07:CD:46:17:D5:0D:A0:CD:05:99:F5:6D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 41D633699B7C19D0FD82709E0092F40AAFED5780
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5346a67-f0c1-4c2b-a9f6-f9868f4f0254.roa
Signing time: Sun 15 Dec 2024 00:00:00 +0000
ROA not before: Sun 15 Dec 2024 00:00:00 +0000
ROA not after: Sun 19 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d6:33:69:9b:7c:19:d0:fd:82:70:9e:00:92:f4:0a:af:ed:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 15 00:00:00 2024 GMT
Not After : Jan 19 23:59:59 2025 GMT
Subject: serialNumber=40c34570ac95ff316cd38ec593514439ab6ce730fe07664df8b9d16eb697be16, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:cf:c9:f7:77:2a:d4:ad:d9:e4:af:fa:4d:
5a:79:94:e4:dd:ee:a5:ce:64:70:67:ae:88:17:80:
7d:ad:ed:b3:e6:ac:85:0c:ae:b9:4e:2e:c7:56:d0:
72:24:a4:02:a4:7b:79:57:c8:0a:0f:82:25:1e:5a:
51:bb:df:9e:1d:ac:3f:2e:7a:1c:6a:e2:f8:00:a1:
86:b3:62:39:f2:bc:f2:d3:f9:e7:38:ad:d0:a6:ca:
d1:41:27:be:43:01:dd:00:b5:05:8b:61:b0:e0:26:
08:ad:c4:69:be:23:1d:93:3f:65:bf:86:ec:1f:33:
2b:26:1d:a2:97:24:38:60:21:6a:19:82:4c:03:0e:
ef:21:f5:1b:a6:b4:87:1d:07:fa:e3:ad:41:28:db:
19:54:5f:e4:59:35:53:fc:64:78:76:c6:f5:6a:18:
fe:3d:91:77:fd:a2:11:0c:d5:ff:4f:a7:f4:47:7e:
a7:45:34:e0:5b:49:26:02:a9:c2:72:db:67:57:2a:
ea:16:b1:fe:ea:8f:1d:5f:24:74:33:e6:ac:52:3b:
fc:51:36:51:e9:f6:57:6d:94:bd:b8:2b:30:f2:18:
d8:a4:20:ba:e7:29:52:78:49:ac:23:05:9e:df:97:
69:2d:82:2b:a3:50:29:75:13:9f:70:06:80:99:98:
30:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:43:56:2A:6D:A5:C6:B7:07:CD:46:17:D5:0D:A0:CD:05:99:F5:6D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5346a67-f0c1-4c2b-a9f6-f9868f4f0254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c7:f0:e5:c9:94:a4:51:b5:7e:f8:db:41:43:1a:88:b8:57:
aa:ea:1b:b1:b7:e7:10:44:fb:51:71:e6:8b:3d:d2:87:f8:0f:
97:0c:61:09:e6:0a:d4:f6:3e:77:50:ab:4a:d2:e7:54:3c:a0:
8c:68:73:83:2e:c6:93:bd:a1:02:47:5f:ba:ab:35:d6:be:a0:
2b:c2:4c:0a:c8:a6:08:31:a8:33:12:29:d0:9b:ee:d9:7a:d6:
31:1b:fe:e0:e4:c6:17:c4:e3:ab:db:3c:f3:d8:d0:97:f6:4f:
c4:f9:30:91:3c:ea:bb:16:8d:63:98:3f:c8:df:58:81:07:d3:
0e:e4:dd:92:3a:90:d5:b6:5b:c0:8a:2c:77:5c:0e:05:e1:c8:
2c:55:11:9a:f5:5f:23:4b:ad:13:31:ad:24:a0:d3:80:2d:3c:
12:cd:86:92:14:a7:02:09:0b:bd:a5:e5:e3:ab:a7:d5:35:80:
00:06:1b:3a:5b:d6:93:1f:db:47:be:60:2e:30:18:0a:69:38:
c8:cc:05:3d:2d:ce:19:bb:db:8a:40:ac:68:40:3a:35:0d:07:
e9:83:b1:84:08:d1:b7:4c:37:2e:ad:10:40:2b:26:5b:46:6f:
45:4f:fa:ea:db:5b:59:82:6d:c5:3e:70:d5:11:f8:77:e1:c3:
7f:7d:09:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:57:54 2025 by rpki-client