Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf606e2e-1fc6-429a-b6f3-48bfeb6f18a2.roa
File: cf606e2e-1fc6-429a-b6f3-48bfeb6f18a2.roa (raw, json)
Hash identifier: VHLv9w0GUlhzXCywfUCIuxbB5r+kn2XIONtTvrtCszU=
Subject key identifier: 23:E9:81:6D:7B:AC:76:79:89:A3:40:6E:E2:08:0E:53:F4:55:E8:EA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7A53FAEDC2EA0458E8AD0A6736F38AB433B5C60E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf606e2e-1fc6-429a-b6f3-48bfeb6f18a2.roa
Signing time: Sat 18 Jan 2025 00:00:00 +0000
ROA not before: Sat 18 Jan 2025 00:00:00 +0000
ROA not after: Sat 22 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:53:fa:ed:c2:ea:04:58:e8:ad:0a:67:36:f3:8a:b4:33:b5:c6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 18 00:00:00 2025 GMT
Not After : Feb 22 23:59:59 2025 GMT
Subject: serialNumber=ee0223d763c5cd26a3b2bff2e7e3826742cad87c5af7bc4eb8ce7db5a8c8ec13, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:22:b1:c6:7b:6d:10:af:8d:b2:cb:96:15:b5:
2d:b1:dd:ee:68:ae:98:7d:ed:e4:c9:29:2d:73:c5:
71:81:80:f6:1e:19:ae:f4:a6:46:b6:b2:7e:20:48:
ac:50:81:e2:97:4d:6a:b5:34:0f:f6:97:67:2a:05:
51:e1:70:40:42:e1:8a:5f:2d:cf:f1:24:5a:8e:cf:
9d:25:fc:21:0f:2b:f3:47:85:0b:f9:f1:03:54:47:
ff:7e:b4:e4:40:26:7b:78:7f:fc:db:c9:b0:f7:87:
32:63:4c:79:99:cf:29:59:c1:8e:18:4d:94:ed:99:
57:c6:e6:fb:3f:7c:3f:9d:0b:c8:2e:db:c4:ce:53:
a0:c9:3d:62:ab:e8:1e:f9:df:97:82:52:8e:d9:d1:
90:99:be:68:fb:6c:d2:5a:f0:da:b1:d0:7d:a9:6c:
ca:7a:00:e3:eb:87:92:b9:9e:7e:22:d0:7c:75:cd:
24:0e:85:a0:44:e9:dd:49:ad:d6:77:d9:d5:28:da:
11:27:90:00:64:15:ed:4d:ba:7c:d4:d9:2a:77:c7:
c1:d3:aa:96:ef:53:2a:0c:f1:32:6c:cb:81:41:40:
3a:69:3b:f9:64:e2:68:0b:18:5a:ec:30:28:a2:b7:
82:9f:15:26:a7:71:a9:52:83:33:76:08:06:91:fb:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E9:81:6D:7B:AC:76:79:89:A3:40:6E:E2:08:0E:53:F4:55:E8:EA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf606e2e-1fc6-429a-b6f3-48bfeb6f18a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
13:54:99:e0:93:23:ba:02:7f:56:6b:0a:08:3d:3d:14:a9:68:
13:52:e2:52:08:e0:88:9e:59:ba:b5:bc:69:69:90:36:ba:1c:
ee:e4:7b:d6:95:73:93:55:cf:50:40:fa:75:68:02:37:47:4d:
a1:35:c8:24:98:62:f4:bb:7e:fc:24:96:d0:6d:51:ae:93:8f:
94:ca:e1:86:96:87:5e:c1:9a:c3:66:be:e7:cd:be:28:b8:f3:
27:6c:bf:ad:7b:f7:3e:38:1d:63:ae:de:27:96:f8:2d:da:d4:
80:45:a6:fc:d6:0c:25:61:72:e3:be:86:35:d0:06:72:d2:84:
b7:57:aa:82:6a:06:01:5b:8b:b6:1e:b8:50:87:a1:93:3d:45:
9d:87:8a:a0:98:51:f8:f7:7c:48:d6:2a:77:55:96:ba:e6:04:
b6:38:33:ee:6e:42:16:c3:b9:80:3e:b2:11:bb:c6:e9:e2:63:
95:29:2c:c6:58:e8:5e:5b:5e:e7:fe:0f:3e:48:5c:7c:1b:c7:
33:71:9c:75:12:ef:2a:33:08:d2:5a:84:bf:75:84:db:f4:5c:
87:97:eb:36:f8:38:5d:c1:72:ce:58:71:18:23:1c:25:3a:e2:
10:ad:fc:ed:ee:54:2b:b8:47:16:dd:3a:89:44:10:44:fa:67:
ae:d5:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:36:28 2025 by rpki-client