Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d11b5a59-bb43-499b-a483-b656efa1d288.roa
File: d11b5a59-bb43-499b-a483-b656efa1d288.roa (raw, json)
Hash identifier: 8jTBbX3CpI40a8x2nVABBFuCjThxwD8ejehpwMz4c5U=
Subject key identifier: 57:4D:3E:27:56:CF:BD:A7:B6:59:E1:F0:3B:3B:5E:65:C9:FD:C1:A5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4028F252B9AB434416AA5F23F409ABB06C4A4940
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d11b5a59-bb43-499b-a483-b656efa1d288.roa
Signing time: Sun 08 Dec 2024 00:00:00 +0000
ROA not before: Sun 08 Dec 2024 00:00:00 +0000
ROA not after: Sun 12 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:28:f2:52:b9:ab:43:44:16:aa:5f:23:f4:09:ab:b0:6c:4a:49:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 8 00:00:00 2024 GMT
Not After : Jan 12 23:59:59 2025 GMT
Subject: serialNumber=fac8cdb0e217dbf472836ab7032fc57291d3395a2614de658fef26eb02a914cc, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2f:aa:40:3b:54:86:f3:0a:59:33:21:fd:bf:
40:99:0a:6c:94:34:76:33:78:97:a8:38:ae:0f:b7:
00:fc:f5:19:0a:92:ce:d4:e5:5e:7a:bc:60:ab:29:
46:d6:0a:d6:19:ff:4d:f9:6e:2e:ab:30:4a:96:57:
f4:00:17:8a:29:41:6e:e2:09:01:99:18:1e:b6:1e:
71:e3:70:f4:20:20:66:62:75:e2:1d:4a:79:c1:4d:
bb:15:c2:96:bf:22:9a:16:c5:73:e8:80:42:d4:ea:
ce:47:36:20:28:f7:6f:0b:b9:00:85:dd:8a:4d:44:
a8:11:29:84:45:35:2c:e1:11:bc:05:3c:e9:bc:23:
19:cb:ae:a8:3f:8d:0d:fd:17:bc:22:72:5e:eb:2a:
23:74:e2:de:21:44:1e:ec:d2:71:74:d4:5f:5a:bf:
63:8a:11:44:38:09:08:3f:a2:d5:68:5a:fe:3f:a5:
54:fa:87:d5:a4:02:00:fc:c2:cd:1e:98:ad:37:24:
51:bd:9e:20:6e:88:0a:b2:4c:bc:3f:09:b6:90:73:
73:b2:a2:20:7d:bd:3e:cd:b5:0a:24:28:83:60:b6:
4b:0b:2a:bb:39:52:cf:9c:e3:53:32:81:83:fc:71:
21:0f:93:02:4b:07:2f:61:15:15:8e:ad:46:e6:8d:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4D:3E:27:56:CF:BD:A7:B6:59:E1:F0:3B:3B:5E:65:C9:FD:C1:A5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d11b5a59-bb43-499b-a483-b656efa1d288.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7c:62:65:84:6a:8d:55:0f:2f:9f:4d:41:06:c2:d1:33:6f:
14:86:0d:08:74:b8:6e:20:f8:d1:c5:b3:5d:56:b6:61:59:9b:
68:18:81:32:e0:0f:81:93:6f:61:6a:74:fd:ec:ba:c5:81:d5:
5e:f0:f1:3e:35:bc:e3:50:a7:3a:67:08:c1:73:84:a7:eb:23:
6b:8d:87:e9:5c:f5:14:94:d9:4a:6d:0e:53:dc:d6:98:d4:a8:
e3:d5:0e:af:2b:ac:67:04:9f:55:4b:f8:2f:e3:d1:b0:e4:3f:
54:d5:ca:6f:e4:06:c4:91:ec:4a:10:fe:25:d3:9c:db:3b:8d:
c1:11:2e:f7:f1:4b:6d:78:ab:a0:58:a4:11:67:15:50:3c:ab:
b7:1e:30:1c:7c:36:2b:fa:b1:a8:4f:ef:c1:b7:c3:fe:ea:23:
e3:e8:02:34:01:43:30:c3:f6:43:ff:ae:4d:3d:c5:7b:5d:93:
b0:63:ba:fd:eb:91:8c:30:01:3e:dd:ca:19:37:81:29:bb:ef:
d1:03:ac:fd:b2:02:9e:9a:8d:65:cd:11:60:92:3a:36:31:8a:
ca:92:21:90:31:d2:64:cd:74:ff:61:06:dc:e7:62:97:03:c9:
74:de:78:68:a5:71:77:09:6b:7a:bd:c4:43:25:74:fd:fd:5e:
bc:86:58:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:39:56 2025 by rpki-client