Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dac1abe4-c2ef-40f9-b5f4-de8801b81dae.roa
File: dac1abe4-c2ef-40f9-b5f4-de8801b81dae.roa (raw, json)
Hash identifier: LeA9QRDH1jUVUoO2tAwecp+BC+2mWVUjwVV5G8bCWQM=
Subject key identifier: 7B:5E:A5:02:23:A2:17:49:49:85:2A:F5:AB:8D:9C:C7:5F:6A:AA:81
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 08ED25BD376D40B9A889EAB8EC0561374305D825
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dac1abe4-c2ef-40f9-b5f4-de8801b81dae.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ed:25:bd:37:6d:40:b9:a8:89:ea:b8:ec:05:61:37:43:05:d8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: serialNumber=978f5b74afb8dcb71d3879b07c56237c19155231c740b4fb3f4668a0062a8aeb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:a6:96:0d:71:65:de:37:81:2b:39:fa:ae:
10:93:e1:a9:ce:f7:6d:93:96:16:0c:58:60:77:34:
ea:31:73:07:ce:63:1c:60:e6:ab:7b:ce:cf:9d:90:
5c:62:e1:bc:44:fa:fe:7f:96:51:9d:7a:9c:cf:42:
5d:c5:44:f8:a0:a9:7e:5e:77:9c:0e:32:fe:e9:c0:
f7:3c:54:88:0b:93:68:bc:ad:09:b5:11:2f:28:34:
90:a3:20:37:d6:38:d1:8d:a8:b0:2a:d4:14:a5:d8:
61:f2:3d:aa:3b:6a:29:86:9f:08:6d:fb:9b:cd:ab:
44:32:0f:a5:91:fa:ff:c5:76:5d:21:0c:6b:58:94:
85:c9:af:88:f1:c6:1b:2a:aa:b4:65:e9:39:38:fe:
87:85:ea:99:d2:6c:f6:74:73:89:0f:87:db:f8:84:
90:af:d3:4b:c9:27:11:04:b6:9b:8b:11:b3:c5:30:
c2:57:9e:14:fd:d0:34:02:d8:f8:72:96:3c:ff:82:
d8:85:41:8b:4f:da:06:72:f5:0f:b4:19:61:c3:b0:
05:5d:ff:3c:fb:00:3b:ac:0f:fe:20:97:6f:6e:ee:
ca:34:b3:1a:4b:3f:66:82:2a:f8:aa:1d:5b:fe:a9:
fc:d4:e8:d5:7f:bb:08:7b:30:b4:2a:f3:d2:11:c8:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5E:A5:02:23:A2:17:49:49:85:2A:F5:AB:8D:9C:C7:5F:6A:AA:81
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dac1abe4-c2ef-40f9-b5f4-de8801b81dae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0e:aa:24:6f:96:a2:6f:87:91:12:4d:31:a9:52:c1:e3:f4:
39:52:a8:31:28:4a:49:d6:6c:5a:d7:10:d9:d4:30:f6:15:7d:
a9:7b:fc:7a:b3:a7:8a:b9:5f:42:d3:6e:21:28:a7:7d:ef:da:
be:df:16:a8:09:a6:78:8b:b9:e6:fc:2e:d9:56:57:f9:68:72:
58:cb:3e:bc:cb:e5:3a:ab:b1:87:59:45:65:91:82:15:3f:c2:
50:92:96:ef:b3:33:11:7d:98:a0:d4:5b:f7:20:7b:89:30:d0:
e1:36:79:c4:53:a1:06:ea:e9:1c:e0:5a:dc:d9:68:9d:4a:00:
0e:fb:37:7e:0d:a9:27:d8:62:96:5b:37:fd:43:5d:24:fe:3c:
a8:85:35:86:a4:31:8b:0f:66:c5:59:3e:e2:40:70:2a:f5:6d:
d2:48:06:c3:8f:38:d9:2d:5e:a4:18:dc:0b:e4:38:88:52:60:
4c:38:83:fc:af:71:9b:07:e6:73:db:72:d3:5d:30:52:8f:1c:
37:8b:d2:9c:74:ad:ab:03:ee:1d:71:d8:4b:29:1c:18:58:ef:
9f:f7:42:c6:a8:1b:3f:d5:bc:05:a6:5f:41:c5:e3:71:73:40:
fe:44:e9:d4:24:6a:10:41:82:8b:84:84:a1:40:16:5b:b5:8f:
63:f4:64:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:38:49 2025 by rpki-client