Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f41c3047-8ea2-4b77-b486-f1b3979dccab.roa
File: f41c3047-8ea2-4b77-b486-f1b3979dccab.roa (raw, json)
Hash identifier: tFxlvoCXwM3kDbOj3DGQpNy7r+WUH7OeSHD6HBLq5rw=
Subject key identifier: 8A:E2:38:64:A7:4C:51:95:4E:66:FC:4B:8E:67:78:A0:07:DE:E1:84
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 364EC46B0AD8D56398C28ECEA26EDD7C4D4D0D91
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f41c3047-8ea2-4b77-b486-f1b3979dccab.roa
Signing time: Mon 09 Sep 2024 00:00:00 +0000
ROA not before: Mon 09 Sep 2024 00:00:00 +0000
ROA not after: Mon 14 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:4e:c4:6b:0a:d8:d5:63:98:c2:8e:ce:a2:6e:dd:7c:4d:4d:0d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 9 00:00:00 2024 GMT
Not After : Oct 14 23:59:59 2024 GMT
Subject: serialNumber=ecac5d96ee41491d2be12ff0f7f494054fcabed05c5fa32de469c9477ed76107, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:21:45:8b:af:3e:20:5d:8e:f2:b5:5c:71:
7f:e1:0d:30:71:73:cb:18:b9:26:1c:68:c5:f1:84:
e1:80:ff:f5:00:17:a1:58:98:b5:22:c9:cb:9c:00:
b9:68:35:c2:68:e8:63:5d:10:dc:93:f7:ee:16:b6:
b9:e8:84:85:de:f4:be:a2:d6:b3:5a:b6:61:86:97:
3c:50:65:bf:a5:bb:94:d3:46:ea:95:a7:9d:30:ed:
81:8d:ce:33:89:75:89:98:02:c6:c3:de:dc:4c:fd:
89:9a:03:1f:2f:36:f6:f2:53:e9:73:1e:99:c5:32:
a3:34:19:43:4f:68:fa:ae:a6:fc:28:64:65:a5:84:
a5:ca:db:75:a7:66:6a:db:25:e7:6f:0a:4a:07:1b:
58:ff:3b:98:0d:3c:0a:8d:8e:61:0f:58:bc:93:91:
71:d6:c3:bc:6b:75:53:8a:28:e4:5d:11:98:76:bf:
f6:bc:47:36:18:e6:76:e8:9a:a6:b7:ac:45:cd:c4:
13:bf:36:92:72:d0:05:ba:d4:82:35:9e:9f:bf:63:
91:c7:b9:2b:82:62:9b:bc:ba:40:02:ca:5f:6a:82:
90:0a:94:35:61:4b:82:f8:ca:ea:79:35:f5:1d:00:
21:0f:f7:28:9e:03:31:9d:b2:74:9d:2f:ae:1f:07:
5b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E2:38:64:A7:4C:51:95:4E:66:FC:4B:8E:67:78:A0:07:DE:E1:84
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f41c3047-8ea2-4b77-b486-f1b3979dccab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
78:69:6d:34:d2:eb:49:b1:4b:ba:82:b0:3a:f9:53:35:1a:4b:
72:fa:e6:8b:b7:ea:8e:7b:95:25:75:3e:ba:7e:97:a4:c1:5c:
d9:7d:5e:58:8c:cf:6b:21:3a:cb:78:2b:a1:c6:96:10:5c:27:
10:31:0d:69:f0:f9:09:1c:8f:67:e7:d1:a7:c3:a6:ea:22:7c:
d1:b2:fd:77:2e:50:33:8e:af:2f:95:e2:9b:61:4f:48:4f:69:
c1:30:bb:15:2e:61:50:7c:be:f9:8e:32:f9:55:e4:d8:ab:0f:
5e:d6:4b:98:e2:34:5f:60:1c:77:9a:a6:33:f3:71:50:1f:ab:
c6:5c:82:60:a8:68:69:f9:b8:24:d4:f7:42:57:f8:c4:c8:99:
27:47:1f:db:27:30:5f:b8:cd:9f:81:0b:2d:12:c4:24:ac:b4:
31:32:24:e2:28:65:86:e3:9f:91:b2:1a:04:dd:40:43:aa:d1:
2a:60:87:20:2c:92:2d:85:f0:0e:b3:0f:ff:fc:a2:2f:df:87:
e1:48:23:16:ae:2a:f5:f1:bb:38:b3:b0:a2:ee:3f:a0:ce:01:
1a:8f:f3:28:10:5e:2c:9b:75:44:b9:d5:6d:75:ad:c1:fd:71:
66:be:b5:58:ae:b1:b8:98:1e:58:62:9f:8b:e8:6b:9d:80:33:
da:40:ab:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:25:05 2025 by rpki-client