Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ffe5f9cd-9a50-42d2-a2bb-532882278620.roa
File: ffe5f9cd-9a50-42d2-a2bb-532882278620.roa (raw, json)
Hash identifier: IKOByyNGLP9oIbDXXazItQ3lQYhJlfRefkfek0WC26c=
Subject key identifier: 32:B2:AB:7A:57:B9:08:E9:06:7D:AF:12:28:E5:92:43:F7:4C:41:B6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1BCE2E423416EB7212C2CB16C2D3D253019B7E19
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ffe5f9cd-9a50-42d2-a2bb-532882278620.roa
Signing time: Mon 01 Jul 2024 00:00:00 +0000
ROA not before: Mon 01 Jul 2024 00:00:00 +0000
ROA not after: Mon 05 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ce:2e:42:34:16:eb:72:12:c2:cb:16:c2:d3:d2:53:01:9b:7e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 1 00:00:00 2024 GMT
Not After : Aug 5 23:59:59 2024 GMT
Subject: serialNumber=ec8a6dff2d37320aada351cdfa7800075561ba15a78faedccb70f50d2a38048b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4b:37:64:71:97:56:5f:a6:92:38:a1:86:a1:
65:bf:2c:a8:93:76:75:8b:97:92:c0:f7:62:a6:9e:
e1:e5:98:ab:f0:5e:67:9a:c6:eb:e9:6a:1e:c6:8c:
26:ed:58:8d:c8:98:c1:22:90:92:51:e1:af:77:fc:
bc:06:ed:a6:c9:9a:02:2d:0c:64:d6:05:55:5e:46:
5e:a7:6d:0e:b4:72:20:80:7a:a5:dd:1a:7e:c9:c3:
30:75:82:be:22:7f:17:e4:0b:d8:c2:e7:6c:68:4f:
8f:e4:29:0f:3b:4f:32:fc:90:a5:71:68:a1:01:c5:
a1:4d:c3:eb:f9:79:7d:13:ab:2c:87:d0:36:f2:09:
c1:c9:c8:88:81:cd:61:fd:3d:b7:73:9f:56:d1:35:
56:7d:2d:a4:ec:69:c6:b9:6c:a2:64:69:57:7b:28:
83:39:f5:b9:98:bb:4c:47:b6:4f:93:d4:33:7f:74:
0f:16:fb:de:0a:0e:26:bd:9d:4b:d1:e1:0c:a3:07:
01:86:a5:0e:4b:89:1d:d6:eb:41:09:d8:de:00:68:
3e:ba:08:8d:1d:85:d6:3c:4f:5e:f2:fc:08:58:44:
4a:87:b1:30:39:47:a6:11:73:d3:a1:51:1d:51:cf:
ba:77:14:12:fa:98:e6:5f:a8:6e:81:73:61:a6:96:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:AB:7A:57:B9:08:E9:06:7D:AF:12:28:E5:92:43:F7:4C:41:B6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ffe5f9cd-9a50-42d2-a2bb-532882278620.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
01:50:59:c1:75:58:ba:0b:f8:4d:9f:3b:81:fa:67:17:98:ca:
62:36:56:f9:7f:90:30:01:17:f7:9a:12:9d:d6:f5:6a:e6:15:
d9:1e:32:0b:8a:29:3d:f3:ff:6b:d8:ad:65:0f:03:34:d2:d6:
b8:fe:65:7f:aa:2a:9b:0a:58:51:2a:c9:d2:e4:af:88:06:0f:
d0:13:06:ad:54:12:54:44:66:c4:ec:3d:10:30:12:d2:cb:16:
9f:a8:73:2f:0d:02:7d:ca:b8:1f:9f:3a:ea:23:29:9f:31:d1:
3a:4a:01:68:89:42:ec:3a:fa:d3:73:5e:ea:08:20:4a:67:ca:
4d:3f:7a:e5:1f:ee:a5:2c:42:ae:3a:a0:6d:d7:31:1c:37:be:
05:0a:41:6e:2a:9b:1c:aa:a4:57:42:9f:99:e0:7e:32:7d:1e:
7f:dd:6a:b8:bb:20:28:ce:35:d1:07:e7:e6:f0:a4:8f:d5:cc:
f6:e2:fa:e4:fb:29:93:67:a0:69:58:e6:9a:c9:09:9c:40:91:
f7:fa:e9:4e:66:0a:1c:c1:26:69:5a:01:22:c7:0b:70:a0:17:
fc:e1:66:79:9d:6c:ac:ae:6d:27:2f:5c:23:dc:3f:f1:2c:c8:
c9:8e:e2:78:b7:b2:f7:f1:59:be:72:c1:36:27:3a:4f:00:06:
f5:aa:09:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:52:45 2025 by rpki-client