Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1ce6f240-7c64-4789-9075-7999ca12143f.roa
File: 1ce6f240-7c64-4789-9075-7999ca12143f.roa (raw, json)
Hash identifier: V1qmXCT716/ZTIxwCIc5ULypHB3WBtd7hlClP4C9b2U=
Subject key identifier: 64:25:1F:60:51:1E:67:B4:FB:B3:F1:BD:E8:3C:1C:DB:C8:9C:A0:F3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 797BB928A894E7EFF4BBC70B84621EC1C9EADA88
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1ce6f240-7c64-4789-9075-7999ca12143f.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:7b:b9:28:a8:94:e7:ef:f4:bb:c7:0b:84:62:1e:c1:c9:ea:da:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:b6:dc:c2:ed:ec:1d:08:27:95:4b:63:f5:
6c:e3:90:e7:61:3f:34:0e:4d:74:64:91:42:0b:e4:
af:23:70:de:5d:61:f1:6c:aa:fb:e1:eb:a4:1b:c4:
fc:72:58:35:bc:3f:d0:96:00:de:34:19:7d:cd:03:
9f:01:80:a2:c0:89:a8:9b:45:d4:c9:1c:fe:fe:a4:
0f:87:75:71:b6:67:aa:17:5b:67:82:c5:0c:b2:c0:
56:26:9b:52:63:51:28:13:15:a3:45:2c:51:15:f9:
78:0a:8b:41:29:25:8f:4e:29:14:35:f7:03:a9:d6:
eb:e4:23:4a:c9:41:06:09:51:0b:34:a2:55:72:45:
2e:01:30:de:92:cb:95:f2:e1:f4:f1:10:bb:f0:e2:
66:66:41:7e:ed:50:4b:f9:c0:ce:78:d1:b7:8b:c4:
96:c8:6d:71:2b:1e:e8:26:0e:9f:b6:64:b4:bb:d4:
fb:d5:62:12:ca:79:a5:ac:97:06:06:a4:17:83:07:
32:b4:29:72:01:36:7a:c4:5e:c4:69:84:bc:33:d8:
a8:e0:f7:35:82:4d:42:a6:1b:f5:a2:19:bb:f1:d8:
08:d1:11:ea:c6:ae:a8:eb:4d:d1:5a:fe:8a:14:4d:
cd:84:2d:83:38:82:cd:9b:3d:73:f8:16:60:84:37:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:25:1F:60:51:1E:67:B4:FB:B3:F1:BD:E8:3C:1C:DB:C8:9C:A0:F3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1ce6f240-7c64-4789-9075-7999ca12143f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ca:86:17:4d:07:2a:d5:b0:16:f8:88:14:a6:18:e8:e7:89:
64:6f:68:37:01:78:19:76:0f:21:9c:d2:75:11:65:4a:7c:15:
3b:f9:0b:65:34:25:ce:91:27:f4:44:c1:d5:ed:37:29:f2:8e:
5a:b5:ca:9f:c9:02:b8:92:6a:ed:7d:29:14:b2:28:3b:1a:0f:
6c:24:ea:2b:2e:ee:85:a7:e1:b2:da:cc:e1:0b:77:95:fa:9d:
82:d1:00:e6:ef:05:44:66:d4:7b:5f:c3:2d:f1:9f:68:60:3d:
3a:cd:1c:ad:a7:37:6d:d2:6e:88:ed:b4:4e:ce:3c:04:87:63:
01:1e:d6:2f:e0:56:52:18:a9:62:ba:04:18:16:bf:09:97:82:
ee:2e:0a:24:36:f3:1c:83:8c:de:e5:2e:cb:d7:5f:4a:5f:d5:
8c:e5:32:83:f0:a7:c2:04:e0:14:32:96:c4:8d:bf:72:c6:62:
e3:fe:88:88:7d:a0:71:3d:a2:d0:5c:5f:dd:6e:58:2a:f9:3e:
39:12:19:6f:ea:32:af:5b:5e:e4:10:65:9b:cf:ac:3e:ca:f5:
f9:e5:9d:13:1f:ae:db:03:e5:f5:21:42:71:41:0f:4c:99:11:
6f:bf:67:e7:e7:26:fd:07:b9:76:be:2f:57:ef:0b:77:3e:14:
b4:47:e4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:19:05 2025 by rpki-client