Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/46cc22a2-cc78-4f4f-adcf-8433e22349d3.roa
File: 46cc22a2-cc78-4f4f-adcf-8433e22349d3.roa (raw, json)
Hash identifier: X7w+zWgVsVjWJZD8lz/g17ipl3rguxKUyUY/XtV7nD4=
Subject key identifier: 36:4D:A2:E2:F6:9E:19:E5:BE:AE:F0:C4:EB:0F:C7:D8:2D:5C:23:DA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 30A662061C888748739504133158DA59654E2FC3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/46cc22a2-cc78-4f4f-adcf-8433e22349d3.roa
Signing time: Fri 07 Feb 2025 00:00:00 +0000
ROA not before: Fri 07 Feb 2025 00:00:00 +0000
ROA not after: Fri 14 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a6:62:06:1c:88:87:48:73:95:04:13:31:58:da:59:65:4e:2f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 7 00:00:00 2025 GMT
Not After : Mar 14 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:42:00:21:1a:f0:33:e4:8a:96:58:c4:74:
cc:bd:c5:6a:48:c3:b3:00:32:de:f0:1a:3e:4a:99:
be:78:af:b7:3d:cc:d2:1c:6c:7b:03:3c:3e:84:bd:
05:b3:00:1a:74:41:e4:cb:17:bc:bd:32:61:4b:ed:
f5:fe:bc:90:b8:95:99:2e:16:7c:94:9f:0f:dc:59:
0e:54:08:c9:83:a6:a5:4a:72:ef:70:03:87:c0:fd:
dd:1a:1b:05:e7:5d:25:c5:6e:a4:e5:fa:c3:62:34:
54:15:85:29:eb:d7:eb:9a:6f:bc:30:62:60:4b:69:
b9:68:ef:32:33:0d:9b:35:48:36:c7:33:43:3a:03:
75:47:e8:32:80:54:42:3d:e5:42:92:23:11:66:d6:
b7:78:ae:79:88:6d:78:3b:d2:d4:34:2f:96:99:2b:
2b:4c:90:12:f6:a7:02:6d:52:aa:1c:81:34:ac:56:
87:97:d8:85:38:a9:73:1a:5b:e7:be:a1:5a:c3:57:
e6:1a:4d:7e:aa:58:0f:ac:5b:aa:40:cb:34:40:8d:
0e:d4:b4:0e:fc:35:32:33:e0:13:32:7a:e1:8b:51:
99:a5:c5:cd:b2:8b:b3:5c:fb:17:1a:48:1e:ac:aa:
37:05:c8:39:46:92:f1:c5:32:7b:0b:90:6e:4d:29:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4D:A2:E2:F6:9E:19:E5:BE:AE:F0:C4:EB:0F:C7:D8:2D:5C:23:DA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/46cc22a2-cc78-4f4f-adcf-8433e22349d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b1:aa:4f:77:98:67:c4:16:45:e3:2b:d8:e8:bc:28:56:9c:
be:92:fc:e6:4b:55:cd:53:dc:1e:e3:fa:ec:13:42:45:22:49:
6a:5b:eb:b1:81:80:a8:a5:73:1b:7d:70:c3:f7:2c:da:03:b1:
df:c1:68:c8:c3:bd:70:49:96:96:5f:0b:9e:ef:04:32:5e:77:
6c:cd:e3:1a:ad:74:a1:68:0c:15:f8:c4:e4:b7:66:37:8b:04:
10:eb:66:d2:10:ee:19:d3:be:84:73:ce:cb:ca:e2:c7:3b:87:
23:f9:8a:d6:b0:45:d3:6b:b9:2a:97:54:e8:b7:a7:c1:95:8b:
5f:9b:06:53:42:52:77:36:50:c7:69:05:45:5a:31:8d:fd:ce:
86:3c:a8:bd:a8:4e:c1:4e:84:5b:ce:c0:59:45:4f:09:c9:23:
1c:3a:4b:68:0e:24:d2:03:26:ee:ed:75:8a:6d:5c:71:9f:62:
cd:0a:c9:4b:bc:98:fd:d0:22:cd:a1:22:81:30:50:ca:de:73:
88:9e:68:b3:e0:14:b3:76:db:98:dd:be:4b:c7:06:48:bd:64:
34:07:1a:4a:5b:6b:9c:66:a5:b7:6a:b0:31:80:6a:22:9c:1a:
c5:55:bd:1c:7f:b7:06:72:46:fe:b2:0c:8e:ea:49:43:08:01:
3e:e5:27:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:07:37 2025 by rpki-client