Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/60ed3fa0-8cfd-405b-ae31-af4daaf26ebb.roa
File: 60ed3fa0-8cfd-405b-ae31-af4daaf26ebb.roa (raw, json)
Hash identifier: rKUpH5lYnBWfu0AzVBolz69fWk8BAuKW+mfPK1tvbtw=
Subject key identifier: 03:C9:4C:97:2F:A5:B9:3E:AE:26:F8:8B:EA:2F:60:52:93:EE:A1:B3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 44451704978EC17857E63118BD80B3E35F7138C4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/60ed3fa0-8cfd-405b-ae31-af4daaf26ebb.roa
Signing time: Tue 25 Feb 2025 04:58:20 +0000
ROA not before: Tue 25 Feb 2025 04:58:20 +0000
ROA not after: Tue 01 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:45:17:04:97:8e:c1:78:57:e6:31:18:bd:80:b3:e3:5f:71:38:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 25 04:58:20 2025 GMT
Not After : Apr 1 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:32:86:c9:fa:df:e7:a4:d5:b4:d4:8c:fd:
18:75:1a:80:a5:f2:79:16:b8:4b:b9:fa:0b:b3:81:
ba:c6:20:54:ab:05:fa:07:c9:8a:1f:3c:fa:a0:f8:
a6:0c:03:30:c1:b2:de:86:d9:fe:87:70:75:d0:3b:
3c:86:51:9a:65:06:15:15:d7:37:af:16:bc:3a:da:
53:63:18:9f:88:b1:df:61:3a:47:79:94:56:f1:02:
15:e2:36:27:cf:a9:a5:ba:e0:ba:07:8c:85:c2:89:
f4:df:8b:32:d4:d0:7c:07:93:eb:87:52:bf:97:61:
e3:d4:d1:9f:71:da:b5:fa:9d:43:82:59:17:fa:e4:
26:86:07:ca:8f:fc:66:78:8e:4f:55:60:1e:1f:0b:
81:50:0e:e8:c7:f1:0f:62:58:65:e0:42:c0:a0:22:
18:d3:5a:b1:a2:49:0d:ad:ef:ce:0b:9f:29:ef:04:
e4:33:34:a4:12:e4:2a:72:0f:f4:22:3a:6b:b1:98:
a5:cc:b9:6a:7e:79:27:1f:fe:04:79:7e:b7:6e:94:
4a:31:ce:1a:f9:c3:60:f5:d5:5c:b9:f7:2c:05:a6:
d7:41:93:d0:b7:e1:77:5f:1c:7e:c8:55:4e:6b:71:
3a:cd:bf:aa:fb:60:0d:74:dc:13:8c:0d:0a:0c:9c:
73:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C9:4C:97:2F:A5:B9:3E:AE:26:F8:8B:EA:2F:60:52:93:EE:A1:B3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/60ed3fa0-8cfd-405b-ae31-af4daaf26ebb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:75:74:60:a2:77:d0:9c:6e:95:4a:b2:53:5d:ba:3d:9e:dd:
50:a6:83:a1:c7:75:cb:65:06:92:92:43:14:4a:7c:6f:3f:6b:
3b:69:70:45:70:b9:f5:15:53:9e:7a:63:36:1e:2e:48:35:34:
c1:b2:19:2d:d3:24:2e:35:10:c5:5f:cc:ba:14:33:7c:29:e0:
d5:f2:af:c5:4a:c5:56:8f:02:1e:ed:b8:f6:94:09:98:40:70:
6b:19:0d:77:5e:0f:6c:e2:51:9b:0f:36:8a:c8:8c:9f:eb:25:
3e:18:99:a7:2f:7f:ec:42:92:03:69:97:73:e9:bc:12:75:51:
13:46:4a:58:04:3c:7d:11:d8:4b:87:e7:9d:3c:c5:96:99:f1:
a9:93:0c:13:62:dd:12:f2:e4:4e:79:06:4b:25:c1:68:32:2e:
1a:65:47:6c:15:41:7a:28:3c:00:26:8c:54:0c:f8:4b:71:5d:
e8:88:b2:ee:49:42:3d:41:6b:70:70:15:9d:48:fc:7c:73:54:
32:0c:73:27:ac:08:3c:66:5d:9e:b9:01:6a:51:97:a9:66:4c:
f7:0e:84:80:56:e2:b2:a7:ed:3e:fd:fa:4a:97:cc:0b:aa:09:
89:65:ba:ac:ed:03:d5:dc:55:4f:ed:51:77:b9:b3:6f:74:03:
7a:95:1f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:09:25 2025 by rpki-client