Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9fcfc310-144e-41e2-b4bd-c2a9a87efee0.roa
File: 9fcfc310-144e-41e2-b4bd-c2a9a87efee0.roa (raw, json)
Hash identifier: y4l9w01n6hDuNocdGTByNlEBbUXFJd1o7v0izVvDR0Y=
Subject key identifier: 25:99:D6:8F:B3:B9:E2:0D:98:FF:31:1B:D8:8F:51:8B:EE:3E:C8:88
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 783DB1CE754C4AFE1A16BF7351871D2ECA3E6D54
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9fcfc310-144e-41e2-b4bd-c2a9a87efee0.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:3d:b1:ce:75:4c:4a:fe:1a:16:bf:73:51:87:1d:2e:ca:3e:6d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:af:98:93:10:b3:fb:89:1f:ef:a1:ad:08:
48:8f:b3:0b:69:07:1d:f0:21:43:a7:45:d0:59:08:
da:14:af:e5:df:40:e7:b3:bb:ae:bb:d3:22:d1:87:
bc:57:dc:9b:05:72:a1:3e:8d:37:91:18:85:14:bc:
b2:c7:54:12:f9:fc:67:34:46:b3:dc:58:4d:05:cc:
a0:35:a8:22:e0:88:14:88:71:04:c8:da:8a:f0:a4:
31:04:00:69:68:3e:91:3c:c8:bc:3e:25:52:03:12:
b8:7e:7c:b3:76:30:27:90:1d:5d:a0:58:09:fa:a2:
bb:03:83:5e:26:17:62:e6:4f:78:d5:fd:56:02:75:
b2:a4:f0:e2:87:9b:b5:4a:72:2b:e4:10:33:12:49:
dc:c6:99:54:ed:e6:d6:e9:77:e8:de:a1:7a:e0:69:
bb:0e:97:69:3e:61:f6:20:8f:f0:a8:53:da:79:52:
d3:15:d5:06:0e:1c:bb:7c:13:12:ef:9c:e6:f1:02:
e2:8c:84:c3:90:98:81:67:0f:bb:9e:dd:49:8f:fa:
3d:f9:3b:68:7f:66:52:5e:90:dd:a4:e5:05:4c:2e:
6e:0b:1d:6b:84:2a:84:aa:b6:c2:b8:78:8d:ac:d5:
b4:03:85:88:f4:10:78:9f:f5:af:4d:4e:c4:e8:12:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:99:D6:8F:B3:B9:E2:0D:98:FF:31:1B:D8:8F:51:8B:EE:3E:C8:88
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9fcfc310-144e-41e2-b4bd-c2a9a87efee0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3a:cb:7a:b9:a1:84:c4:76:11:88:ea:dd:fc:da:21:81:f2:
b1:03:a8:31:b6:b4:6f:73:31:5b:f1:86:34:35:c9:61:d5:19:
ae:f4:c1:52:d5:c2:35:ce:b3:94:d2:f0:c5:98:f3:84:73:af:
e7:0b:d4:04:68:0f:12:d8:49:6c:b4:5d:93:f3:2c:ba:35:a4:
ac:fa:ec:26:d2:e3:39:8a:92:a4:98:e2:2b:d6:e5:63:e9:9f:
09:99:67:a7:70:cb:ea:bf:c1:f5:6e:23:b0:7e:97:62:dc:3c:
21:19:8a:88:5c:58:c6:69:e5:9d:08:26:ae:2e:d6:2c:d5:20:
07:b0:f4:95:41:58:07:bb:48:6d:07:28:53:63:71:ee:42:55:
de:0b:80:e1:e7:36:52:99:74:7a:4e:a5:ed:77:b7:0f:57:a4:
9b:ff:93:49:03:c9:b3:ea:dd:d9:2b:a4:8b:65:02:d5:8b:b9:
04:5d:56:e9:b1:5b:fe:ee:4b:ce:24:99:e9:e5:43:cc:4d:3c:
82:bd:89:0a:42:58:16:2b:9d:37:bf:d8:7f:88:78:db:5b:e2:
36:7d:4b:c3:f0:13:53:b5:5f:eb:31:f4:4c:29:9d:d0:7e:4a:
6d:f3:42:13:52:91:7a:3e:2e:00:c1:bd:5d:fd:b1:17:7f:f3:
6f:9b:df:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:26:37 2025 by rpki-client