Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cde37868-74f5-441f-bfb8-1373f5dca864.roa
File: cde37868-74f5-441f-bfb8-1373f5dca864.roa (raw, json)
Hash identifier: wzEUCtl2LnK0DRz7/0U9EJwI9dfZrekOGlwwDB9BheQ=
Subject key identifier: 1A:A7:B9:6D:4D:44:0E:10:E6:F8:C0:7E:4C:7A:5F:BF:76:37:94:D3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5BD69E9C34ABCE1CACEEA75C54107C35898C5B96
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cde37868-74f5-441f-bfb8-1373f5dca864.roa
Signing time: Sun 16 Feb 2025 05:43:20 +0000
ROA not before: Sun 16 Feb 2025 05:43:20 +0000
ROA not after: Sun 23 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d6:9e:9c:34:ab:ce:1c:ac:ee:a7:5c:54:10:7c:35:89:8c:5b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 16 05:43:20 2025 GMT
Not After : Mar 23 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:55:1f:17:02:68:64:91:d2:81:60:29:5d:
53:bf:0c:47:9a:ce:12:35:2c:0d:d0:85:3d:93:df:
16:10:cf:f5:02:e0:63:9a:e5:71:ff:f8:d6:8e:2b:
5f:e6:79:66:64:33:a4:d7:65:75:64:6d:21:1b:9b:
2c:7c:31:98:06:e5:33:61:3f:13:27:9a:7e:80:bd:
f7:ef:9b:e8:3d:50:fd:9b:ff:39:38:ac:52:e3:2e:
cc:f9:eb:9a:ac:3f:a4:5f:c6:76:f8:ac:23:9b:9a:
58:49:00:70:63:ec:d8:4c:02:e6:b9:e0:85:76:73:
e6:59:74:b9:c2:e0:4a:25:89:c2:93:6f:77:4c:26:
17:6e:22:41:69:ba:96:ae:c2:bc:96:eb:ab:a7:ca:
48:28:98:cf:ae:d4:99:9b:71:f3:19:8a:33:48:ed:
d0:05:eb:62:58:34:cf:d8:9b:99:87:59:08:40:50:
03:a2:36:fa:80:a6:e2:cb:df:17:6d:d1:ac:e8:df:
64:c6:bf:aa:f7:ad:b4:26:5d:f4:83:6e:08:0d:1f:
15:bb:c4:db:b6:2b:36:23:46:a4:a2:a7:30:6f:9e:
2a:0c:b9:49:1c:f0:86:54:cd:1d:79:68:47:8e:dd:
b1:38:74:8c:cc:d7:3a:54:08:18:a0:2b:58:ea:b3:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A7:B9:6D:4D:44:0E:10:E6:F8:C0:7E:4C:7A:5F:BF:76:37:94:D3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cde37868-74f5-441f-bfb8-1373f5dca864.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:91:0b:f5:5d:e1:27:ae:a0:c7:7e:c6:8d:ec:c1:37:64:1a:
8c:bb:30:69:b9:38:45:8f:5c:62:e2:b5:d2:f4:cc:ca:b5:c0:
c9:e0:29:9a:3b:79:b8:a7:59:d7:34:83:48:c1:4f:d0:b7:f6:
a6:f9:64:f8:56:b3:b5:29:06:49:f2:27:57:73:6e:52:34:db:
1b:46:cb:65:e2:a2:bd:20:19:76:05:28:25:9b:b2:d6:44:e9:
41:fb:0f:69:ac:1a:de:4d:cb:d1:1e:ad:2a:8b:57:b3:43:30:
6b:5d:c1:6c:ee:22:60:c4:7e:10:b2:33:31:bf:79:04:4f:08:
15:59:73:79:73:ee:69:e7:f9:9a:74:b9:98:d0:ec:f4:1f:37:
c6:b2:d0:26:bd:1d:8c:0d:db:35:cb:ce:3d:44:c9:89:85:20:
a3:32:d7:b8:67:d3:d1:8b:60:6a:72:a5:93:63:7b:e8:6d:fe:
6b:c3:d5:bf:d7:cf:14:eb:dc:a9:07:ad:30:ba:75:a6:5c:07:
c1:ef:78:ad:49:72:09:2f:cb:33:73:46:49:f8:47:01:63:d0:
e5:d9:ef:45:48:10:1c:9a:24:4d:74:92:f6:dd:f7:c8:79:e7:
d2:b2:2c:b2:76:8e:d4:02:34:32:37:72:8e:f8:33:13:5d:a8:
bc:d8:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:26:05 2025 by rpki-client