Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e5b15c26-f43b-4bb9-a17b-f93e6da3d8fc.roa
File: e5b15c26-f43b-4bb9-a17b-f93e6da3d8fc.roa (raw, json)
Hash identifier: Hc3TbkNexMhKNrs/wzn5P+3jv1NkfYjdhooj4nE/tSQ=
Subject key identifier: 93:34:CC:E2:7F:74:5D:5F:34:60:72:3F:06:39:E8:0C:0E:60:22:7D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 04A3B83F258CBEA82D4D08EB9F6141994C8A8FA3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e5b15c26-f43b-4bb9-a17b-f93e6da3d8fc.roa
Signing time: Thu 06 Feb 2025 00:00:00 +0000
ROA not before: Thu 06 Feb 2025 00:00:00 +0000
ROA not after: Thu 13 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a3:b8:3f:25:8c:be:a8:2d:4d:08:eb:9f:61:41:99:4c:8a:8f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 6 00:00:00 2025 GMT
Not After : Mar 13 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:f1:78:b2:bc:0a:6f:6f:11:a7:ae:b3:97:
16:69:c2:3a:d8:15:26:5f:34:8d:13:5e:da:66:e1:
1c:9d:f5:4e:c8:94:a7:d6:2c:30:c1:07:ff:4d:7a:
5c:e8:e3:6c:97:bd:42:cd:c2:cd:34:03:12:61:f2:
62:31:71:81:56:97:87:35:57:7a:2d:69:52:3c:e6:
42:8f:66:17:95:dd:b0:20:0a:34:4d:e6:5e:a7:16:
64:80:af:5c:53:c1:ac:7e:de:e4:81:9b:2d:2f:a0:
b4:42:56:26:3b:96:25:da:bb:b4:1a:a7:4b:dd:d0:
74:88:37:e6:3f:09:37:c6:3e:54:98:7b:76:8a:71:
3b:10:da:8a:3f:80:da:70:73:dc:f1:b9:3a:b1:90:
16:37:85:a8:ea:ef:76:00:98:5a:11:08:40:96:cf:
d1:fc:e8:27:ab:ef:d5:01:ff:00:ec:c8:b9:20:4d:
ad:5f:eb:05:78:a2:82:75:08:1f:f4:80:c3:be:c4:
ef:56:70:01:43:96:43:26:89:b9:7b:88:c5:d6:57:
2f:86:e0:66:19:4d:28:f1:f9:71:7b:dd:ad:d3:1c:
51:17:d7:53:cc:c1:ae:87:11:46:70:4b:bc:07:e3:
18:39:20:e8:75:71:39:a3:33:4e:48:0e:c5:88:79:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:34:CC:E2:7F:74:5D:5F:34:60:72:3F:06:39:E8:0C:0E:60:22:7D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e5b15c26-f43b-4bb9-a17b-f93e6da3d8fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e1:6e:ea:04:58:93:6f:0a:26:d3:80:f8:c0:a1:ff:3a:6c:
53:b5:2b:d8:bd:ac:e9:ef:9e:b7:7a:bf:87:ac:7a:24:37:38:
bf:cf:77:d2:28:74:f2:26:2c:15:2c:e8:65:d3:75:fd:d1:91:
f1:df:d6:4f:9d:bd:1a:3c:b6:41:c4:53:99:39:74:da:70:e3:
ea:6c:72:39:65:09:29:5f:30:3a:78:5e:60:7c:f3:96:11:9d:
fb:00:d3:81:cb:0c:94:22:60:43:02:35:db:13:5e:fe:06:04:
c1:41:b1:ed:c7:00:22:95:15:46:2e:82:a3:0d:71:15:b4:f0:
32:a1:3c:6d:9f:35:d5:fa:a8:69:81:1f:52:3a:d0:8d:d1:72:
f0:91:48:4c:23:43:bb:ed:9c:f9:36:fb:9f:ec:a1:b0:c6:05:
ee:10:11:43:01:60:b5:60:cf:c2:a1:f1:06:d3:dd:f6:50:8e:
11:02:a1:d3:16:74:ad:68:f4:df:11:4d:fc:ad:d2:cf:e2:48:
67:af:22:d9:2a:ac:d9:75:1a:ac:fc:18:a1:49:fc:34:67:a6:
48:e0:27:4d:19:40:41:bf:9c:05:c6:92:01:33:f3:3e:c7:fc:
a2:6a:2d:a3:54:46:56:1b:67:81:39:84:e7:01:33:7a:b9:27:
a5:16:de:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:36:03 2025 by rpki-client