Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/05b9cbcb-0875-4572-a562-d8ae12014bff.roa
File: 05b9cbcb-0875-4572-a562-d8ae12014bff.roa (raw, json)
Hash identifier: 2Mp4KFZLEMydTldrCErkx/3kIe3sB0ckTIqXtgU9uqg=
Subject key identifier: 13:2C:8B:19:0C:EA:56:55:FB:DC:94:04:F6:26:46:39:BF:1D:8B:84
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4E2041EEB70E508BC3194B69D0EEAF9A00A1E9B3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/05b9cbcb-0875-4572-a562-d8ae12014bff.roa
Signing time: Fri 13 Oct 2023 00:00:00 +0000
ROA not before: Fri 13 Oct 2023 00:00:00 +0000
ROA not after: Fri 17 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:20:41:ee:b7:0e:50:8b:c3:19:4b:69:d0:ee:af:9a:00:a1:e9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 13 00:00:00 2023 GMT
Not After : Nov 17 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:aa:53:48:e3:0c:c6:c4:d8:26:ed:78:d1:
10:81:bc:30:36:dc:9f:b4:e6:d6:84:7e:1b:11:bd:
f5:28:88:3a:4f:b2:27:eb:d5:21:3f:8b:be:5a:b4:
aa:2e:65:63:37:4e:a0:60:39:0a:c0:dd:13:aa:ed:
6c:33:63:60:11:e3:36:d7:40:4e:ad:3e:1a:0e:e1:
ee:98:10:b2:51:6d:8e:43:59:9a:4a:71:fa:a7:04:
4d:5c:7d:36:7a:f2:db:4b:23:cb:dd:d6:7e:73:65:
c0:d4:de:43:7c:4a:ce:20:7d:05:ff:be:b9:ec:c9:
64:d5:a8:a1:0f:84:e5:71:ad:46:30:35:b1:d6:e8:
0c:7b:80:d7:c1:be:2c:65:eb:f1:c0:31:55:b6:e1:
0a:9a:09:c1:87:60:4d:70:db:11:66:36:4c:fc:66:
36:f9:e6:78:5e:48:f8:a0:b5:7f:26:52:c5:78:ac:
8e:2f:0a:85:fc:b7:31:ce:fa:64:ce:f8:9b:b8:4a:
df:e5:28:64:f8:14:27:23:e4:d2:1b:61:33:8c:d1:
c4:c2:0b:b9:44:9c:31:e5:1f:bd:97:df:dd:b4:f0:
7f:83:ec:06:48:5d:5e:a6:e8:63:a0:89:27:4f:d9:
c8:d1:c3:66:61:03:bf:5c:2c:ed:5c:d9:6e:2e:e4:
cf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2C:8B:19:0C:EA:56:55:FB:DC:94:04:F6:26:46:39:BF:1D:8B:84
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/05b9cbcb-0875-4572-a562-d8ae12014bff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:b5:c7:5a:21:bb:c1:ad:13:5f:9c:c3:90:b1:98:ad:8c:4e:
7a:99:12:91:b8:88:86:10:03:4d:10:77:f6:57:79:2c:dd:ff:
2a:32:b0:21:74:a9:84:98:9a:31:83:4d:5c:11:80:eb:d1:49:
5c:64:5a:41:b7:38:0c:c3:8f:56:44:8e:2e:b8:d7:a0:41:5c:
1b:97:e7:a0:dc:79:82:72:82:13:3f:5f:dd:db:27:69:7d:67:
cd:c8:19:3b:02:00:23:cd:d9:1b:85:3f:b3:5a:1c:6d:60:66:
34:11:0c:e2:b1:f4:c6:93:cc:3a:23:b6:b2:28:dc:19:7f:be:
60:18:a4:9e:bf:45:5a:38:42:05:b9:80:c6:eb:1e:a2:92:9e:
81:d9:11:0e:2b:0a:93:6a:55:d6:42:18:57:18:d9:e3:0c:b7:
37:32:17:ac:34:76:44:e7:0a:8b:99:c8:da:79:09:ae:2b:49:
af:b3:29:20:94:0a:1b:fd:93:8f:9c:b7:85:54:c5:93:ba:d4:
f6:1a:ac:d5:b2:14:6e:bf:3a:c5:06:9b:a7:8f:17:bd:cd:f7:
4d:b0:52:ee:a0:4e:70:33:11:05:e8:b2:0d:70:26:6d:32:57:
3b:01:26:c1:2c:00:f7:fe:50:d6:bd:4d:17:cb:e7:b9:2d:a4:
0d:93:0d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:03:47 2025 by rpki-client