Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d078fd8-f05d-412b-a314-81f824b7239c.roa
File: 2d078fd8-f05d-412b-a314-81f824b7239c.roa (raw, json)
Hash identifier: WCaVZQU9r4jt1nYL86GbbLr4k8g6v2mAEckU/1jSgzo=
Subject key identifier: C4:23:1E:7C:68:A2:39:AA:0E:4C:99:52:A2:29:8D:AE:3C:27:A6:62
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1AC1340960072579BD3D99DE26A333BF5D7CBC7F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d078fd8-f05d-412b-a314-81f824b7239c.roa
Signing time: Thu 31 Aug 2023 00:00:00 +0000
ROA not before: Thu 31 Aug 2023 00:00:00 +0000
ROA not after: Thu 05 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c1:34:09:60:07:25:79:bd:3d:99:de:26:a3:33:bf:5d:7c:bc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 31 00:00:00 2023 GMT
Not After : Oct 5 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:02:cf:e2:82:dd:06:1b:fd:ad:3d:fd:59:
b7:cb:b8:46:54:14:7c:d9:8b:b4:ff:b9:34:c0:5e:
b3:c5:da:f0:be:2a:99:69:63:bb:69:da:c3:f7:d4:
af:bd:20:55:a4:77:b6:bb:d8:ce:fe:82:fb:d3:f8:
90:a4:47:49:10:c0:cd:96:54:31:8b:3a:e9:1a:ac:
3a:1f:f4:9d:bb:8c:ae:cd:06:87:29:9d:0d:aa:7b:
85:35:bd:49:1b:74:66:18:05:1f:d9:d6:1a:9e:0f:
55:fd:21:72:9b:84:f3:42:95:64:73:71:65:59:f9:
99:d5:da:94:25:11:d1:84:52:da:00:7e:c7:39:42:
79:16:28:43:22:ac:4d:1e:ac:cb:b5:41:a8:a7:27:
d4:68:ec:a8:e7:09:26:df:80:c6:e9:8f:b4:6c:88:
1f:1b:d6:38:60:8a:45:68:c6:39:63:6b:af:83:64:
17:e6:08:3f:cf:75:29:26:56:b4:46:04:f2:e8:6f:
9b:72:21:9b:c6:2c:68:95:3e:3a:79:03:e6:1c:08:
00:53:f1:ad:3e:7f:a7:65:ef:f6:22:f6:c9:01:7d:
9a:ae:9b:22:5f:38:98:1a:cf:58:85:be:28:43:a0:
d6:35:2c:a2:a4:c6:40:80:9c:d8:fc:87:c7:d0:30:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:23:1E:7C:68:A2:39:AA:0E:4C:99:52:A2:29:8D:AE:3C:27:A6:62
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d078fd8-f05d-412b-a314-81f824b7239c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:35:c6:4b:a1:7c:a6:a6:07:68:fe:4b:6b:f1:9a:22:a9:ab:
83:f0:bc:1c:2b:af:88:e5:ea:0b:d1:05:a9:c4:b0:0a:24:1f:
c1:c4:69:d7:1f:02:19:00:c9:a1:ec:9f:7e:ed:8c:3d:00:8e:
01:3a:10:55:85:a6:84:51:e0:7e:5c:4d:b5:02:74:7f:04:2c:
4a:ac:d8:77:48:db:ac:16:57:aa:c5:2b:8c:11:dc:31:8b:ee:
6d:50:f2:9f:da:3b:23:b6:9a:89:fe:60:b9:bf:54:02:12:7d:
7a:a3:7c:9b:af:e7:6e:ee:ed:45:c0:ae:42:b6:6a:1e:54:c9:
88:98:ad:09:0d:df:65:7e:e7:59:3a:c9:d0:90:a0:3e:4e:63:
0a:3e:94:e7:aa:b5:e1:53:7f:26:c9:64:a4:af:97:58:4d:da:
32:2e:33:14:4f:f4:1a:9f:13:0a:51:cc:a6:d4:f2:c4:4d:82:
58:11:de:8c:78:8f:7b:c5:4c:1c:1e:cf:60:21:a1:6a:92:64:
79:5d:0a:0d:03:44:7f:8e:88:bc:9d:78:ab:20:7c:fb:cc:ee:
7a:14:08:4f:9f:29:38:df:de:59:67:29:29:06:1c:93:76:f5:
1d:42:54:b3:ff:e3:f2:98:8e:2c:4e:3a:d2:2f:02:39:d4:94:
5c:9b:a0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:59:04 2025 by rpki-client