Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5737da2a-6979-49dc-997e-afe7aa9fe5ca.roa
File: 5737da2a-6979-49dc-997e-afe7aa9fe5ca.roa (raw, json)
Hash identifier: WqBK3ONY/tMARdcurnK0SsGnYpQSLxS3kJVQu19m73I=
Subject key identifier: B0:99:06:4F:E4:67:92:A7:CA:12:07:33:0C:43:26:35:18:56:FE:01
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2703F47839A32FC9EE858611ED35A49F81BD1E8B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5737da2a-6979-49dc-997e-afe7aa9fe5ca.roa
Signing time: Thu 12 Oct 2023 00:00:00 +0000
ROA not before: Thu 12 Oct 2023 00:00:00 +0000
ROA not after: Thu 16 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:03:f4:78:39:a3:2f:c9:ee:85:86:11:ed:35:a4:9f:81:bd:1e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 12 00:00:00 2023 GMT
Not After : Nov 16 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:cc:31:c8:49:c6:74:3c:94:e8:bd:17:a0:
46:04:67:2b:d0:60:35:9c:a8:8b:a0:64:57:c2:bf:
1c:87:65:55:fa:11:38:34:45:11:37:22:2b:84:d1:
fd:b6:f7:22:ae:84:51:6a:fc:92:b9:5d:6f:ee:7f:
cf:de:97:63:bd:36:e7:d7:be:77:5b:25:ed:e4:c1:
32:43:a4:52:b1:79:6d:0f:5f:14:9d:01:e0:52:34:
30:3b:1d:b0:1c:01:c4:c6:a3:8f:58:a5:65:1d:d5:
7e:25:a2:cd:07:90:c8:23:f5:34:ff:38:57:e4:e4:
89:11:63:cd:b9:5d:98:40:a8:89:70:21:85:95:6a:
77:91:88:cf:cb:31:bd:44:7b:3e:b2:d7:1e:8a:36:
bd:1e:7c:ca:7c:ec:ac:87:b2:75:69:3f:3c:33:9d:
12:47:ef:6a:39:f7:20:a6:24:8b:ba:56:b5:02:67:
2e:46:9a:88:da:55:c1:17:42:32:38:cd:64:36:43:
52:cb:08:b1:60:90:aa:99:01:e1:8e:a0:87:16:2e:
c1:e7:33:38:26:0b:58:1d:c8:f8:39:8a:86:e4:34:
4d:68:00:ec:11:12:c7:64:fd:02:bb:ca:33:76:05:
e5:60:e5:0d:e3:b0:12:19:68:00:43:08:8d:17:9b:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:99:06:4F:E4:67:92:A7:CA:12:07:33:0C:43:26:35:18:56:FE:01
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5737da2a-6979-49dc-997e-afe7aa9fe5ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:65:88:5e:f2:5d:2b:df:ce:f2:8c:3b:17:f4:cb:44:8c:74:
16:50:27:fb:8b:83:fa:fc:85:e0:68:47:b2:aa:4c:f3:3d:4d:
0b:a1:c4:0f:86:98:2f:a5:48:ba:f6:f7:c3:78:1f:7b:4f:b9:
b9:01:0d:90:54:63:15:26:a7:2a:1e:40:3e:9f:cb:ff:8c:72:
c4:0c:30:ca:70:78:20:66:ff:c6:cf:45:45:4d:87:ca:35:10:
4e:89:10:7f:e8:27:b9:1d:28:98:b9:0d:bb:66:3e:d3:57:e1:
aa:6a:ba:15:51:78:1f:71:de:9d:b1:52:a9:2d:b1:6d:c2:c4:
3f:27:30:06:95:56:77:3f:92:ba:c9:0c:11:84:98:ab:aa:a4:
66:10:61:70:f3:5f:e7:de:37:4a:12:79:b0:2a:28:b5:8e:0e:
3f:d7:c8:72:5a:f0:70:1b:61:31:5c:da:3e:e1:99:13:07:8b:
9e:24:85:fa:2b:b9:7d:e1:d7:9a:da:55:e3:87:be:a8:5e:cb:
46:e0:94:92:0f:85:90:a5:0e:5c:91:aa:d3:c0:a5:07:fc:a4:
8a:72:c0:88:28:c5:4d:09:1a:ea:79:e1:9b:42:0f:74:96:86:
f8:0d:09:34:58:32:f0:09:3d:77:31:06:7f:bf:24:5d:0c:d6:
2e:8a:bd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:55:13 2025 by rpki-client