Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c770786-1296-409a-a3b4-dbaa57318814.roa
File: 7c770786-1296-409a-a3b4-dbaa57318814.roa (raw, json)
Hash identifier: yRXao5hNhpk5HYS1O2QrYlnM9oqZFQL01eWQxD+NO+0=
Subject key identifier: F3:67:DA:B3:6C:77:1E:CF:84:27:71:CF:ED:5D:65:76:57:A0:61:34
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 67E86F53AD8305B02ACBD627AD685E80653C8999
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c770786-1296-409a-a3b4-dbaa57318814.roa
Signing time: Tue 17 Oct 2023 00:00:00 +0000
ROA not before: Tue 17 Oct 2023 00:00:00 +0000
ROA not after: Tue 21 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e8:6f:53:ad:83:05:b0:2a:cb:d6:27:ad:68:5e:80:65:3c:89:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 17 00:00:00 2023 GMT
Not After : Nov 21 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:56:c3:df:4d:4d:60:41:d3:98:6f:69:ca:
4d:53:0a:cb:b0:dc:07:c6:f2:3d:e3:5d:8a:b6:ab:
e8:31:22:74:2c:1a:02:4f:d6:45:5b:e5:13:2d:13:
e6:57:eb:39:47:6c:3f:24:5a:e6:3b:78:2d:e2:34:
ab:62:32:61:7d:1d:c4:58:dd:1e:bd:a1:7c:e0:62:
31:51:d6:0d:04:21:79:6b:f0:66:81:4b:f9:68:d1:
5a:28:2f:16:cb:fc:b4:e8:06:81:22:ed:1c:a7:ba:
02:d6:66:2e:01:6f:7c:d9:32:56:80:80:dc:97:a8:
21:fc:cc:54:ab:0a:4e:df:3a:55:69:79:67:a3:33:
4e:d6:8e:b8:4a:a3:cb:33:f2:20:bb:fd:eb:cf:f0:
20:24:00:e3:6d:2f:6e:eb:d6:d6:3d:6e:68:8c:63:
39:5d:7b:7e:08:19:e7:a5:63:b6:39:3f:d2:27:60:
8f:7b:7d:20:66:9d:de:d0:cb:50:18:1f:11:f5:4e:
0c:4c:4f:49:98:de:84:a2:41:92:ac:5e:21:ec:f5:
d5:9a:c9:c5:77:46:f0:db:df:9d:dc:54:d4:13:41:
bf:dc:b3:c8:6a:69:6a:13:5f:82:a1:25:fb:96:b1:
ab:cf:cd:c9:11:ea:57:d8:f3:79:f6:8a:bc:ff:fb:
13:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:67:DA:B3:6C:77:1E:CF:84:27:71:CF:ED:5D:65:76:57:A0:61:34
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c770786-1296-409a-a3b4-dbaa57318814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
33:34:2e:bf:b7:0e:bd:df:7a:e3:5d:d8:0b:21:1a:f9:42:d2:
c7:50:0e:3e:09:ff:4e:19:ab:0b:ef:0b:8c:78:ed:a9:58:c1:
f0:81:db:ec:8b:99:37:e8:7f:e7:00:a8:df:13:eb:50:b0:50:
ff:fe:5f:6a:7a:c5:49:a0:da:97:82:72:9f:fd:29:60:98:7e:
ea:06:ff:b8:f1:ea:6d:33:f9:21:3b:da:ef:91:66:c4:2e:54:
5c:18:ff:56:2e:29:bc:ea:b2:73:9f:7b:c3:61:84:6c:8a:c6:
db:08:de:b9:8e:f9:b7:a5:ea:ad:23:30:8e:01:4e:4b:2b:0b:
4c:fe:1c:18:98:d9:60:13:25:9c:08:6f:ab:e9:c0:c8:9f:1c:
e2:b3:4e:cf:78:77:5b:14:76:d6:05:31:2c:69:4a:5a:71:61:
ea:a3:49:86:62:c7:0b:59:df:4a:ce:49:bf:39:f6:15:8f:52:
d7:ec:12:2c:fb:57:d4:d2:ae:a6:11:36:bc:96:b0:6c:04:43:
a0:57:39:02:21:82:0c:64:51:2c:7d:86:de:96:b9:67:4b:e4:
a7:a1:fc:6f:4d:d5:50:0e:a0:e5:86:5f:5d:90:dd:c9:8c:fd:
01:a6:53:62:32:92:b7:59:7f:86:35:ff:3c:c9:ff:56:42:04:
bc:f0:ca:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:22 2025 by rpki-client