Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/942224ea-7da3-4a8c-8493-1f06ee207b66.roa
File: 942224ea-7da3-4a8c-8493-1f06ee207b66.roa (raw, json)
Hash identifier: XLTyVdQ5L83L8ouxxBtcjYSZujh9drlBlfUaowTiwZM=
Subject key identifier: 98:B8:82:90:FA:B8:1C:8D:9C:1D:57:F3:A9:73:95:5D:4E:D1:00:63
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: D92D0D62D9EE788EF1E4C8566FD878BC3CA8BB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/942224ea-7da3-4a8c-8493-1f06ee207b66.roa
Signing time: Thu 16 Nov 2023 00:00:00 +0000
ROA not before: Thu 16 Nov 2023 00:00:00 +0000
ROA not after: Thu 21 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d9:2d:0d:62:d9:ee:78:8e:f1:e4:c8:56:6f:d8:78:bc:3c:a8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 16 00:00:00 2023 GMT
Not After : Dec 21 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:35:36:9a:72:69:f1:cd:39:ba:c8:b6:b6:f5:
ea:b6:ca:80:a1:9e:99:88:50:d9:64:37:43:a3:06:
26:c0:4a:9c:2a:56:30:27:ae:1d:9f:2b:8a:48:f7:
86:c4:bc:b2:c9:48:68:04:bd:f2:ac:e2:10:90:5d:
7c:75:11:1a:bd:fa:9c:48:f4:8d:03:e8:dd:a2:77:
05:2d:d2:ac:11:60:2c:77:c7:76:16:91:4a:3e:46:
5e:5a:fd:c8:1f:21:28:0d:0e:39:de:e6:c2:14:8a:
07:29:52:c9:f8:c0:da:63:7a:bd:d4:78:36:3a:6d:
8d:fb:19:d5:35:29:c5:2d:87:ae:58:08:c2:6b:f2:
a9:38:69:21:80:04:e7:f7:ba:43:69:2c:2c:fc:0b:
a2:9f:b8:ec:70:15:23:da:de:69:4e:8d:b7:8b:56:
99:55:d0:93:93:78:1a:93:62:60:73:3a:4c:d9:d2:
8b:e7:60:29:5a:8a:55:40:12:80:ee:fd:eb:ca:4e:
c3:4d:d4:13:8d:17:df:d7:bb:3c:a3:bb:d3:d9:d7:
30:e8:3e:e3:ce:87:0d:3b:2f:3c:74:ed:be:0b:9b:
e1:a7:78:7d:80:8b:65:f5:3c:4d:98:74:39:3c:07:
4c:4b:7d:4b:e7:36:81:36:ac:2e:22:10:c4:b1:83:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B8:82:90:FA:B8:1C:8D:9C:1D:57:F3:A9:73:95:5D:4E:D1:00:63
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/942224ea-7da3-4a8c-8493-1f06ee207b66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
44:09:8c:dc:7e:ad:c7:3f:05:46:b6:7d:33:9a:bd:12:be:1b:
1e:41:27:dc:08:49:38:9b:9b:bf:af:50:48:27:2c:7f:50:7a:
c5:1c:18:70:6d:53:db:7f:ed:9e:9e:79:23:e6:36:12:5b:1f:
03:2b:e5:09:49:ee:56:5c:eb:c6:f0:4a:84:3e:14:90:dc:70:
97:d3:ab:3f:c9:26:c5:8c:c7:7d:ec:5b:d7:11:64:a9:ee:76:
1e:0a:9a:ba:24:ff:f7:cd:48:45:51:c7:80:2a:6e:38:6c:3d:
bb:c2:d5:de:14:64:ae:23:ff:73:25:af:59:63:ba:0b:3d:44:
3b:e5:9e:41:44:83:30:10:5a:18:9c:b6:76:6c:5b:d2:cf:43:
83:0b:af:0b:ff:d1:ff:15:c3:3e:ed:6d:87:42:e5:99:3e:e6:
b8:c3:f7:e6:3e:26:ca:d9:df:cb:e2:30:fe:95:48:8a:65:4e:
57:9b:93:1c:0a:7d:ba:a8:42:64:fe:88:47:29:7d:75:aa:4c:
ce:e1:ea:37:dd:d2:b3:b0:74:38:4a:59:b2:21:bb:a3:62:cf:
06:a1:3c:3f:bf:92:3e:e7:20:9d:7c:5b:ee:cd:70:1f:a9:e5:
69:c2:01:f7:e9:f2:1b:fd:11:33:5c:f0:8a:36:aa:ff:4c:fd:
15:17:7a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:22 2025 by rpki-client