Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/98893508-19e9-4438-ba62-7d08a3712c69.roa
File: 98893508-19e9-4438-ba62-7d08a3712c69.roa (raw, json)
Hash identifier: DSWm0U5o+7RBASqluastR9Z0gxjpG3HJC0dEOGTZAW0=
Subject key identifier: 85:8D:40:FA:29:31:ED:00:F6:D3:BA:C0:AD:C7:44:60:F1:F5:DD:66
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2540B8DC2E5CB638C3F892A8EA632275D36178A2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/98893508-19e9-4438-ba62-7d08a3712c69.roa
Signing time: Mon 11 Sep 2023 00:00:00 +0000
ROA not before: Mon 11 Sep 2023 00:00:00 +0000
ROA not after: Mon 16 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:40:b8:dc:2e:5c:b6:38:c3:f8:92:a8:ea:63:22:75:d3:61:78:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 11 00:00:00 2023 GMT
Not After : Oct 16 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:28:47:04:2d:eb:dc:60:0c:3f:dc:c9:85:90:
13:10:cd:11:e0:7d:b7:7a:a1:e9:32:7a:83:f8:5d:
14:83:82:50:32:2e:bb:1e:83:72:31:ac:13:de:ae:
5a:4e:91:6a:25:a3:00:fb:80:74:2c:7f:01:e8:23:
49:a8:a7:e5:73:15:d4:a5:a2:94:94:d7:f9:09:bd:
9d:fc:b9:80:bd:8e:dc:97:25:87:61:50:8e:4c:38:
a7:d6:19:a2:f7:4f:0c:71:e0:45:cc:68:43:a3:e5:
ff:bd:ea:77:63:64:ef:ab:46:88:f0:57:fb:d9:59:
48:44:5f:bc:cd:8b:8f:dc:a0:be:a5:db:39:3c:da:
ca:ee:7c:33:f5:80:9b:86:81:5b:20:68:59:62:38:
01:7d:d9:3c:1e:61:a0:04:3e:76:f2:4c:06:2e:25:
aa:93:8d:c7:15:a2:fa:35:74:43:ea:58:4e:70:b6:
45:7e:e7:c9:fa:c5:3b:67:11:b3:fb:ea:b2:0f:06:
a3:4e:77:fc:16:f8:15:19:7c:43:43:6a:bc:c4:59:
c4:5a:8d:0f:b9:43:63:5e:08:96:2b:c3:36:31:d8:
c1:fa:d8:29:65:cd:c6:0f:2b:80:53:5a:cd:c2:aa:
0a:c6:f1:8b:10:b9:21:76:07:08:9a:87:66:a4:b7:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8D:40:FA:29:31:ED:00:F6:D3:BA:C0:AD:C7:44:60:F1:F5:DD:66
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/98893508-19e9-4438-ba62-7d08a3712c69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:1c:0e:65:2e:0c:0d:9a:ec:bd:1f:dc:b1:2a:3f:db:a4:3e:
26:ab:82:a9:13:37:60:3b:79:22:94:f0:ca:b8:81:58:50:77:
a1:11:64:a6:a1:4e:58:38:36:aa:dd:da:d6:b3:0b:2c:39:a4:
74:76:28:37:9e:be:b3:07:67:95:0d:c4:68:2f:c5:ab:a8:75:
b1:11:18:90:90:18:59:b6:e9:b9:92:75:a1:b1:c1:fe:02:2b:
78:00:15:0d:c7:65:f5:00:a8:9f:bf:54:b8:d7:e5:71:e8:d8:
a2:fd:87:9b:3b:9b:16:74:7c:c6:e1:aa:46:cf:f4:82:8d:c7:
5b:51:5d:33:63:75:7d:1a:94:b8:62:a1:8c:2c:4d:81:89:a6:
34:9f:4e:ab:01:70:ab:ca:7b:51:43:35:a9:4f:f8:df:f6:a9:
07:a1:fd:2c:b2:b1:6b:68:12:12:12:ea:7f:2d:97:32:ef:5f:
07:f7:28:66:69:2f:f0:af:85:77:d9:43:f8:82:94:de:72:16:
66:ff:11:34:71:d8:97:1a:0c:e9:96:c0:57:68:35:08:db:9d:
f4:e1:b5:e9:59:f4:d0:33:9f:88:bf:57:bc:a2:12:b7:3c:59:
fb:f8:5e:98:0d:17:03:65:d7:50:6a:7c:0b:03:74:c6:b9:d7:
66:44:c2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:58 2025 by rpki-client