Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a70c418b-f5b5-4921-87de-3c8e2cfa4c10.roa
File: a70c418b-f5b5-4921-87de-3c8e2cfa4c10.roa (raw, json)
Hash identifier: vCxgJmIGwRwIUv77AZ10xX3mDZAD5iBotqx3v1/P6DU=
Subject key identifier: AC:B5:83:8F:BA:6F:A9:96:E4:9D:0F:6D:23:D7:2C:FF:3F:6F:AA:D9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3C308FA2D0CDE531ABC4A89E41C2D048EA4C41A0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a70c418b-f5b5-4921-87de-3c8e2cfa4c10.roa
Signing time: Mon 21 Aug 2023 00:00:00 +0000
ROA not before: Mon 21 Aug 2023 00:00:00 +0000
ROA not after: Mon 25 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:30:8f:a2:d0:cd:e5:31:ab:c4:a8:9e:41:c2:d0:48:ea:4c:41:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 21 00:00:00 2023 GMT
Not After : Sep 25 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a4:ec:41:5b:38:00:41:91:e1:25:f8:03:86:
07:56:97:f2:4a:bc:89:34:fb:3e:ed:79:48:2d:18:
8d:ac:eb:97:17:ee:fc:aa:38:b0:e1:d3:84:88:25:
1e:e8:66:88:9d:0c:21:16:75:5b:82:bf:2d:ca:7b:
63:12:31:be:a8:1b:07:02:58:ce:6b:cb:11:2b:b9:
79:c1:43:bf:b6:33:53:f9:f7:a9:6f:9d:4e:80:da:
78:cb:7e:e3:52:82:1a:ab:58:5b:b0:96:bb:44:51:
95:e6:92:27:60:cd:48:a3:94:55:28:37:81:05:a5:
f2:e7:ae:30:fb:d2:ea:b6:b9:55:87:85:97:42:93:
3a:3b:d7:9b:3d:41:29:1d:5f:db:d9:ea:e2:0d:1e:
10:b1:39:fd:29:19:e8:a8:01:a7:b2:6a:78:e7:a1:
03:28:b0:02:98:7e:32:6d:18:67:9e:dc:2e:97:cb:
b7:60:c0:2b:65:6f:69:30:0d:e7:b2:cb:18:a1:f8:
a1:2f:4e:38:6a:c5:11:91:77:92:73:56:bd:24:b3:
87:7e:29:ca:e3:18:1c:da:03:d4:22:8b:8d:51:5c:
87:e4:0b:3b:42:0e:f2:35:8c:e7:22:3f:b7:3b:eb:
0a:a6:8b:33:cb:1d:18:c6:3b:ce:9f:5f:89:ef:ac:
88:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B5:83:8F:BA:6F:A9:96:E4:9D:0F:6D:23:D7:2C:FF:3F:6F:AA:D9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a70c418b-f5b5-4921-87de-3c8e2cfa4c10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:8a:c0:ac:cd:c5:23:04:b6:02:2e:ae:0e:63:c0:11:2c:36:
7b:48:17:82:66:1f:4d:37:c4:94:7e:4e:0d:27:90:51:45:bd:
f1:d0:03:87:6c:00:9a:c8:ca:82:af:d6:ba:08:6a:da:f2:0e:
1d:21:ed:b4:3d:56:76:ba:a0:2a:8f:6e:97:05:b9:2c:27:30:
95:77:57:8f:79:6a:b2:29:4b:5d:2b:76:c9:14:12:90:6f:a3:
d6:18:d6:cb:54:51:06:a5:24:f5:e3:eb:0f:c1:f1:a4:3a:ae:
ec:04:8e:fd:dd:2f:92:df:a4:46:fc:b4:4a:f7:43:b8:0d:de:
76:55:84:3c:2c:47:f4:89:38:76:75:b1:84:b4:ab:03:6f:f9:
bc:da:bd:6a:88:bf:a6:8d:74:bd:77:bd:5a:c3:f7:52:24:95:
c5:03:28:45:4b:bb:3d:01:42:9b:bc:0c:82:87:25:f0:a5:2b:
94:87:9b:ca:8c:d6:14:09:42:3a:2e:62:16:39:76:39:ee:f0:
3c:ad:ce:3d:f3:28:53:18:fc:91:2a:f6:30:33:f6:89:8b:a7:
0b:1a:75:bd:ba:cb:e2:a2:ec:90:2d:eb:79:23:8d:ea:37:3e:
66:b0:0b:a5:cb:6a:76:76:87:1f:9b:3d:ec:9b:0e:66:68:4f:
47:66:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:54 2025 by rpki-client