Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a9241fe9-2afd-46bc-a217-00c97b589c1e.roa
File: a9241fe9-2afd-46bc-a217-00c97b589c1e.roa (raw, json)
Hash identifier: X5aNsiDWWv2KWDFDyEJ+9ZvV6J5ViFDqjW9oPGLSJrM=
Subject key identifier: DA:6D:B3:54:67:FC:92:05:48:90:9E:AA:17:D5:12:51:E2:01:0B:7E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3103B6DCB6B59F1245D3DDAA4EEC8D5735183007
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a9241fe9-2afd-46bc-a217-00c97b589c1e.roa
Signing time: Wed 19 Jul 2023 00:00:00 +0000
ROA not before: Wed 19 Jul 2023 00:00:00 +0000
ROA not after: Wed 23 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:03:b6:dc:b6:b5:9f:12:45:d3:dd:aa:4e:ec:8d:57:35:18:30:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 19 00:00:00 2023 GMT
Not After : Aug 23 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:bb:1a:c9:df:2f:95:b1:eb:86:9f:30:e0:
97:86:7b:3b:3d:30:f4:05:8f:23:6e:f8:a0:66:30:
78:cc:84:c4:00:4e:00:43:b1:86:d7:23:46:19:cb:
ea:f9:41:01:9b:5e:8c:ba:3e:a1:cf:01:72:30:95:
a3:fb:0c:ec:9a:57:c6:ae:3c:69:00:18:b8:3f:07:
e3:b5:c0:60:c8:60:f7:2f:b4:d9:98:00:aa:e9:e9:
2c:e9:94:38:0e:6e:71:41:60:c9:10:11:fe:44:f7:
fd:6b:85:0b:1c:ec:2a:10:3b:56:0f:9a:d2:23:e7:
2c:1a:19:80:13:64:a5:9c:a0:fe:ed:ac:cb:f0:9a:
58:81:e5:e4:e2:36:ff:d6:70:ab:80:00:ae:7a:30:
a5:00:50:f0:16:4f:f6:59:dc:38:ac:08:a9:a5:15:
31:63:d8:e6:89:c0:99:9d:34:61:01:19:39:b2:e9:
70:5a:75:7b:c9:bd:69:15:b0:f9:8c:0e:ed:ea:3a:
5f:a1:b9:74:2a:aa:18:58:d0:d9:50:21:07:55:32:
c9:ba:11:11:29:6c:a2:c5:5c:43:c8:5c:86:39:3c:
d1:bc:af:f4:dc:21:bb:08:7c:8f:73:cd:53:f9:91:
c9:c4:e2:e0:43:7c:b5:87:ec:fd:40:f6:e9:e2:87:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6D:B3:54:67:FC:92:05:48:90:9E:AA:17:D5:12:51:E2:01:0B:7E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a9241fe9-2afd-46bc-a217-00c97b589c1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ea:bc:f1:55:68:b8:e7:0a:ba:4e:49:9d:66:b2:65:55:b6:
92:54:1e:f5:6c:37:4c:2d:2b:9d:43:39:8a:59:38:e4:ec:59:
86:2f:ee:c5:ad:2b:a1:e6:6d:72:36:b8:8e:ee:a1:8f:88:cd:
31:9c:fc:fa:35:a3:eb:dc:a1:a1:e9:f9:e2:19:da:5b:85:b9:
83:31:0c:5e:8d:12:19:d3:34:e0:9e:e1:87:e9:25:06:50:b2:
0f:0a:2d:0e:21:e0:a5:3b:c8:83:b5:35:62:60:6c:a8:b7:6b:
f5:45:78:11:a9:66:4c:16:d2:2e:45:c8:7c:65:72:60:16:1e:
9a:c4:4c:31:a9:8a:72:37:b9:bc:3f:ca:ca:7b:a9:04:da:ee:
2a:73:4a:46:23:14:da:f3:d4:20:13:a4:13:09:61:04:51:27:
b9:ed:4b:81:ab:00:62:85:92:3e:76:81:d5:da:0e:3a:18:99:
04:7a:3e:4e:5a:90:2e:c3:1f:39:89:bd:68:0e:c9:06:93:df:
88:16:bf:27:f5:11:6b:65:73:c1:0d:39:b6:db:4e:d5:04:77:
ff:2e:6f:b5:d8:0b:08:a0:40:32:89:58:b1:13:67:43:cd:38:
00:ad:13:87:a7:2d:e1:5c:cf:f8:e1:09:41:af:38:80:64:17:
ba:e9:45:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:13 2025 by rpki-client