Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca31b128-b5f8-4e62-a489-d9f9a456e71e.roa
File: ca31b128-b5f8-4e62-a489-d9f9a456e71e.roa (raw, json)
Hash identifier: bibmEY/3q2mIeDAjWaSW8XFgOhyQPJ5/NqCCJ0UBdsM=
Subject key identifier: 90:FD:DA:EB:64:25:DF:5C:0C:63:5B:70:91:46:66:63:94:50:86:1A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7DBFD0058B63D61697B695899ECBCBA65F75A34E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca31b128-b5f8-4e62-a489-d9f9a456e71e.roa
Signing time: Thu 06 Jul 2023 00:00:00 +0000
ROA not before: Thu 06 Jul 2023 00:00:00 +0000
ROA not after: Thu 10 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:bf:d0:05:8b:63:d6:16:97:b6:95:89:9e:cb:cb:a6:5f:75:a3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 6 00:00:00 2023 GMT
Not After : Aug 10 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:12:fb:3e:71:a1:9d:45:05:4a:e2:75:12:
07:17:21:51:aa:cb:64:1b:ec:f9:b7:6b:0b:30:39:
d0:1f:21:e4:5d:f1:17:3b:5e:84:7a:47:75:1b:ab:
9f:09:52:7b:84:44:96:11:64:a8:4e:86:62:e3:4f:
42:ca:cf:ff:bf:db:c8:2a:83:d7:bf:50:33:b4:5f:
40:90:bd:0b:9e:85:69:81:8a:95:f0:f9:12:3c:24:
d1:c4:72:30:2d:d8:3e:d5:a7:c5:b9:be:44:50:72:
5a:34:30:ca:6c:f8:97:2b:23:ea:ae:13:02:8e:74:
26:1d:f5:10:c7:13:cd:c6:de:d9:bb:93:b0:93:d0:
8a:2b:83:3c:ee:9b:58:5a:1f:e3:17:4c:7a:11:66:
9f:55:ae:f8:13:d8:c8:0f:3b:a9:da:fa:d2:2b:fe:
ad:22:d5:34:94:05:cf:41:7f:8c:f5:ab:0e:14:59:
0a:42:d9:4d:a9:a7:de:03:11:08:fe:4c:9d:fa:40:
75:67:b1:77:d4:d0:ce:08:4b:e0:c9:a6:32:94:4f:
16:cf:b3:8f:f9:c0:11:13:83:7d:80:a7:e6:31:3a:
66:0e:0f:8e:24:33:86:ea:fa:15:44:43:60:cf:f4:
0b:d7:e6:d5:ce:e6:ee:27:af:39:35:70:96:6d:0e:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FD:DA:EB:64:25:DF:5C:0C:63:5B:70:91:46:66:63:94:50:86:1A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca31b128-b5f8-4e62-a489-d9f9a456e71e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8e:31:24:e0:11:4b:f0:7f:c5:28:67:f4:f2:9e:fe:60:69:
c9:5e:2e:12:2e:24:77:4d:21:39:ed:9e:de:68:bb:33:21:ab:
e4:b0:ee:45:48:03:29:f6:32:68:f5:5a:71:d5:5d:89:d1:dc:
45:ac:19:75:9b:2d:e3:e7:42:d1:df:b8:eb:b5:84:21:13:ad:
02:15:da:a0:16:59:93:c5:b3:cc:4f:12:04:1f:cb:e4:d9:8e:
90:27:fb:db:14:03:44:46:fe:18:4c:93:31:0b:00:cc:35:e8:
d7:5a:66:1d:ea:74:b7:be:b6:f5:8c:d3:f8:10:19:66:ec:0c:
50:32:fc:22:6b:f2:e3:e2:8d:bb:45:01:ec:4a:66:06:b6:db:
8f:db:d7:3a:8a:b1:b2:98:c7:c3:bc:a2:73:67:ea:4d:c2:f2:
7d:9c:9f:e3:4d:47:40:e6:7a:25:17:4c:b2:22:6e:34:cb:52:
30:22:8e:1e:ad:26:75:0f:03:07:52:41:4d:da:f7:32:14:b8:
8d:ba:8c:51:4b:1a:3f:0b:cd:f8:f0:c7:16:d8:f3:b2:42:7a:
d2:fb:a2:0c:2d:71:3c:48:7a:fa:b8:15:44:3a:95:0f:ff:75:
78:13:86:2d:bd:05:20:5b:ca:bb:15:70:9f:fc:8c:89:82:65:
8f:5d:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:49:56 2025 by rpki-client