Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ea589780-4bd1-4bd8-a97d-8d693e0939e4.roa
File: ea589780-4bd1-4bd8-a97d-8d693e0939e4.roa (raw, json)
Hash identifier: idQpu6j9ig33ZKZ92RDNhhw7U1ZMdxMTZK2Z1gIC+O4=
Subject key identifier: 75:99:AD:B0:EC:2B:1F:F8:ED:87:84:AA:61:52:76:79:DA:AE:2D:5B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 07D0EFC11B12B6D64DC15D900FBCE13E12D863AA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ea589780-4bd1-4bd8-a97d-8d693e0939e4.roa
Signing time: Tue 21 Nov 2023 00:00:00 +0000
ROA not before: Tue 21 Nov 2023 00:00:00 +0000
ROA not after: Tue 26 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d0:ef:c1:1b:12:b6:d6:4d:c1:5d:90:0f:bc:e1:3e:12:d8:63:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 21 00:00:00 2023 GMT
Not After : Dec 26 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:a3:7f:1c:9e:3f:dd:a8:9c:2c:61:98:ec:
db:78:1e:d6:7f:89:78:aa:e4:22:16:dd:67:f5:dd:
42:bb:5d:b5:20:81:a8:2e:f4:49:2c:4f:fe:1b:6c:
1e:37:9a:82:61:85:45:2c:28:09:b0:53:1f:80:64:
75:d3:f3:5a:14:04:a0:36:64:57:32:56:72:69:0d:
35:4f:01:e0:5f:5d:fd:50:25:c9:3d:f3:b9:4e:fd:
a0:f4:a6:30:40:9b:0f:b9:56:16:f3:c1:8e:73:a1:
ef:60:8c:b8:ae:be:62:16:ec:ff:06:de:41:33:df:
b7:3b:5d:1a:1b:40:4a:c0:e0:0c:1b:30:f2:88:1d:
1b:4b:08:8d:b6:db:64:b7:aa:c4:8d:db:e7:f4:f3:
45:28:80:77:52:af:77:59:7a:17:98:24:de:75:70:
a8:c9:52:8c:31:f2:d7:2e:1d:dd:49:a8:8e:07:61:
bf:bd:5a:43:d5:12:d0:6b:75:26:bd:bb:87:8e:9f:
79:33:5b:59:04:7e:7b:71:d0:60:93:47:77:f3:32:
28:75:49:0f:a9:af:b7:ca:50:46:80:9c:e6:df:3c:
59:2e:24:61:2e:bb:6e:1a:b6:71:d5:7e:f6:e4:1a:
b6:90:1f:4d:82:96:1e:5c:3b:16:8e:bf:5f:c2:7a:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:99:AD:B0:EC:2B:1F:F8:ED:87:84:AA:61:52:76:79:DA:AE:2D:5B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ea589780-4bd1-4bd8-a97d-8d693e0939e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a8:ed:32:9e:27:cd:0f:df:6a:78:3e:51:f5:7d:08:0d:54:
24:a7:66:a3:84:af:82:c5:35:93:7d:18:c9:66:d2:3f:19:84:
24:74:c2:65:3a:4e:f8:85:98:5f:46:f2:d2:4b:f5:0e:3d:95:
bd:f5:0d:b6:c2:2f:2c:5d:30:64:d6:7f:54:52:d3:f3:6c:d7:
4e:1b:bd:51:80:31:5e:14:64:f6:66:3b:70:8c:d0:d3:4e:36:
56:6a:cb:27:04:d7:e1:12:69:a3:92:0c:dd:a4:9b:d5:68:ea:
b5:e2:f8:6a:df:09:28:23:aa:fc:02:ab:44:e7:fd:d1:42:3d:
b0:23:6a:0d:ec:94:49:fb:4f:0e:9f:89:fb:29:41:81:6f:47:
90:94:7b:84:9f:bc:ea:28:a6:eb:19:9d:b1:30:5b:1a:47:6b:
a4:e8:54:cb:32:ef:ac:ee:a3:6e:57:55:46:85:5d:12:62:5f:
72:45:84:78:48:44:d9:07:7f:16:b5:6a:e2:9d:71:bd:1a:9c:
a4:a3:fb:6e:0a:2e:3a:6f:94:5b:70:ca:e7:71:9d:2f:55:be:
d8:9a:37:30:0a:cf:49:8a:96:59:92:b4:9b:2c:db:c5:e8:ba:
27:71:80:e2:c9:c9:0e:e4:06:13:03:18:87:db:9e:c5:cd:01:
6f:ed:cb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:59:31 2025 by rpki-client