Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f7b1f580-7421-444d-9a8c-5404c9cce357.roa
File: f7b1f580-7421-444d-9a8c-5404c9cce357.roa (raw, json)
Hash identifier: 215gDJelpkHc5ljZLrc3tzvYZ4Lv+Qasmd3Mn1lQhUA=
Subject key identifier: FE:B4:32:15:EA:04:BB:B8:F9:F0:B2:CE:A5:8F:63:74:4E:0D:84:87
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3B474C1ADDB9835B97932ED3715FB875E28B7213
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f7b1f580-7421-444d-9a8c-5404c9cce357.roa
Signing time: Thu 07 Dec 2023 00:00:00 +0000
ROA not before: Thu 07 Dec 2023 00:00:00 +0000
ROA not after: Thu 11 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:47:4c:1a:dd:b9:83:5b:97:93:2e:d3:71:5f:b8:75:e2:8b:72:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 7 00:00:00 2023 GMT
Not After : Jan 11 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:d7:b4:c6:0a:bd:bd:d5:69:8f:44:c8:ea:
2b:f0:78:e5:77:a3:b8:b2:17:ff:67:53:81:07:8c:
30:49:6b:f7:94:b6:5c:c7:d1:a3:2e:f6:5b:79:0c:
3c:ee:c3:92:92:7e:ad:2a:d8:d8:78:9c:11:ec:ca:
14:37:09:84:9d:56:b5:ff:5a:bc:4e:c5:0f:7c:9e:
57:73:43:d7:8e:10:65:97:9d:ef:68:f7:3a:83:a1:
00:d1:cc:f2:08:10:bc:8e:db:7b:de:f4:17:6e:98:
ac:d9:48:3e:ff:30:b7:30:d4:43:d0:d5:59:d0:e5:
35:bc:69:9d:80:75:14:c6:a4:71:ee:da:e1:35:44:
ed:89:c9:46:aa:e3:f6:99:c4:09:9a:64:c3:b0:d3:
6c:a4:59:f4:5b:34:9d:13:8f:8d:86:45:5a:dd:e7:
51:8c:c5:a3:62:e8:94:bb:4b:5e:e0:7d:0b:55:12:
a1:21:21:02:9e:9e:ac:ee:f0:60:da:02:69:a5:62:
86:fd:1f:0d:9f:54:aa:08:a2:e5:5b:c4:2b:da:bf:
d9:f4:35:5d:0d:0b:28:05:eb:8e:b2:9b:ab:bb:86:
3d:a5:fa:eb:8f:32:1b:31:29:ce:c1:d6:a2:39:a2:
b8:58:4c:84:c7:96:bc:7f:5b:0b:fb:f3:37:7b:7c:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B4:32:15:EA:04:BB:B8:F9:F0:B2:CE:A5:8F:63:74:4E:0D:84:87
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f7b1f580-7421-444d-9a8c-5404c9cce357.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a1:80:9e:d9:4f:5e:cb:0e:2c:8d:99:d9:ba:af:16:77:b4:
72:af:d7:b0:ed:ce:b4:5e:d1:0c:bd:c4:c2:d3:6e:be:58:49:
ec:c4:59:8e:06:4c:2c:63:0b:98:69:36:cc:37:57:86:d8:4e:
22:4d:70:44:11:27:7d:aa:80:81:fb:ab:5f:30:cf:8c:09:f2:
4b:be:99:89:ab:9c:04:eb:e2:e6:aa:44:d4:46:6c:a2:6b:fb:
48:c5:18:1e:ca:6d:dc:ef:ec:14:f8:cf:c1:3b:ab:23:df:53:
46:46:aa:48:b1:24:be:34:ec:22:16:e0:4b:9f:03:12:14:13:
c1:0f:db:41:75:ec:2e:2a:65:50:ae:3c:ec:e8:22:c3:a7:1d:
2d:c2:7c:bd:17:33:55:2e:5e:7d:6c:8b:12:36:1a:f7:5f:40:
14:14:79:bb:82:af:8a:92:23:b8:b6:27:b6:37:96:2a:44:36:
43:b6:52:64:33:65:3b:5a:61:be:b9:f7:81:01:4e:49:fe:31:
2e:c7:01:13:e6:62:b5:e4:f8:21:1c:4f:a3:dc:bc:8a:da:24:
f9:ab:65:5f:b0:d8:0e:cc:c2:f9:8b:b3:07:38:b2:54:5c:db:
b9:3f:53:fe:bd:2d:f3:22:eb:50:fe:83:f3:d8:d8:c9:a1:fe:
5b:48:67:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:19:55 2025 by rpki-client