Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/030a5bad-7956-423d-bf26-e005f823e682.roa
File: 030a5bad-7956-423d-bf26-e005f823e682.roa (raw, json)
Hash identifier: EUFxSukSbnQ9H5TNwFtnkUXG+YDazfZZL5hDvANiqeg=
Subject key identifier: 0D:7E:1E:2A:01:84:E9:FC:2C:65:80:3E:AC:B7:61:45:30:38:60:12
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7275636C321989CFBCA43A827B865DDC7392FD09
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/030a5bad-7956-423d-bf26-e005f823e682.roa
Signing time: Sat 08 Jul 2023 00:00:00 +0000
ROA not before: Sat 08 Jul 2023 00:00:00 +0000
ROA not after: Sat 12 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:75:63:6c:32:19:89:cf:bc:a4:3a:82:7b:86:5d:dc:73:92:fd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 8 00:00:00 2023 GMT
Not After : Aug 12 23:59:59 2023 GMT
Subject: serialNumber=d51e3129207a78e6fc7dcbbc92b8ff229da8640cd3121f33517841acb24ad39c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3d:ac:1a:0d:df:a9:47:5a:f9:9b:34:d1:44:
76:b6:16:11:4b:3c:60:17:21:d0:9d:b4:e9:3d:d7:
3b:22:1a:d8:0c:12:0c:8f:75:1d:5a:ba:ef:77:4d:
8f:1c:20:aa:b1:ad:ed:92:b2:b0:63:af:ac:e2:f3:
7c:8c:f3:e4:b4:42:2b:65:c0:88:b0:5c:a6:88:2b:
59:5d:c8:de:21:4d:d1:ce:67:e3:43:59:c0:89:98:
b4:f0:b1:0e:18:66:da:2f:69:00:f0:68:75:9b:b9:
8d:89:2c:6b:95:19:e5:81:e1:41:40:b7:cb:33:ec:
a7:1d:8a:d3:8e:67:c7:c6:2e:7a:ef:ac:4f:fc:b0:
2f:80:9f:4a:80:b9:d8:56:8c:b3:53:71:db:cf:93:
cc:7b:fa:61:2d:d8:05:6d:52:43:f1:75:62:1e:cc:
4f:df:b1:e4:a4:47:46:9a:79:43:8b:48:2a:26:1a:
13:11:ba:5b:b3:39:58:04:89:9a:38:b2:77:c2:c3:
c3:27:97:fd:5f:74:ff:43:d1:f5:08:db:fa:5a:ac:
70:53:b7:9b:71:86:2e:e3:fd:2d:f6:8c:45:eb:60:
b0:50:d3:50:cc:1c:d6:77:c0:2d:01:16:44:cd:dc:
36:2a:a1:3a:da:17:b6:c6:a7:e8:a9:23:5d:d9:28:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7E:1E:2A:01:84:E9:FC:2C:65:80:3E:AC:B7:61:45:30:38:60:12
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/030a5bad-7956-423d-bf26-e005f823e682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:00:3f:12:03:bb:bd:3d:ca:fc:9e:fa:04:c4:8e:f5:74:bf:
8b:bf:23:74:f5:b9:35:8d:a4:5f:9e:ca:d4:ab:75:85:ca:74:
3c:83:08:4a:a6:08:44:64:78:3a:1b:36:5d:00:a1:e1:ab:1e:
11:f6:5c:a3:89:25:8e:d4:4a:44:95:fa:11:0a:b5:ea:5c:ea:
12:d4:ee:9d:50:5f:46:32:60:5c:71:92:57:06:04:f0:97:49:
16:58:91:35:ac:87:a7:7a:35:ef:68:07:93:73:eb:93:74:0e:
ca:dc:7a:91:cd:03:61:0f:32:27:81:37:7c:78:49:41:e9:bb:
24:e3:51:c1:75:03:db:55:66:42:9d:9f:d5:f2:7a:c0:41:83:
7c:0b:34:39:f4:d1:ec:d1:9f:81:f0:16:12:1e:aa:d2:19:46:
84:a2:53:55:59:4b:d0:d4:53:0b:97:dd:a1:7d:52:63:95:61:
d4:29:95:4c:22:3a:d0:4e:b5:14:0e:9f:b4:4f:f2:45:f7:85:
ea:a7:9a:8f:1f:7b:1e:23:fc:74:e5:b7:d3:b2:e6:f0:c5:3b:
cd:ad:8f:ee:4e:86:f1:61:cf:bf:45:0d:7a:38:d4:cd:68:d5:
2f:25:ef:38:e4:ff:fa:26:c3:27:3c:e5:30:c5:54:1d:41:cd:
84:36:13:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:24:17 2025 by rpki-client