Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/04163ba5-7729-4014-809d-f20879252e26.roa
File: 04163ba5-7729-4014-809d-f20879252e26.roa (raw, json)
Hash identifier: 0OTQyY7zU8R84B/gYV9yOeXDbJNv2nkwVPMgyxVN24I=
Subject key identifier: 90:15:BE:F9:4A:06:4C:CB:B1:75:AB:A6:B4:B9:5E:EA:A5:5D:5F:6E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 53A2D6C44CCAEA1FEBDB7FF5F7FEAE1D0BB705D5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/04163ba5-7729-4014-809d-f20879252e26.roa
Signing time: Thu 05 Oct 2023 00:00:00 +0000
ROA not before: Thu 05 Oct 2023 00:00:00 +0000
ROA not after: Thu 09 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a2:d6:c4:4c:ca:ea:1f:eb:db:7f:f5:f7:fe:ae:1d:0b:b7:05:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 5 00:00:00 2023 GMT
Not After : Nov 9 23:59:59 2023 GMT
Subject: serialNumber=d375df6ae0fd05adfcb830271e73391f25b92f97e0355146f4940353876539cb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:08:8f:dd:c6:3a:e8:a1:83:05:d3:17:45:d9:
db:ed:72:48:b7:e0:41:f6:8d:6a:be:0a:25:27:ee:
b1:73:09:77:e2:00:70:10:04:3e:61:26:97:fc:15:
6b:da:89:6b:04:fd:49:93:4b:fb:2e:58:ab:b0:b0:
5d:88:d3:9d:df:db:60:e1:5a:31:a1:19:45:1f:45:
2b:eb:0a:da:61:26:9e:51:0b:c4:27:4b:e5:6e:e9:
3f:01:f2:a2:ee:d2:47:ea:32:eb:a5:f4:a7:3f:ba:
ad:ff:da:10:d2:29:1f:83:0e:07:4f:2f:92:08:3a:
47:7d:4f:79:9b:81:f1:b7:a3:26:7e:87:77:9f:d5:
86:80:a8:72:0c:13:07:33:b5:4c:5b:2f:5c:c5:85:
52:07:8d:91:ba:6e:c9:15:fe:c6:a2:48:70:d6:f2:
5e:e0:e9:e6:23:11:31:94:25:df:3f:02:48:58:7b:
5a:cc:25:d6:c6:b8:93:6d:cc:07:3a:e0:a3:bf:57:
5e:9a:a8:4e:6b:d9:57:96:fb:63:80:32:60:59:32:
ed:49:f8:08:b5:d3:9d:68:49:3c:01:2a:d1:60:e6:
27:77:aa:eb:0d:cf:12:0b:a7:fb:6b:ef:2e:ee:d6:
ae:fc:4c:4f:21:99:c2:ba:ed:d1:8f:48:b2:7f:84:
9a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:15:BE:F9:4A:06:4C:CB:B1:75:AB:A6:B4:B9:5E:EA:A5:5D:5F:6E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/04163ba5-7729-4014-809d-f20879252e26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:09:8a:9c:2c:f3:e3:d1:4d:26:9d:8e:52:9d:06:43:85:95:
83:71:70:e8:98:2b:a6:da:76:97:7b:60:e0:f2:39:b2:b0:02:
f6:2a:99:e4:56:90:67:f6:c5:64:d8:8e:bf:9c:29:ce:80:84:
15:ae:65:b5:ad:22:ba:e9:e4:52:d0:e1:f4:77:d0:6a:b3:e6:
64:e1:4e:63:f5:ed:cd:de:3f:15:a4:fd:fe:fd:44:64:27:80:
e1:9e:e1:36:16:6e:92:44:3e:26:e7:cb:30:fe:5d:9b:d0:e0:
33:70:b8:c4:c1:d8:d0:71:45:ba:b6:4c:cc:69:13:38:d1:4a:
6c:d5:ea:49:a4:f9:f9:4f:81:8e:32:d7:03:62:cb:d8:d6:5a:
c9:90:dc:1d:17:24:2f:b2:98:5b:c2:8d:c8:29:5b:94:6a:41:
71:cb:67:4d:f5:49:32:73:cb:94:ba:97:b1:41:26:cd:bb:1e:
7d:a7:ba:16:ed:e3:ee:57:71:2a:97:94:73:16:ad:79:6f:ac:
99:5a:4b:ce:31:78:09:1c:17:ae:92:68:72:f0:b3:d4:f9:42:
28:5b:b0:8e:c3:3f:03:b1:4c:ab:bb:0b:1c:7c:69:d0:c0:6e:
a0:14:3f:61:23:f7:45:0c:94:09:5c:37:59:0b:21:50:19:9b:
ce:a0:c8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:31:20 2025 by rpki-client