Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/05035c57-f2e8-4788-84a0-f670a389e3da.roa
File: 05035c57-f2e8-4788-84a0-f670a389e3da.roa (raw, json)
Hash identifier: J/H85VFgm7iQQ4Kn80aVjDfF/BC+4P03uqwb04DEbOI=
Subject key identifier: DD:54:E7:26:6C:E5:7D:76:B2:83:8E:39:65:B9:AF:53:CB:63:86:16
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1B24E9B9A45EFC933C935AD4BB98AEDF2C291C02
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/05035c57-f2e8-4788-84a0-f670a389e3da.roa
Signing time: Thu 26 Oct 2023 00:00:00 +0000
ROA not before: Thu 26 Oct 2023 00:00:00 +0000
ROA not after: Thu 30 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:24:e9:b9:a4:5e:fc:93:3c:93:5a:d4:bb:98:ae:df:2c:29:1c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 26 00:00:00 2023 GMT
Not After : Nov 30 23:59:59 2023 GMT
Subject: serialNumber=898b430f8b63d6b36b2d2f6c77ca0943c1babc5a3fe557b94794c15969f64907, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:1a:1f:29:41:01:c2:95:d9:99:03:ea:76:
ee:a1:52:fd:28:1b:f9:73:3c:08:ed:40:a1:03:8c:
3f:2c:40:a4:fc:d2:18:f4:3a:6c:86:80:e5:7c:3e:
16:b0:00:80:80:19:fc:99:65:dc:37:bc:e6:48:90:
c2:43:a9:56:c2:e5:f4:66:a0:67:b0:61:e6:17:b8:
8f:0b:a3:62:d1:55:eb:63:84:2b:85:b3:2b:ae:6b:
ef:df:16:e6:4e:f2:2b:e8:10:7a:fe:4b:6c:23:19:
97:b5:0b:d8:3a:c8:dc:07:70:af:64:47:b4:f5:bd:
16:03:ba:3a:e5:9e:af:59:e7:fe:4e:fc:a3:6a:aa:
d2:0c:5e:75:63:bb:db:b8:b0:89:81:7e:03:c5:c2:
98:da:09:e2:6f:2a:52:de:cf:b7:28:07:7c:10:63:
6f:80:d8:64:dc:85:8e:cd:e6:c6:f7:19:9b:76:7e:
f1:05:2c:b8:a5:52:e9:ff:e0:94:7b:a0:ae:c9:68:
1e:96:69:0f:ae:ed:90:da:49:43:4c:26:09:f3:ee:
b0:ec:0d:af:a8:29:1c:f9:29:60:b0:4d:11:38:a4:
d8:a8:fc:75:6c:23:c6:a4:78:89:77:7c:b3:db:d8:
f1:c6:da:1a:8c:45:9e:c3:3f:40:e3:66:eb:e4:7f:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:54:E7:26:6C:E5:7D:76:B2:83:8E:39:65:B9:AF:53:CB:63:86:16
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/05035c57-f2e8-4788-84a0-f670a389e3da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
09:36:fd:b3:d0:98:aa:cd:49:32:dc:0b:84:bc:7b:c5:fb:ca:
27:0f:2a:55:33:f5:83:95:f5:ae:2a:9b:b0:3e:38:83:c5:ca:
02:f4:08:b7:1e:54:13:8f:0a:86:40:d6:ec:1a:f8:f8:83:f6:
b7:28:65:e7:e0:3d:20:31:b9:f1:fb:85:70:0a:b6:12:24:94:
5f:03:a6:bc:f0:14:12:24:7c:3a:47:58:d6:78:a9:38:74:bc:
87:ca:f3:b6:de:f4:4b:67:30:4d:98:41:27:87:94:e0:22:21:
d1:b7:e3:1d:ff:fe:c8:58:d9:c7:9a:88:20:2e:8b:43:77:24:
1f:97:6a:db:f2:90:5c:7f:d0:9f:81:3d:a7:ac:30:9c:dc:f7:
d8:0e:94:28:b3:ba:e0:64:06:14:e0:fd:38:1a:9e:19:76:47:
98:91:71:22:e3:a4:c3:d2:a0:8d:5f:a5:f3:d0:ac:92:dc:f5:
fe:f1:4a:6a:5d:90:88:25:0e:cf:50:89:4d:d4:6f:71:db:9d:
c2:7e:3a:b9:71:f2:73:a8:d6:48:bc:55:08:24:27:21:ff:65:
f5:44:10:14:4d:99:71:13:ed:c8:a5:9a:b6:ff:9d:65:02:a1:
4e:9e:4c:f7:6e:96:ed:19:12:14:20:12:62:c8:51:9c:9f:ca:
4c:de:2f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:23:05 2025 by rpki-client