Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/09bd19f0-433f-4cab-8470-7ecdf0c66a81.roa
File: 09bd19f0-433f-4cab-8470-7ecdf0c66a81.roa (raw, json)
Hash identifier: ayAGAv5A/qK4EVjFHI4FW/jON5CmiKnbEjzFho+UtvM=
Subject key identifier: 2D:12:63:9F:9A:F9:D4:2F:DE:A3:CA:44:7B:23:70:70:C3:86:7D:85
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6503B5D611319EE407DB4836901F0AC01CBA0F46
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/09bd19f0-433f-4cab-8470-7ecdf0c66a81.roa
Signing time: Sun 10 Dec 2023 00:00:00 +0000
ROA not before: Sun 10 Dec 2023 00:00:00 +0000
ROA not after: Sun 14 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:03:b5:d6:11:31:9e:e4:07:db:48:36:90:1f:0a:c0:1c:ba:0f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 10 00:00:00 2023 GMT
Not After : Jan 14 23:59:59 2024 GMT
Subject: serialNumber=574fc7bcc15ff26fce85493ad8e18583a8b3cc006e0e34c013395780eaf251f4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4d:63:c4:63:96:c2:e0:c2:9e:57:e3:3d:fc:
df:23:ad:58:5c:8e:3e:af:7b:11:26:f1:e0:c5:0f:
aa:ca:0c:40:a5:fe:85:19:d4:a5:2a:44:43:74:39:
54:dc:0e:b8:08:c3:58:2f:85:6b:41:6b:59:7f:d3:
20:12:fd:18:62:82:0d:f6:5a:8d:d7:71:f3:1b:19:
b8:c1:6b:70:7a:8a:40:d6:82:c4:b9:88:74:08:aa:
ff:a8:79:24:da:cf:a0:fe:82:1f:ac:a5:4c:f2:7f:
6e:32:9d:08:2e:25:6b:60:3c:aa:11:53:0a:d4:eb:
32:c0:40:36:4c:8b:59:43:71:cc:11:a5:cd:a0:62:
20:59:b4:b3:ea:d9:41:8c:50:6f:bc:ce:7d:e2:92:
94:50:42:1d:8b:03:ea:13:9c:d8:86:7e:a0:b6:9e:
f7:cb:6d:16:9f:6b:2e:b9:5d:dc:33:ae:04:56:d5:
80:e5:31:19:c5:a8:1e:1a:56:0a:97:b4:5b:85:d7:
54:0b:05:3c:a7:cf:04:48:12:96:6b:47:df:04:bd:
75:09:96:64:69:5f:28:02:b6:40:0f:77:9e:62:87:
fe:6c:d2:86:21:81:b2:c0:57:48:43:bd:33:12:c6:
e4:56:d0:7c:da:55:2d:eb:cf:57:5f:71:c2:d8:54:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:12:63:9F:9A:F9:D4:2F:DE:A3:CA:44:7B:23:70:70:C3:86:7D:85
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/09bd19f0-433f-4cab-8470-7ecdf0c66a81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
22:10:fb:a5:ef:35:4f:3b:a9:7d:6b:7a:d1:f2:7e:c6:61:1f:
8e:f6:18:26:c4:b2:26:46:b1:43:f3:8c:ff:76:1a:dd:87:80:
59:bb:b9:8d:d3:f9:f7:9b:af:fc:26:3b:23:34:44:56:85:fc:
87:8c:e7:fc:a9:0f:01:88:5a:26:78:cf:a5:dc:84:66:f9:a8:
49:5c:d9:ba:b8:59:bf:ff:13:1b:1b:70:15:cd:b1:1c:6f:21:
55:60:34:d0:6b:62:6b:66:65:f5:3c:33:df:ca:9c:c7:7a:aa:
1f:82:25:9a:87:c0:48:9c:67:7f:14:3b:12:1f:dc:94:b0:5f:
02:46:f7:7d:51:4a:56:6a:80:c4:a9:6f:11:9d:e3:b8:27:23:
20:d8:9f:24:96:c0:3d:cf:06:32:8e:7e:a2:55:03:f2:b1:9c:
59:16:1f:d8:e8:71:32:8f:1c:f4:fa:11:c2:c5:46:c3:c3:5b:
e5:d8:d1:37:05:ca:3b:c3:2e:0c:ff:13:b4:10:d6:36:b3:e1:
15:ab:6a:03:14:3a:ed:75:56:81:4d:e8:09:1a:d2:06:67:44:
3e:26:83:24:48:f5:99:9d:3c:a0:6d:f7:bf:5b:88:05:cc:d2:
88:65:55:97:67:df:b1:c5:f1:4f:2e:20:9c:c0:ff:7e:66:92:
f6:1d:0e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:11:41 2025 by rpki-client