Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/124acb8d-8440-49ef-8c14-703e031a8b47.roa
File: 124acb8d-8440-49ef-8c14-703e031a8b47.roa (raw, json)
Hash identifier: YtKyDT9hkSxIp+WBR7A6x8y+0aeBC+OtGRarxu129sw=
Subject key identifier: C6:09:66:C8:BC:21:0D:A8:47:1D:52:A6:42:23:B0:3B:85:76:0F:A8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 41E7519FB24DED4FB0745ECBAD9515E9D4149130
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/124acb8d-8440-49ef-8c14-703e031a8b47.roa
Signing time: Wed 30 Aug 2023 00:00:00 +0000
ROA not before: Wed 30 Aug 2023 00:00:00 +0000
ROA not after: Wed 04 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:e7:51:9f:b2:4d:ed:4f:b0:74:5e:cb:ad:95:15:e9:d4:14:91:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 30 00:00:00 2023 GMT
Not After : Oct 4 23:59:59 2023 GMT
Subject: serialNumber=674d4b17620f2d72573bf588fb17a9a65a84be75614f1a03c2ebd1118b0ab6f0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e3:4c:df:59:b2:e8:5c:93:92:fb:dd:9f:11:
98:3f:5e:df:38:9d:b5:8c:88:f3:2b:15:c0:f2:93:
9b:cb:b5:20:3f:bf:bc:fb:83:15:1d:83:88:3d:f4:
ee:75:b5:9b:4b:5c:19:ff:1d:8b:b8:bd:6f:95:7c:
09:c6:48:05:7b:a8:c7:87:2b:3f:71:62:ce:09:70:
96:bd:08:b8:6b:d4:a8:5c:11:bd:12:fe:51:3a:b2:
82:15:77:ba:a1:9d:b3:ba:14:5f:f6:8d:7c:25:4a:
0a:c2:c5:7e:be:bd:1e:db:e1:f0:5c:23:f3:e1:47:
c7:b4:7a:1d:38:bc:0f:e1:ec:b8:36:e6:bf:40:a8:
92:8d:fe:31:ff:d4:e8:41:26:3c:67:81:eb:58:0f:
10:1b:26:45:79:10:3b:20:4f:21:59:3e:37:91:ef:
d1:ba:05:29:cc:3b:ea:d5:60:81:31:86:a5:d4:04:
f7:cc:72:94:91:84:12:ef:fa:90:4e:09:b4:c3:7e:
1b:44:e6:73:63:f0:2f:26:c2:fb:c5:d7:9c:78:83:
57:c6:18:73:3c:64:9d:62:ac:7a:4f:f7:5c:cf:be:
52:67:d8:b2:ac:c7:88:37:66:9b:5d:2d:f8:af:08:
5f:6a:d8:f5:76:c7:9d:25:ab:eb:d0:7e:22:b0:09:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:09:66:C8:BC:21:0D:A8:47:1D:52:A6:42:23:B0:3B:85:76:0F:A8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/124acb8d-8440-49ef-8c14-703e031a8b47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:96:30:88:e5:80:05:26:6a:fb:1e:32:b3:58:86:06:12:25:
04:5f:c2:04:85:4a:2f:41:09:cb:b6:85:aa:2b:56:88:6b:68:
1a:27:06:18:95:4e:b3:90:51:77:db:f9:d6:cc:f8:ae:cc:fd:
a0:a7:88:82:f4:c2:71:11:c2:a5:52:b2:c0:3d:eb:f5:63:e1:
85:a4:d9:17:13:60:2c:e4:1b:e7:a1:59:03:ca:6a:27:98:21:
e6:17:01:0c:53:f2:1a:5c:90:56:d1:21:b2:2c:6c:19:45:7a:
3a:0c:e1:f5:d5:49:6a:21:bd:fb:f5:5e:f4:fd:b2:d5:73:36:
ac:1c:2a:a0:8f:c0:fb:0a:e1:98:ff:19:09:c1:26:38:17:fc:
d3:0e:ef:3c:93:2a:0f:31:1d:90:a1:42:d9:52:e7:6e:77:82:
e3:77:64:3f:43:eb:40:5d:a5:4a:03:d6:56:37:cd:17:f6:a0:
85:69:ad:5b:1a:57:c3:28:01:07:e4:48:df:ee:e5:32:7f:85:
ad:7a:c5:24:0c:f4:c8:67:17:28:cc:ba:c9:42:f9:64:02:e8:
a4:4b:89:48:1d:2a:29:82:8e:02:a8:21:45:b3:72:c4:86:03:
9b:30:21:e2:0d:44:08:a5:00:fb:c5:e1:ea:ea:68:f4:1e:98:
3f:04:06:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:27:03 2025 by rpki-client