Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17780198-5f85-4e25-bc6d-534276c21dc0.roa
File: 17780198-5f85-4e25-bc6d-534276c21dc0.roa (raw, json)
Hash identifier: 8xFiyUtLKkRemIsuwFA4yeVcKzE1QsB5ow4eSxHzoQ0=
Subject key identifier: 04:15:10:4D:E9:DA:14:D8:CA:F1:C6:7E:E0:65:CA:E7:82:B7:16:69
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 341DB352D6C52A9422C525142697BDC9C03FFEFE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17780198-5f85-4e25-bc6d-534276c21dc0.roa
Signing time: Thu 07 Sep 2023 00:00:00 +0000
ROA not before: Thu 07 Sep 2023 00:00:00 +0000
ROA not after: Thu 12 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:1d:b3:52:d6:c5:2a:94:22:c5:25:14:26:97:bd:c9:c0:3f:fe:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 7 00:00:00 2023 GMT
Not After : Oct 12 23:59:59 2023 GMT
Subject: serialNumber=973772cf6e26d5e197c27b45354933c3062381ac36e107647317d49880498bf3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:35:d2:a1:d3:d6:c9:d2:b3:b3:6c:08:f1:
1f:6f:f3:17:1b:c2:63:f5:58:2e:dc:74:6f:b4:8a:
f3:94:50:ef:7c:bd:41:a5:59:26:ae:cc:13:95:1d:
a9:55:b7:55:ff:04:7c:08:33:9c:1c:ec:d8:7a:42:
82:44:12:d5:87:ac:69:a2:0c:96:80:a6:76:e5:b1:
76:42:ec:ab:c6:05:6d:07:ff:8e:1d:b3:d4:58:32:
b5:0e:9b:10:3e:03:ee:19:10:f1:ff:2e:c9:69:65:
46:fe:b0:20:4f:c2:60:0f:a4:dc:05:15:bd:db:00:
16:fc:4b:71:0c:ce:be:58:91:af:7e:46:08:a7:3f:
32:56:a9:43:e2:aa:5c:30:a0:89:49:b0:1f:65:ed:
a3:f6:d2:f3:a8:17:31:d8:b9:a4:06:b7:2e:6a:68:
19:d3:b8:9c:bf:8c:dd:92:93:97:d9:67:4b:35:8f:
ee:30:ba:56:ea:3c:db:33:98:59:bb:af:21:c5:2f:
93:e0:d1:0b:7d:92:1a:80:7e:3d:5a:2f:87:2d:d6:
62:3d:06:08:83:a7:c2:b4:16:29:9e:a0:41:bf:93:
cf:5d:48:df:21:71:46:5a:a0:12:df:7d:c0:08:ec:
5d:d2:9a:56:19:da:73:41:40:9f:a3:e8:1e:d6:20:
ab:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:15:10:4D:E9:DA:14:D8:CA:F1:C6:7E:E0:65:CA:E7:82:B7:16:69
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17780198-5f85-4e25-bc6d-534276c21dc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:92:fe:df:69:10:cb:21:5c:4b:22:cc:5b:06:a7:94:6a:d3:
7e:d6:6c:d7:15:61:ff:7d:e4:9c:e5:29:52:1d:b1:b3:b0:3b:
e3:ac:54:dc:01:b0:fc:8b:33:a8:a8:01:9f:61:5c:14:b9:7c:
4e:73:1c:63:51:81:8a:ee:db:59:0b:14:d5:97:49:51:34:db:
33:60:8b:72:45:5a:2b:fa:da:67:cb:5b:d4:6a:d7:1b:e3:ea:
96:2e:43:b1:b8:9c:6b:21:fd:75:e6:47:c5:64:f9:05:37:9d:
42:66:b7:a6:b0:9d:34:f3:20:6b:55:8a:20:c4:86:be:43:ff:
8a:11:89:6a:d1:b8:93:0e:f3:d5:b9:7b:11:90:54:24:57:04:
61:fd:e0:4c:bb:a9:0a:c8:b6:38:44:1e:61:71:bf:9f:6c:8c:
50:a4:96:b0:68:86:0f:bc:14:e9:7f:58:40:22:b3:f2:6c:3c:
a2:ed:06:cb:11:7e:85:84:63:92:88:5b:6f:e3:8f:1c:51:ca:
cf:fc:37:21:aa:a1:51:91:1a:ce:32:b2:ad:22:23:79:98:5d:
30:e6:68:2b:fd:10:d3:16:71:c7:4a:0c:a1:20:f9:e6:83:74:
41:ec:32:54:8b:1e:f6:3f:3a:14:36:e7:ad:6f:d0:7d:8d:cd:
17:bf:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:47 2025 by rpki-client