Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1faad5a2-df0b-4e1f-8e77-8b23e3d41656.roa
File: 1faad5a2-df0b-4e1f-8e77-8b23e3d41656.roa (raw, json)
Hash identifier: UyOGjrkHFSqBfdH8lct0Mo84xoEq9G5JVav0NxWS3kI=
Subject key identifier: 2C:DF:AF:E0:86:C8:58:39:37:7D:82:B2:AB:C9:16:08:01:7D:9A:70
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 407F6F8B745EE02A26643F69890FA032D65B5E9E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1faad5a2-df0b-4e1f-8e77-8b23e3d41656.roa
Signing time: Tue 09 Jul 2024 00:00:00 +0000
ROA not before: Tue 09 Jul 2024 00:00:00 +0000
ROA not after: Tue 13 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:7f:6f:8b:74:5e:e0:2a:26:64:3f:69:89:0f:a0:32:d6:5b:5e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 9 00:00:00 2024 GMT
Not After : Aug 13 23:59:59 2024 GMT
Subject: serialNumber=e0bf7369b7d74a859c6242a677a098bb158ad4c50d0a31458af7d26e0e757c40, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:f6:f0:ae:c3:da:06:30:ed:07:59:89:e6:
31:99:9b:aa:c8:da:cf:38:a3:d9:38:99:eb:b7:15:
26:64:5f:a7:ab:24:8b:5a:19:44:d2:41:a9:c3:15:
86:86:e1:6e:cd:0a:51:3a:d1:10:81:aa:f9:cd:1f:
d5:69:ad:4a:ba:a7:05:d3:2a:4d:0f:36:83:1f:26:
a9:62:9b:de:43:32:6d:2f:65:31:34:40:b8:bd:aa:
c2:cb:3d:94:43:a2:00:ac:a6:88:4d:61:be:12:e3:
19:2c:32:d4:aa:10:d4:4a:16:87:72:e4:fd:76:fa:
7d:4f:a8:ad:86:f6:70:b8:b9:66:c7:2f:9d:30:f5:
d2:ec:2d:5a:12:82:a7:14:ac:60:2f:42:50:80:7a:
7b:1e:e2:3a:a5:aa:9c:a4:4c:04:e3:e2:5c:c8:3c:
56:16:02:38:50:e9:ce:69:64:12:97:f3:87:69:8b:
db:81:26:fd:3a:d0:c5:59:1e:54:af:f6:43:2e:41:
5a:fe:ed:2d:bc:2f:37:f2:76:3a:2d:3a:b7:51:41:
3f:4b:45:b4:32:16:52:14:41:e3:57:ee:7e:78:1a:
a2:cf:0c:47:3a:91:2e:95:d6:cb:73:5e:c0:d9:34:
f5:f4:18:99:83:08:7f:b8:2e:fc:45:a2:9c:5c:50:
01:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DF:AF:E0:86:C8:58:39:37:7D:82:B2:AB:C9:16:08:01:7D:9A:70
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1faad5a2-df0b-4e1f-8e77-8b23e3d41656.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
15:07:b7:b7:5b:a0:05:36:27:5c:4b:80:b6:c3:40:07:db:01:
87:8c:30:20:a2:69:f8:3c:34:07:67:34:6e:4e:fd:0b:ec:52:
05:f5:b7:b2:c6:7f:c9:2d:2d:82:98:70:3d:e7:62:ee:fc:e7:
9f:15:eb:9b:f6:3e:d9:48:e5:3e:68:cc:e7:c5:5d:2a:d0:19:
de:dd:ca:39:a7:a3:0f:ff:78:6a:bd:cd:d6:c6:67:ba:99:80:
46:79:bc:ae:cd:39:53:10:c2:14:0b:88:47:3c:b1:b7:07:90:
c1:66:4c:35:ae:85:51:cf:93:ef:52:2b:d1:6b:80:46:d5:66:
14:6f:7e:dc:05:00:48:fb:98:07:3a:7e:52:72:39:77:bb:26:
07:04:5f:c2:86:84:16:e3:99:12:d2:5a:84:e4:b7:ad:fa:40:
7e:56:f6:2d:2f:bc:20:dc:a7:28:ba:de:b3:6b:b7:44:ea:37:
75:93:10:47:4c:b0:ff:80:f6:f9:78:3d:fa:7c:a9:85:75:6c:
37:ac:b4:22:b6:63:a7:82:15:b3:16:63:6c:7a:f8:9f:14:24:
2f:df:d8:50:a0:1f:e5:28:9c:8e:c6:19:0d:d3:15:9f:b7:8f:
ea:2c:78:1a:96:06:4b:79:5e:a9:99:fd:f7:31:6f:d1:b2:e1:
7b:b3:63:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:06:24 2025 by rpki-client