Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/258700fd-d548-4238-88b6-188d66d7a1d3.roa
File: 258700fd-d548-4238-88b6-188d66d7a1d3.roa (raw, json)
Hash identifier: 4Er2IHGZjptgqwUZaBaoIXxeYDEg9dHM4KP03hqc1Zo=
Subject key identifier: 47:A7:54:34:D0:B4:0C:5E:41:C6:2B:1C:5A:68:FF:7D:42:6F:DE:C7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 08D8F2E4098B7EB358673133CC7F750031B44E63
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/258700fd-d548-4238-88b6-188d66d7a1d3.roa
Signing time: Fri 13 Oct 2023 00:00:00 +0000
ROA not before: Fri 13 Oct 2023 00:00:00 +0000
ROA not after: Fri 17 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d8:f2:e4:09:8b:7e:b3:58:67:31:33:cc:7f:75:00:31:b4:4e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 13 00:00:00 2023 GMT
Not After : Nov 17 23:59:59 2023 GMT
Subject: serialNumber=a8fe688fde1159dfaac9cdaa0626a78086849943b42db9de89fa1c69d2696b78, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:ac:25:fc:af:cb:29:5e:3f:fa:e9:ff:8d:
58:28:38:b5:f8:7d:e5:66:c8:c6:66:56:6c:78:90:
e2:af:7f:2f:94:22:f5:8f:bf:0d:e5:d1:b6:7f:45:
f8:ee:5d:0d:e9:e7:6b:96:24:04:79:36:f4:80:0f:
09:09:56:8f:16:46:1d:0c:9c:b0:d6:26:90:da:2a:
17:1e:0b:51:eb:01:d3:bf:71:5b:27:9b:89:7b:c5:
58:4b:98:89:37:36:9b:6b:ad:39:d4:0d:72:5d:d8:
53:22:75:8d:71:3a:30:ea:97:24:66:3e:e2:f2:0a:
d1:71:02:b6:08:9e:79:27:0e:b0:a2:5e:e4:15:35:
d6:e6:e7:a4:52:f5:7c:f4:93:81:b4:3b:3e:35:8a:
60:3c:1e:76:c5:fe:dc:c5:e2:65:78:21:8a:e9:cc:
fe:06:e0:bc:a3:6b:73:7a:86:17:60:dc:fa:40:f0:
61:ad:8a:1a:e6:dd:e7:2b:68:c7:3f:59:49:9d:c9:
37:62:9d:cb:a4:87:ef:14:a7:7d:81:17:2b:ba:b0:
12:1b:57:84:17:2d:a3:49:4d:0c:5c:c2:77:40:8a:
fd:6a:6e:5a:0a:52:21:61:93:af:f7:6b:4f:fc:72:
97:67:5c:a4:fa:d6:a9:1d:f2:71:be:52:eb:0a:60:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A7:54:34:D0:B4:0C:5E:41:C6:2B:1C:5A:68:FF:7D:42:6F:DE:C7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/258700fd-d548-4238-88b6-188d66d7a1d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
49:e4:18:66:be:ea:69:d0:88:81:1d:94:f6:25:5f:3a:83:d8:
20:09:50:86:66:3c:2c:ec:97:77:98:d8:32:49:6a:46:a2:ee:
7b:fb:21:65:ce:af:5d:24:38:bd:03:29:9a:5a:d7:90:76:26:
97:8b:b3:04:58:c7:ba:8f:8e:30:c1:5d:2b:f4:e3:a7:71:fa:
4f:e1:34:34:ee:6b:57:b9:d5:32:9f:21:1f:e3:b0:25:32:d7:
9c:aa:9e:7e:99:9d:aa:8a:56:ad:fc:3e:98:e1:9e:19:0b:f1:
de:76:c1:1e:56:f7:e7:8e:d4:54:2b:48:5d:c8:e3:0b:b9:16:
1e:ae:d1:13:1c:70:a2:75:e3:b5:e5:1e:1b:24:30:e9:36:3b:
64:84:50:e9:c8:7f:82:89:26:6f:e7:fc:48:29:d7:93:87:a0:
45:36:e6:a8:e1:71:b8:ea:84:45:51:65:2b:2e:91:f4:6f:73:
d7:37:0f:95:4e:6d:86:5e:8d:18:bb:90:a8:13:f9:15:a1:52:
d0:de:37:61:95:3d:be:d8:c6:df:ca:b3:ce:7d:b8:22:2e:7f:
15:a7:8f:cb:5f:d8:0c:87:36:68:66:a6:7e:a3:5e:e5:04:3c:
3e:30:42:82:ec:cc:66:5c:2b:e1:15:c2:93:79:be:ce:50:38:
a5:36:67:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:09:17 2025 by rpki-client