Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/273b0d85-138f-4087-a2b7-98185221a929.roa
File: 273b0d85-138f-4087-a2b7-98185221a929.roa (raw, json)
Hash identifier: J67yQ6wSkYsnFUti5H853HADCLOdW1FC5Kb/MugViJI=
Subject key identifier: 5F:F9:C3:CD:19:AB:BA:A3:1B:8C:76:CB:DF:43:0D:22:88:A3:A8:B2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0C9194B16D5999942246DA86E60E582114340DA9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/273b0d85-138f-4087-a2b7-98185221a929.roa
Signing time: Sat 04 Nov 2023 00:00:00 +0000
ROA not before: Sat 04 Nov 2023 00:00:00 +0000
ROA not after: Sat 09 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:91:94:b1:6d:59:99:94:22:46:da:86:e6:0e:58:21:14:34:0d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 4 00:00:00 2023 GMT
Not After : Dec 9 23:59:59 2023 GMT
Subject: serialNumber=1482d34a3038e93369e1e8ac15d8a03fc2810966752f16e95ca29dabb6827985, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:e4:ff:31:f4:25:34:45:cb:cf:84:5a:e8:
37:1c:53:1b:5a:54:22:c5:99:cb:71:bd:52:7b:1d:
ac:c0:7e:95:1e:a9:a9:af:81:02:10:24:3d:1c:fa:
99:bb:d6:e7:67:84:fd:3d:f7:58:36:15:b5:bd:c6:
70:22:17:80:ff:df:7c:86:59:20:e7:67:08:89:d6:
16:bd:e6:32:82:e9:65:bd:85:b4:c2:4b:ba:de:b4:
04:cd:14:b9:40:99:a3:ca:4d:ca:a5:a9:d5:bf:2b:
62:4a:7f:09:57:71:5a:4b:69:43:80:ce:ce:6c:6b:
d1:e3:52:c9:31:08:e7:c6:76:fc:0b:fe:e8:ef:4e:
7d:49:77:73:3d:84:37:c3:bc:20:7b:a7:f1:db:85:
ae:db:62:e3:5c:d9:7a:2c:5c:cb:6d:bf:1e:9b:e3:
cf:1d:54:81:43:59:0d:c6:6e:17:8c:79:fe:d4:8e:
4e:89:4b:7f:d9:fd:38:c4:ec:73:69:f7:25:9d:b2:
5d:a5:aa:c8:4e:f9:5f:38:9c:79:1b:63:c0:dd:ec:
78:a0:51:47:7f:da:be:9d:1f:e2:21:c0:5a:c6:cf:
c0:e6:70:40:27:71:86:54:83:88:c8:96:75:a9:67:
d5:a0:e3:77:98:2e:0d:ad:3b:ca:40:63:44:d8:6c:
d6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F9:C3:CD:19:AB:BA:A3:1B:8C:76:CB:DF:43:0D:22:88:A3:A8:B2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/273b0d85-138f-4087-a2b7-98185221a929.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
71:64:35:e1:d1:18:d5:78:6c:cd:02:f4:05:25:16:dc:54:f5:
44:fd:6e:d9:9b:c1:ad:b7:28:0e:db:3c:2e:0f:f2:b1:4e:7d:
8a:ed:b7:40:b0:e9:0c:c5:84:61:5a:a1:8e:0a:8b:66:00:d1:
4d:59:a0:67:e7:12:dd:b4:46:80:c8:cf:17:00:95:40:06:e6:
59:04:a2:87:03:73:0d:c4:05:7f:3f:ea:0a:c0:00:96:15:06:
c2:3c:64:7c:81:0b:e7:8a:c8:97:0b:7a:bc:49:04:96:79:21:
e3:96:5e:bd:30:8a:db:b8:22:48:c4:de:36:98:8e:24:91:91:
bd:36:7d:61:a6:63:c3:c5:9f:d4:9c:c7:34:4c:63:a8:01:89:
24:d8:1c:83:71:2c:99:75:67:d6:b4:46:03:48:e0:20:6a:53:
0b:99:5f:a6:d3:ae:97:43:d0:7d:63:92:25:16:78:81:73:d2:
f0:bc:da:c2:94:28:ad:cc:d3:99:0a:76:07:51:b9:bf:37:05:
45:67:ae:a9:95:93:7c:dd:f2:d6:e1:42:e4:30:9e:08:37:96:
3a:a2:2e:78:09:00:76:53:e2:d3:f1:4a:e9:d2:5b:3c:55:39:
b1:e4:a8:39:35:06:61:e6:fa:71:8b:62:c1:93:ee:61:8d:9a:
5e:b0:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:55 2025 by rpki-client