Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2757b62c-cf71-4bff-b205-4d4864dbf2e6.roa
File: 2757b62c-cf71-4bff-b205-4d4864dbf2e6.roa (raw, json)
Hash identifier: mQjRz1QjmsUH94PEo/LfKzh8KisLJxG/g+INwAKmmNM=
Subject key identifier: 28:67:CD:A0:9B:FB:B4:20:C5:B7:B4:61:85:FF:72:05:39:54:1D:71
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1C4B66F466A8DACE07C8AE9EA5169C391BC00657
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2757b62c-cf71-4bff-b205-4d4864dbf2e6.roa
Signing time: Mon 02 Oct 2023 00:00:00 +0000
ROA not before: Mon 02 Oct 2023 00:00:00 +0000
ROA not after: Mon 06 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:4b:66:f4:66:a8:da:ce:07:c8:ae:9e:a5:16:9c:39:1b:c0:06:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 2 00:00:00 2023 GMT
Not After : Nov 6 23:59:59 2023 GMT
Subject: serialNumber=41c58053e2fa5ecd38afc7fb06bc609f6661fca0d7fc828fd8d81c6472b8312b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:7e:79:7d:96:a7:c1:f2:8b:a4:9d:51:0f:
4e:fb:46:be:a7:f1:c4:ad:13:17:a8:4b:6e:6e:06:
de:f4:51:5a:21:97:9f:15:67:72:f3:e5:f9:e2:11:
f0:e2:e2:21:f1:e0:de:62:d8:26:92:e7:33:99:23:
fa:b7:4e:9c:b1:d1:57:87:6e:18:ab:81:17:db:e7:
52:1d:d4:69:ae:d7:47:da:71:eb:b8:17:70:aa:a0:
a6:e0:16:d2:a7:e6:3d:e3:19:3f:0f:99:ca:7d:fa:
43:23:1a:c5:cc:2a:fc:e5:0a:ac:38:70:45:15:09:
51:94:7d:9f:bb:d5:34:ad:3e:30:e4:cf:4f:ab:b8:
cb:36:ac:cc:5d:3a:22:64:47:d8:c0:f3:02:c2:b6:
77:9b:cd:99:a2:91:45:c3:89:c3:e7:09:ca:05:c8:
31:af:dd:59:1d:c6:a0:73:4d:db:3e:76:e9:a7:cf:
29:48:b7:88:75:41:07:54:1d:2e:93:a2:fe:c3:99:
28:9b:76:6d:52:53:23:63:55:85:fe:5d:99:59:19:
96:b0:18:b2:1a:cb:c4:c1:51:80:f2:5b:51:93:f5:
bb:b1:79:43:30:76:3e:00:53:cd:93:23:29:57:70:
61:32:2a:4e:d6:1c:95:37:03:a5:4f:4c:92:bd:09:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:67:CD:A0:9B:FB:B4:20:C5:B7:B4:61:85:FF:72:05:39:54:1D:71
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2757b62c-cf71-4bff-b205-4d4864dbf2e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
64:61:b6:ab:fe:8c:c1:9a:68:fd:ea:18:bb:7b:6e:d1:1c:54:
53:56:2e:b1:d0:75:db:a1:60:36:80:aa:f6:7a:ca:1b:63:2d:
6e:64:23:4f:0f:15:a0:06:49:17:91:c9:37:c4:8b:d5:73:33:
51:c4:23:e9:6a:62:25:a3:22:a3:e2:10:98:53:9b:d5:12:7a:
76:20:ed:7a:74:a0:84:c1:08:2c:61:8c:56:82:b1:ac:42:96:
a9:bf:b0:df:b6:b6:a9:27:7b:be:4e:34:54:ca:4f:06:3c:39:
df:42:c3:59:eb:af:78:7c:0e:e0:41:3f:31:2d:6c:fa:50:4e:
83:65:4c:a8:ae:59:a3:29:d3:58:18:18:14:ca:65:55:e9:1b:
7d:b3:0a:d2:be:fa:a3:40:71:3a:15:a6:32:77:72:68:d8:b2:
7c:09:b6:bd:33:fb:a4:b2:d0:03:ac:2e:da:4a:e5:18:4e:82:
6a:af:b7:f4:42:68:b2:0b:3a:43:d6:bf:84:e9:13:3b:67:66:
83:44:38:fd:57:a3:84:5b:11:45:69:52:9e:d8:16:71:48:a7:
f3:64:41:b7:0e:86:51:b6:38:2b:fc:bb:b5:8d:46:8d:2e:e7:
fb:8d:1f:43:ec:30:0d:a9:42:e3:9b:0b:d7:3e:b1:5a:b8:ec:
2c:c7:fb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:01:44 2025 by rpki-client