Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2b3bf830-6fbc-4f37-85bf-dae09a442cbd.roa
File: 2b3bf830-6fbc-4f37-85bf-dae09a442cbd.roa (raw, json)
Hash identifier: 2i8aOJnierrFEfzjogTAT8Se7NL4AJ7XOMQ3zsvKerw=
Subject key identifier: 23:C6:51:6F:E9:0E:3F:68:D2:67:C5:70:A0:79:51:52:3A:07:80:58
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1738721B26DFFA6766F8AEA7DB1DF98BC9381CF2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2b3bf830-6fbc-4f37-85bf-dae09a442cbd.roa
Signing time: Tue 08 Aug 2023 00:00:00 +0000
ROA not before: Tue 08 Aug 2023 00:00:00 +0000
ROA not after: Tue 12 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:38:72:1b:26:df:fa:67:66:f8:ae:a7:db:1d:f9:8b:c9:38:1c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 8 00:00:00 2023 GMT
Not After : Sep 12 23:59:59 2023 GMT
Subject: serialNumber=20b0b3b748071a73ca3161db005292dc2ebfcc4d06140fe7d1adb9f5df631b2f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:86:d0:e0:f5:04:d9:5e:99:01:20:16:da:
76:b2:4c:67:01:c5:84:9b:62:c3:eb:cb:03:50:81:
7a:78:aa:97:d4:56:84:22:22:14:97:46:21:a2:a8:
ea:e6:f3:48:99:2f:47:65:b9:ef:55:c7:82:d6:08:
95:f2:17:05:f9:bf:bf:51:43:70:30:fc:f1:dd:59:
56:3c:17:d2:db:05:58:21:d2:09:cb:a1:a9:7d:a8:
fe:d3:30:eb:37:09:91:65:de:8b:5d:6f:16:9e:73:
22:02:ac:ac:60:92:65:6b:d5:4c:d7:09:8a:0b:8b:
4a:84:6b:e0:d2:f0:75:a1:1e:8a:93:21:99:78:26:
02:09:ad:76:26:45:7c:12:72:f8:a4:a2:14:7b:c5:
6d:a0:95:a1:3b:ec:5e:92:d1:77:05:3b:e5:2a:85:
4d:59:c2:06:eb:b0:b8:f4:72:19:ba:71:3d:b6:37:
08:5e:d4:94:82:6a:e7:bc:82:ff:0f:67:5e:00:6b:
46:f0:cd:66:66:1d:73:f4:28:ce:d3:f4:32:a0:1f:
0a:9e:66:e1:14:d0:ca:eb:22:05:88:4d:0e:d5:3b:
bb:3e:e7:7e:eb:df:cf:a9:8d:cb:bb:22:94:2a:4c:
7a:92:ea:84:2e:ff:b7:20:48:5b:9b:69:20:84:2f:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C6:51:6F:E9:0E:3F:68:D2:67:C5:70:A0:79:51:52:3A:07:80:58
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2b3bf830-6fbc-4f37-85bf-dae09a442cbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ed:58:ed:53:f4:95:c4:e5:7e:50:29:93:5b:a6:b6:e2:0e:
23:22:10:e5:eb:9c:f3:16:31:c1:2d:fb:2e:16:e1:72:7e:b0:
66:7d:3a:18:19:e9:5e:f4:88:32:14:8e:2f:1a:be:37:8f:b6:
29:5e:d9:3c:d5:f6:06:ab:99:a1:32:79:b1:c5:c4:e6:ce:46:
f2:0d:e5:10:f5:02:c8:16:c5:0e:bf:d8:a5:41:25:55:c7:d2:
6a:30:aa:1c:ec:02:49:1b:81:a8:62:91:72:1a:05:48:ea:80:
22:25:e6:cf:4a:d3:47:ab:c8:ec:96:04:eb:f2:64:38:1d:ca:
97:ff:8b:38:bf:37:58:e3:c5:d8:86:d3:fc:ac:c2:40:be:cb:
bf:75:40:c5:c0:5d:8f:1c:14:f9:2a:d6:62:be:d9:60:84:af:
57:f6:aa:ed:c3:80:30:49:33:a6:4e:6d:27:46:d7:24:d1:1e:
9f:4b:30:b7:62:4d:c9:49:92:74:4c:4a:f3:34:de:0f:d0:0f:
5b:8d:a1:36:f1:88:0e:14:dd:6f:34:10:12:63:61:8a:a9:ef:
34:1f:fd:e6:08:e4:ae:51:f7:3a:fd:13:80:4d:0d:ea:51:9c:
d7:2f:ff:ac:95:5a:77:6c:4c:d4:f7:61:d0:b6:60:a1:73:21:
4a:ee:a9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:20:06 2025 by rpki-client