Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2f998492-ded4-4cd9-a95f-8ecfd93ff8c8.roa
File: 2f998492-ded4-4cd9-a95f-8ecfd93ff8c8.roa (raw, json)
Hash identifier: Y4WFc+m9RTBefrhG+XHQyvC8qFe1/Znp6p4aApdzXBE=
Subject key identifier: 1D:04:82:78:B2:8E:E2:A6:AE:94:4E:1D:05:9B:59:21:78:CB:F8:E5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 351855881F07A69DB981EDF079D8CBA954165DE5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2f998492-ded4-4cd9-a95f-8ecfd93ff8c8.roa
Signing time: Tue 18 Jul 2023 00:00:00 +0000
ROA not before: Tue 18 Jul 2023 00:00:00 +0000
ROA not after: Tue 22 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:18:55:88:1f:07:a6:9d:b9:81:ed:f0:79:d8:cb:a9:54:16:5d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 18 00:00:00 2023 GMT
Not After : Aug 22 23:59:59 2023 GMT
Subject: serialNumber=180ae4a03177a1a6ff26e33695efb5a249e8a9ae50c6962cb12b5df5e643dbc0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ef:2d:66:88:6b:66:52:ac:27:01:55:67:dc:
e3:60:51:8f:7c:b0:50:a8:2e:f4:b9:28:3b:f8:4f:
31:c5:54:e6:3d:19:21:15:62:b0:43:bb:86:a2:92:
96:21:98:06:67:e3:d1:61:60:a3:e0:fa:9b:ec:c1:
05:eb:57:04:93:5b:98:b2:df:fa:b6:68:d6:36:7f:
2c:40:d0:4c:4b:34:32:6a:77:fc:a1:b3:14:51:62:
37:c1:3b:5d:29:60:bc:c7:33:3d:03:5b:3a:04:f0:
c0:1d:4b:64:32:07:8f:fe:8e:c0:27:48:6d:64:87:
bb:a5:14:25:1a:53:ac:83:04:d1:30:fc:b9:e0:ea:
90:47:16:4c:60:77:8d:43:20:12:bb:70:5b:81:23:
b8:62:85:21:1b:ff:24:5c:06:ff:b6:9b:c4:5e:35:
a4:e4:c7:4f:be:db:74:00:0e:bc:65:d6:e7:d6:c0:
f9:2a:e9:7e:1d:1c:09:b2:38:e8:7a:68:29:bf:d0:
ad:9b:34:7a:c8:0f:e8:43:c0:be:f8:f4:19:89:49:
72:bb:d9:28:c2:49:46:7f:10:50:72:c1:08:35:47:
88:5e:dd:17:10:ca:3b:f3:5f:e9:43:be:39:53:bb:
d7:06:c6:48:fa:91:c8:94:ed:15:09:73:39:c9:82:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:04:82:78:B2:8E:E2:A6:AE:94:4E:1D:05:9B:59:21:78:CB:F8:E5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2f998492-ded4-4cd9-a95f-8ecfd93ff8c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
42:01:db:fd:ed:00:84:d5:1d:ea:9b:14:e5:43:e2:3f:d4:29:
df:36:6e:db:b4:84:88:96:5c:68:6b:f8:51:05:43:9e:6d:b1:
fb:a6:cd:98:34:f3:75:fb:70:6b:9a:a4:2f:76:45:9f:80:a4:
49:8f:44:b9:55:f9:49:39:be:0f:6e:96:af:09:6d:47:ad:5b:
70:77:97:d5:22:2e:ec:ca:eb:ae:e9:4e:25:35:e1:7c:c5:99:
1e:3b:0b:65:72:5b:d8:1f:61:7f:84:e2:00:11:d2:21:20:b5:
da:13:7b:0c:f1:4d:49:d1:23:4a:90:2f:17:7a:6b:36:bc:51:
dc:a8:b1:96:81:35:40:dc:0f:80:d8:a4:44:b5:9d:77:86:76:
86:ba:24:1e:61:34:fe:ec:69:cb:d4:2e:0a:55:ee:c0:59:a1:
fc:67:c1:3a:15:c8:3b:93:8a:9f:a6:22:84:99:46:04:50:8a:
8a:f4:a2:ef:7e:e5:70:71:92:09:7f:f7:aa:c6:58:10:21:3f:
df:ff:21:c0:da:85:f4:9c:35:4a:6a:7d:74:fd:b8:63:ef:66:
6e:9c:c5:10:a2:f1:27:6b:d7:36:1d:4c:4d:eb:60:73:5a:5f:
bc:3e:44:66:1b:f7:ed:30:af:36:54:42:5f:3e:54:37:a2:ad:
0b:37:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:07:40 2025 by rpki-client