Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/30e4da13-d81a-41da-9dfa-ee6961fb37b3.roa
File: 30e4da13-d81a-41da-9dfa-ee6961fb37b3.roa (raw, json)
Hash identifier: /3bj+1PeyQN1pvpO7xj5NGRAudke5maR2hQTSHgCzao=
Subject key identifier: 4E:6F:37:4B:F4:91:5C:6E:6A:83:FA:24:91:EC:2C:CD:56:FF:50:1F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 536A6E8535CAE6350CE20F2A56BF4983814A401E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/30e4da13-d81a-41da-9dfa-ee6961fb37b3.roa
Signing time: Mon 18 Dec 2023 00:00:00 +0000
ROA not before: Mon 18 Dec 2023 00:00:00 +0000
ROA not after: Mon 22 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:6a:6e:85:35:ca:e6:35:0c:e2:0f:2a:56:bf:49:83:81:4a:40:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 18 00:00:00 2023 GMT
Not After : Jan 22 23:59:59 2024 GMT
Subject: serialNumber=ffcfbac3ac36809f9288428a924bd519f8d7d952ad2b9ac54d337ac817e7a9fd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:3b:e0:5f:d4:d5:1c:57:be:7b:08:38:b4:
16:e6:67:4e:f9:60:b7:62:fb:33:b2:3f:d9:a7:56:
f6:90:bf:44:8f:02:02:2d:41:f1:e0:13:27:92:2d:
27:97:70:77:d1:a2:97:d4:7b:69:10:a7:ef:98:e2:
7c:70:6d:c3:c1:fb:93:51:e6:dd:31:36:56:1c:88:
86:3f:34:09:28:4a:d5:18:b9:77:a9:af:1c:9c:e1:
71:4c:1b:51:bd:0d:76:98:23:ca:ec:b0:71:e0:d4:
03:86:43:35:c4:a6:0e:ed:c0:3e:fc:98:6c:51:0c:
3b:7b:04:8d:98:00:2f:ca:5f:a8:41:db:e4:b8:1d:
0c:bf:ee:ad:d5:bc:5f:8e:e3:cf:2a:27:e9:57:09:
b8:59:56:90:b4:52:eb:d9:71:7b:6f:c7:fd:2d:c2:
72:0b:94:2c:ad:30:74:ee:75:fd:92:c1:6d:dd:ba:
17:ad:fe:da:41:b1:4b:a0:51:5b:20:a5:26:e3:73:
22:ca:01:c9:dd:85:57:9e:7e:87:e0:ff:8b:b1:3e:
7c:a5:b4:fd:8d:c0:be:bc:79:79:0c:c1:cf:55:da:
3e:e8:54:a1:df:b1:74:8a:1c:59:82:01:58:ec:0b:
62:76:86:af:b6:52:f5:29:73:bf:b5:dc:95:33:73:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6F:37:4B:F4:91:5C:6E:6A:83:FA:24:91:EC:2C:CD:56:FF:50:1F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/30e4da13-d81a-41da-9dfa-ee6961fb37b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
81:fa:64:fd:a6:42:04:49:2b:b6:c5:96:38:e0:74:22:40:57:
00:58:9b:2a:04:2c:cf:a3:da:84:84:44:68:2e:f2:c4:39:32:
6f:31:48:be:ad:29:d7:76:d9:11:69:ea:0f:c4:59:52:79:aa:
bf:6c:ba:49:7b:9d:00:65:1c:ae:b1:88:24:9d:d3:bd:c8:3c:
9c:bb:88:02:ef:d0:97:5c:0f:fd:ec:cc:13:56:63:89:44:1b:
ef:af:01:dc:dd:f7:ba:3e:20:19:50:51:9c:35:f0:60:46:6b:
91:7a:11:d2:ed:e5:74:6a:85:b3:c7:8f:e6:c4:b6:cb:bf:29:
a7:ef:46:16:bb:c7:45:c1:f6:ab:a7:cb:1b:9a:d9:b4:76:f7:
d0:9e:b9:c5:dd:45:1b:b6:7b:0e:36:b7:dd:56:88:e6:d1:6b:
05:2b:eb:6c:27:73:73:75:fd:38:2b:af:83:22:f4:d1:ec:82:
77:e0:50:65:d8:53:04:6b:75:4e:08:38:41:ed:45:74:21:43:
0f:bd:8c:b2:10:a3:8f:38:b4:08:4b:6f:dc:5f:42:a4:be:47:
99:46:70:05:f1:75:04:f1:28:fb:bf:2f:62:b5:50:e6:57:32:
4f:20:f7:48:22:11:e3:c9:eb:0b:3b:ea:0f:a1:19:18:2f:aa:
a0:89:de:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:43:44 2025 by rpki-client