Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/36a96d7e-2c52-4267-ac80-469618c12b6b.roa
File: 36a96d7e-2c52-4267-ac80-469618c12b6b.roa (raw, json)
Hash identifier: 8Q+KsHw5Ub/eIjNnPA2GfoFBCnW7/i9P65fQ53+Maeg=
Subject key identifier: E2:90:97:D6:CE:FC:84:C7:BB:1F:19:DA:B6:D2:0A:29:A4:99:69:AA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 63A68ED89566D7436DC597C27483E54DAAF64347
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/36a96d7e-2c52-4267-ac80-469618c12b6b.roa
Signing time: Sun 08 Oct 2023 00:00:00 +0000
ROA not before: Sun 08 Oct 2023 00:00:00 +0000
ROA not after: Sun 12 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:a6:8e:d8:95:66:d7:43:6d:c5:97:c2:74:83:e5:4d:aa:f6:43:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 8 00:00:00 2023 GMT
Not After : Nov 12 23:59:59 2023 GMT
Subject: serialNumber=e9414f38c0a0a53632b7e37df46b19c29b4d002766ed0d47992c5f8b6d73c8b6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:87:06:20:57:bb:b4:64:fe:97:a4:6c:81:
68:35:f4:a7:af:1f:2f:2a:09:7b:cf:db:7f:b7:c0:
ed:d1:87:1c:9e:0b:97:eb:ae:20:b2:80:a9:5f:8c:
69:04:4a:af:c3:e1:19:26:e7:ef:23:4b:c1:a1:41:
d4:88:73:5c:db:08:c1:80:32:38:44:e5:a7:35:04:
d6:8c:dc:89:68:2e:7d:54:34:24:e2:a0:67:5c:fb:
4c:fe:75:d0:f1:d7:48:98:cb:bf:b8:4c:7d:a3:1e:
48:0c:5e:c7:fa:01:82:ae:8b:48:4d:6a:24:73:68:
5b:49:45:78:3b:9a:a2:26:cc:15:8c:13:35:8d:02:
ef:c6:8f:72:d9:0f:ea:92:34:1b:6a:2c:e0:1f:f6:
b3:cd:da:d3:ef:be:97:10:6b:e3:07:f1:dc:a8:96:
2d:e2:dc:54:80:ab:c3:fa:bf:cc:0b:c5:97:3d:7b:
09:8d:c6:f5:d7:41:4d:5d:33:3d:71:b0:b3:1f:58:
48:08:3a:6b:c1:2b:ed:fa:43:55:20:c8:67:d4:39:
e8:31:db:f3:2e:06:ba:f1:19:50:14:73:07:f8:51:
fa:5c:fa:82:d2:a2:7d:8b:e6:4f:c5:e0:7e:04:84:
75:fb:7e:73:8d:1b:5b:7d:46:91:21:5b:04:f2:dc:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:90:97:D6:CE:FC:84:C7:BB:1F:19:DA:B6:D2:0A:29:A4:99:69:AA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/36a96d7e-2c52-4267-ac80-469618c12b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
10:43:db:5c:fc:bf:5e:f2:49:21:d8:5c:12:0a:fe:9c:b0:59:
7a:b4:c9:b3:f6:f2:38:56:f6:f5:3d:90:bd:74:ee:ef:b1:ec:
e3:53:47:91:73:c9:4c:e3:21:02:6c:ed:f3:46:ac:2e:8e:18:
bd:87:6f:9b:de:36:86:c2:67:36:7d:12:b2:ba:1c:8b:26:14:
55:f1:25:5d:64:a5:c1:8b:0e:b1:6d:e5:8d:07:9e:e8:07:8b:
19:10:bb:39:61:2e:eb:ce:10:a4:63:41:f5:dd:44:6b:f4:dc:
2e:ad:1a:3d:37:c2:b7:b0:f9:20:8c:a1:85:ad:ba:2f:c5:92:
6d:b9:db:88:e1:69:8e:2a:f2:6e:9a:db:67:f4:ed:23:e0:f6:
35:3d:3e:da:fa:08:a8:a0:fd:38:cc:b0:e1:e8:c9:de:59:a9:
8c:86:8d:a5:f7:8f:f0:ee:f2:5e:dc:7d:70:50:b6:55:4f:74:
64:f0:dd:f9:98:ad:e4:a5:f8:20:dc:fa:c9:43:05:ec:c3:f7:
05:5c:35:44:00:93:a3:55:94:c7:59:dc:d7:e5:74:99:e2:37:
bf:89:57:5b:b2:56:25:fa:c9:91:10:02:4d:2a:8f:e6:56:5d:
93:ea:2f:4b:85:61:df:74:68:92:55:c4:c0:37:37:fc:44:47:
97:fc:ff:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:10:51 2025 by rpki-client