Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/378895f2-ae4d-4cf7-9a61-4e0345fa63e1.roa
File: 378895f2-ae4d-4cf7-9a61-4e0345fa63e1.roa (raw, json)
Hash identifier: 7QNij16iv9S0T77vuldndOjUvqaOtb/6qnL6tP07128=
Subject key identifier: 51:62:DD:B9:6F:FE:0B:E8:0F:D9:BD:D7:25:4F:0B:6D:8D:78:C4:93
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 65C251D6C6E92A517294DDCECF5AECDFA7C55A1E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/378895f2-ae4d-4cf7-9a61-4e0345fa63e1.roa
Signing time: Thu 31 Aug 2023 00:00:00 +0000
ROA not before: Thu 31 Aug 2023 00:00:00 +0000
ROA not after: Thu 05 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c2:51:d6:c6:e9:2a:51:72:94:dd:ce:cf:5a:ec:df:a7:c5:5a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 31 00:00:00 2023 GMT
Not After : Oct 5 23:59:59 2023 GMT
Subject: serialNumber=154059ded8e5e9f79b9e40e3589c9a4705702006c66a726c030dffbe0eddaf90, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:ae:ca:40:e4:8d:44:f4:7b:34:e0:99:66:
6f:4f:19:78:96:a8:1d:a6:76:1e:f7:e0:e3:6f:e5:
31:50:e9:d1:36:1a:1e:33:22:70:bf:95:4c:c6:6d:
6b:5c:2c:c2:67:f0:a4:53:f5:6d:fa:2c:fb:cd:c6:
e4:ca:b6:ee:fc:41:0a:a4:84:8e:30:b4:85:3d:50:
a5:40:60:50:1a:0e:ff:8b:96:fc:22:a1:80:21:87:
29:dd:4d:04:16:7b:df:01:45:6c:7b:2a:06:98:e2:
20:79:3d:2d:52:be:17:86:a5:0c:d5:ad:23:30:0d:
72:5e:a9:f9:8c:a9:2f:15:12:af:02:c5:a7:d5:b4:
c2:37:a0:55:3b:ee:d8:9d:65:5e:a5:6c:01:6c:ed:
d9:9b:55:7a:b3:64:7b:a2:bb:02:ef:e4:75:d5:e8:
c3:3c:f6:52:8a:82:d7:95:51:c7:95:dc:2d:3b:9a:
5c:b8:43:0a:c9:1f:3c:1b:1d:4d:23:e9:6c:35:68:
4e:f0:96:e8:97:4f:73:98:c7:32:a0:f9:a5:bc:e8:
78:cc:c7:a6:48:be:dd:d0:ad:df:08:05:a5:8a:aa:
8c:9a:b0:dc:a2:3a:3a:c8:21:4f:4f:9f:60:46:c8:
fd:eb:7d:bf:1c:ea:36:20:f1:07:41:34:dd:46:f2:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:62:DD:B9:6F:FE:0B:E8:0F:D9:BD:D7:25:4F:0B:6D:8D:78:C4:93
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/378895f2-ae4d-4cf7-9a61-4e0345fa63e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:fa:34:bf:7c:3d:e2:c9:79:74:53:05:2f:53:a7:55:9f:4d:
f3:ae:17:b2:d0:7b:24:f4:14:e2:36:a2:a2:f1:76:60:3b:d6:
c4:41:f9:fc:5f:fb:95:fb:b5:72:51:84:84:29:21:61:68:b6:
da:69:84:62:e0:1d:9d:92:4f:81:e0:9f:b6:63:ef:72:bd:73:
76:73:bb:5b:ff:ca:90:9f:a1:b1:8e:55:d5:c0:48:89:9a:ec:
57:7f:51:60:b8:84:91:df:cd:b2:9b:c8:f8:f6:43:02:f9:ba:
e4:ae:f1:c1:f8:26:0b:00:e2:9f:44:f5:d9:34:2d:64:d8:74:
74:86:20:9e:2f:6d:ad:64:6d:db:2e:4e:c3:f5:7d:45:11:23:
68:50:ff:ff:5a:2a:53:5a:57:7a:d4:e4:dd:92:56:09:73:fb:
e9:24:2b:9c:c8:6e:cb:67:ed:b1:ea:2e:1a:fd:9f:0b:1b:6b:
2e:63:ed:e2:f3:7f:87:80:f0:31:ce:a8:f4:ca:7f:7b:5c:11:
55:21:8d:5f:63:5a:48:7d:c0:6e:4b:40:61:20:9d:f1:5f:f8:
72:97:e2:10:a9:35:c1:51:06:e9:74:37:d9:ae:eb:96:d7:5d:
e7:ef:83:69:13:f4:71:db:49:97:cd:84:02:83:90:db:d8:c0:
3a:1e:15:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:08:37 2025 by rpki-client