Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/383c463c-5353-49f2-b125-935260053ef7.roa
File: 383c463c-5353-49f2-b125-935260053ef7.roa (raw, json)
Hash identifier: KCknpNZ9/UGGKKbLDrBBZfK61ac5MMmYXn90i4NxXnA=
Subject key identifier: 9F:E4:29:B2:BA:A9:BE:7A:5D:07:07:4E:D2:93:F3:9C:8B:28:8C:73
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 43A026A1D5B23098D383609CBF5DB067B8A15D5E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/383c463c-5353-49f2-b125-935260053ef7.roa
Signing time: Tue 10 Oct 2023 00:00:00 +0000
ROA not before: Tue 10 Oct 2023 00:00:00 +0000
ROA not after: Tue 14 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:a0:26:a1:d5:b2:30:98:d3:83:60:9c:bf:5d:b0:67:b8:a1:5d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 10 00:00:00 2023 GMT
Not After : Nov 14 23:59:59 2023 GMT
Subject: serialNumber=a3815ca8f5f2451c831dcf08d6868fcae01c82a4dff8cb74497e439cbf06af05, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:20:47:9b:db:1e:c0:02:7e:7d:13:7b:80:
0f:fc:21:a0:50:00:cb:ce:df:76:00:47:b5:a1:fd:
85:9d:b4:19:f8:c6:74:d5:17:ff:fd:3c:17:ee:e9:
a5:41:df:63:7f:04:b5:76:93:cd:df:de:67:36:4e:
56:91:0c:bc:92:1c:13:77:1c:a2:da:b6:81:41:14:
c7:1b:3d:5a:3c:d6:67:cc:80:b5:20:73:13:49:34:
7e:17:9d:ad:f0:81:d0:0e:42:c1:16:73:f6:0e:f3:
29:9b:5e:8c:a8:b6:75:f9:d8:eb:c9:3c:70:2b:42:
fd:0b:ed:7c:6a:80:4f:8b:5e:ad:b0:90:1d:3c:89:
d5:7d:5a:f7:1e:99:0e:c6:4b:dc:32:0b:47:a5:9f:
2c:40:71:dc:e1:79:72:7c:59:dc:7d:6f:e6:a9:f4:
53:16:f6:71:f0:b0:a6:dc:4f:63:76:f0:2a:6a:51:
87:c2:a9:34:69:32:63:8e:75:f5:0a:f8:4e:12:1a:
64:87:d5:2e:7e:59:cf:57:89:bb:02:76:8b:78:83:
4b:8e:e9:eb:35:63:3a:a6:7b:22:1b:7b:4b:f6:6e:
03:f6:25:d9:8d:3b:a8:80:11:82:cd:7a:ae:02:0c:
33:22:09:29:30:1f:36:1f:e4:87:5b:69:c1:16:c9:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E4:29:B2:BA:A9:BE:7A:5D:07:07:4E:D2:93:F3:9C:8B:28:8C:73
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/383c463c-5353-49f2-b125-935260053ef7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:3d:e3:e6:8f:a9:63:3f:be:02:29:0d:a9:87:f9:e0:37:eb:
ff:8e:18:81:87:c3:12:79:8b:22:89:ef:69:56:db:f7:df:fe:
6e:b4:98:0a:6d:f1:eb:59:03:15:91:10:55:b5:92:6f:a6:5c:
cb:0a:f2:09:b7:18:0a:09:f9:43:9f:ee:67:b9:64:0e:d3:4c:
2a:0e:a5:56:e4:81:3c:32:fd:34:b4:c0:06:32:a0:a0:dd:29:
48:58:4c:6f:a3:da:33:14:5a:0d:06:cb:53:9d:db:98:5d:de:
82:d8:4b:99:59:94:df:3d:61:5f:e8:c1:6b:4f:6e:43:bc:55:
26:38:e3:d3:49:47:64:63:da:88:09:e6:d4:b4:d5:0e:ea:ef:
15:4c:75:95:a2:ec:c8:56:3f:92:e1:20:b5:e5:e0:6c:8e:7d:
ed:9a:e1:8c:27:be:20:72:26:7a:ad:43:0f:7f:ff:30:74:43:
e2:cf:71:df:54:c6:94:96:5d:db:c2:74:cc:4e:5e:ee:37:2a:
47:b2:e6:df:09:8b:b5:92:ff:c4:fe:fa:cb:05:85:d2:f6:57:
80:1a:c2:88:2d:f3:76:c9:20:71:9c:77:86:27:51:59:19:c3:
3f:d1:c4:79:fa:8d:10:99:cc:5e:41:65:31:63:3d:f7:ba:ec:
68:08:b5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:54 2025 by rpki-client