Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/399a204e-1a8f-473b-922c-578563b595d3.roa
File: 399a204e-1a8f-473b-922c-578563b595d3.roa (raw, json)
Hash identifier: jP17ZIksUlv0e/Z7cW05H3n9Ci4u3anSd3msTder2vM=
Subject key identifier: 3A:69:31:06:2C:1B:63:12:0F:D5:9D:77:1C:D6:D2:00:66:70:F8:AA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1E51AC5D80FFD3F798AB15DAE1BD0DE38A458B70
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/399a204e-1a8f-473b-922c-578563b595d3.roa
Signing time: Sun 03 Sep 2023 00:00:00 +0000
ROA not before: Sun 03 Sep 2023 00:00:00 +0000
ROA not after: Sun 08 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:51:ac:5d:80:ff:d3:f7:98:ab:15:da:e1:bd:0d:e3:8a:45:8b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 3 00:00:00 2023 GMT
Not After : Oct 8 23:59:59 2023 GMT
Subject: serialNumber=f65b4a46eb6aecc2da3599d8b66dfca263488db9e9f531469a841f274d8f3fe0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:6b:51:52:30:8b:e7:c2:2e:7e:ea:81:82:
7a:90:a5:5e:55:5e:4b:32:a8:bf:14:6d:43:b1:80:
6c:9e:bc:bc:9e:b2:33:13:28:49:7b:70:3b:f1:50:
ed:f9:c7:31:c0:e7:05:66:8b:8f:b1:53:96:9f:c3:
88:e5:68:35:e7:69:d6:24:3c:02:6d:39:3f:6f:06:
30:5c:6b:41:e9:8f:db:17:90:a2:7e:21:b5:4e:30:
fa:d6:a1:99:97:47:9e:98:ea:a2:df:a6:58:45:e1:
e9:2d:01:56:1e:22:7c:81:0e:e6:7b:77:27:e1:d6:
97:45:eb:e4:a4:7b:49:bc:57:63:03:2e:0c:e8:3e:
c8:ef:94:51:7e:e1:ec:f8:a2:29:32:7c:4a:bf:1b:
f6:46:3b:7a:94:f2:0e:93:d0:67:04:8d:d5:23:80:
28:fb:54:8f:11:9e:94:28:18:f2:45:3b:05:21:64:
ce:b4:a7:c7:00:ff:8d:f3:ff:a4:4b:ec:1b:67:49:
ec:9a:4c:71:3b:5c:25:cd:e6:d1:4b:7c:04:9d:4f:
82:66:91:62:f2:94:d1:ae:27:04:e8:56:14:f7:03:
69:14:ac:a4:77:dd:e7:f0:67:ca:14:74:31:91:11:
bc:cf:5e:22:7d:be:13:23:7a:a2:c9:3f:b3:df:5e:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:69:31:06:2C:1B:63:12:0F:D5:9D:77:1C:D6:D2:00:66:70:F8:AA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/399a204e-1a8f-473b-922c-578563b595d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0e:4a:19:d4:b9:8a:17:0f:4c:7f:a8:6f:f4:47:ba:d2:31:
c1:5d:ed:ff:4f:47:99:c1:d9:1d:d7:8d:c0:69:99:c7:04:4f:
34:51:8a:8d:e5:b9:aa:d3:9a:a1:af:1a:0c:e0:e4:5f:ec:a2:
d1:2f:0e:cc:8c:10:9f:11:79:50:23:8d:de:57:87:ae:b9:62:
22:90:3e:03:27:3d:a0:16:d4:4c:97:28:e5:77:1a:6c:9a:32:
60:72:1e:7c:9b:45:77:ec:ef:56:a6:26:2a:d0:a2:f0:68:22:
6d:c2:c7:7a:b8:19:4d:07:63:39:81:77:30:2a:c5:41:26:60:
7c:1c:5f:2f:1f:ce:f5:ec:1c:69:b5:ce:0e:05:07:0e:c9:02:
5a:2e:eb:02:a7:52:ed:bd:97:50:4b:6a:94:69:9a:27:cc:fe:
70:42:74:9f:9a:22:9d:81:8c:36:00:8e:73:05:aa:91:c6:30:
f1:e7:11:f9:9c:92:b2:7e:16:9f:ee:b2:a5:51:14:d2:ab:87:
80:ba:ff:e3:95:07:c8:b2:c4:c4:81:6f:9c:5a:9f:40:ff:5a:
15:e3:f5:95:89:bf:26:4f:c4:88:c7:3a:7e:d4:3b:a6:b6:25:
27:b6:a4:35:78:d6:65:1b:2f:3e:04:e7:b5:49:ba:71:04:24:
dc:5b:de:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:04:14 2025 by rpki-client