Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3ad946cf-e432-4760-9e8a-e867ef196389.roa
File: 3ad946cf-e432-4760-9e8a-e867ef196389.roa (raw, json)
Hash identifier: a/ymTiCab3slGUmuFCUVZEOziUmpJ6d+wKF84EUW4Ec=
Subject key identifier: B7:AC:3B:3E:AE:61:35:AE:1B:59:52:03:39:00:79:59:AE:E5:C0:AC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 509A0BBF678B65ADE73B9EE744BF06C5A832D56E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3ad946cf-e432-4760-9e8a-e867ef196389.roa
Signing time: Fri 25 Aug 2023 00:00:00 +0000
ROA not before: Fri 25 Aug 2023 00:00:00 +0000
ROA not after: Fri 29 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:9a:0b:bf:67:8b:65:ad:e7:3b:9e:e7:44:bf:06:c5:a8:32:d5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 25 00:00:00 2023 GMT
Not After : Sep 29 23:59:59 2023 GMT
Subject: serialNumber=028a3a725c0cfb65dfc19047dcd2d5814ee06043540857b553fd5ee0b109e849, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:75:4e:58:40:f3:57:f9:35:82:82:8d:62:57:
2d:89:2f:ee:7f:1b:be:12:dc:20:fd:c4:39:28:50:
ff:12:c6:80:7a:35:c6:9d:9a:87:2b:a0:e8:b7:a6:
c4:04:80:25:1e:c5:2a:8b:91:4f:fe:52:6d:9b:d8:
04:e2:3a:5d:6a:c7:d0:63:f0:c1:5e:23:c8:ab:b4:
97:86:01:34:e4:d7:ee:f5:02:e6:df:50:53:2c:b1:
96:6a:4e:46:f9:78:43:55:68:1a:fe:ba:86:93:6a:
be:bf:49:48:77:a7:29:66:42:69:41:27:e5:ee:b9:
6f:c4:68:c6:96:08:7d:a2:16:76:fe:05:2b:62:d8:
35:12:55:62:8f:b7:7c:81:b3:ad:fc:a1:e2:7c:46:
7d:b2:56:02:92:d1:2b:b8:f3:b0:46:04:17:5a:23:
53:52:19:29:2a:0c:62:32:93:c6:84:69:97:5c:08:
71:4b:16:61:64:0c:54:7b:ba:6e:82:66:6e:c6:70:
c4:ae:b0:f5:37:ab:46:3a:67:05:f3:0c:12:eb:1e:
f6:b0:8d:47:8e:18:27:bb:93:c3:38:28:9f:47:5f:
c0:7d:5a:7a:8d:ee:7b:4a:c4:d6:1c:b4:ca:b1:5c:
49:e7:82:a4:b9:10:98:98:18:72:9c:0a:9c:3c:4b:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AC:3B:3E:AE:61:35:AE:1B:59:52:03:39:00:79:59:AE:E5:C0:AC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3ad946cf-e432-4760-9e8a-e867ef196389.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:44:c6:26:5b:bd:a8:72:d7:b4:fd:43:04:98:55:bd:ac:04:
27:55:f1:78:b8:5d:8f:0a:26:77:99:fc:7a:ab:2d:59:b2:ad:
3b:a5:fa:13:8b:a6:53:2e:91:88:ed:27:09:87:0e:c8:13:3f:
c6:7e:da:27:95:1a:84:07:d5:6f:43:c3:ef:f4:ab:15:8a:f5:
69:8f:26:6a:44:d7:7c:c3:14:7f:94:a1:bc:93:aa:c5:4f:01:
47:45:00:25:d4:14:60:10:7b:13:6c:91:6e:8d:40:a8:7a:f4:
86:a4:68:96:cc:71:ed:2f:ac:ef:b3:a0:4c:0e:5e:41:bc:43:
e3:72:5f:c9:88:62:d4:38:17:01:60:ae:9e:ab:99:9d:a3:d6:
46:10:19:22:01:21:83:c5:80:ab:0e:16:3a:9f:75:ba:48:a1:
8a:6d:e0:f3:f7:47:f6:4c:dd:d8:02:7e:b4:60:b5:76:db:31:
83:97:4c:88:ec:3d:bd:bd:7e:d4:34:03:7d:f0:ef:92:30:12:
01:fd:80:b3:68:c0:42:09:78:f5:03:08:e1:43:1b:c7:50:2c:
92:44:ef:74:97:d4:89:88:64:10:80:4b:5b:de:57:0f:b7:f9:
33:58:c9:9e:da:79:b7:62:8e:e6:b0:a5:a6:f8:40:a8:da:fc:
ba:b4:21:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:27:16 2025 by rpki-client