Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3b3c4172-4695-443c-8093-79dc9e976ff3.roa
File: 3b3c4172-4695-443c-8093-79dc9e976ff3.roa (raw, json)
Hash identifier: S9rYciLx1tczsyNxPpPOoKAMY4J2+0q52Msbd1QD3/U=
Subject key identifier: AD:E1:88:B2:44:51:8A:9C:D8:5D:06:01:94:36:22:34:51:7D:FC:06
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7DDF60DCB232DB5CAF43127EC0C5EAE02DC778BE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3b3c4172-4695-443c-8093-79dc9e976ff3.roa
Signing time: Tue 08 Aug 2023 00:00:00 +0000
ROA not before: Tue 08 Aug 2023 00:00:00 +0000
ROA not after: Tue 12 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:df:60:dc:b2:32:db:5c:af:43:12:7e:c0:c5:ea:e0:2d:c7:78:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 8 00:00:00 2023 GMT
Not After : Sep 12 23:59:59 2023 GMT
Subject: serialNumber=58ab4e89a83cb19e2bcc052cfa1e81ed564a72f3a84ccc994d6589c5137b32b9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:54:35:1a:e1:ad:04:b1:3d:c1:42:50:71:
cb:5c:7b:cc:28:13:4e:09:0b:23:72:c3:20:aa:fc:
b3:49:d4:15:ae:60:3a:c7:8c:67:43:22:13:46:1a:
8a:3d:e2:24:f0:a6:7f:1f:7a:26:79:12:36:22:2d:
ea:d8:09:25:b6:eb:e3:94:74:25:08:de:5f:32:4e:
84:da:c4:c6:bf:86:f5:9c:c4:32:9c:75:75:48:58:
23:35:63:41:a5:32:cc:a0:c1:6e:51:42:09:99:e9:
b9:6f:0f:b0:8a:bd:8c:91:74:64:a4:13:09:34:29:
a6:be:53:50:3e:e2:e6:cc:ce:76:1d:00:66:78:64:
98:29:cd:d7:4a:05:0d:67:59:a7:70:b4:c1:9b:d1:
fe:53:88:af:e5:35:a9:1c:e8:4c:f6:03:d1:27:f8:
44:1d:ab:2e:22:6e:76:74:ac:31:33:ec:d2:80:dc:
7b:57:dd:34:f4:1f:02:44:3d:0e:8e:31:4c:d3:14:
ab:33:5f:f1:47:c4:59:f7:39:a5:f1:36:14:45:b1:
5b:53:f4:16:04:68:16:36:80:68:9b:e0:36:07:a7:
28:29:27:62:5a:e0:80:0e:93:6d:4d:36:d2:00:f7:
59:69:db:a3:8f:5a:e2:1f:ab:a0:9a:ba:8f:97:a7:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E1:88:B2:44:51:8A:9C:D8:5D:06:01:94:36:22:34:51:7D:FC:06
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3b3c4172-4695-443c-8093-79dc9e976ff3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:42:e8:3a:bf:86:37:7a:bd:2c:88:b4:dd:94:95:f6:d1:e5:
93:b1:23:ff:be:08:7a:bb:e3:a8:78:07:fb:78:be:bf:34:9a:
5e:3e:33:86:73:d2:f7:fc:21:c1:34:5d:f7:ad:d4:a2:85:c4:
14:a1:32:d5:9b:9b:30:d1:1e:3c:57:98:65:f7:dd:68:96:a0:
e1:c8:76:97:d4:5b:5c:b1:49:86:8f:0a:7c:1c:d6:3a:e9:8a:
62:6e:86:55:f8:49:8e:9a:4e:35:8c:2f:07:f2:21:98:82:2a:
c3:88:bc:bc:3d:00:14:fa:d0:bc:09:94:33:b7:d1:a5:e8:5d:
1b:bf:e3:63:4e:6b:67:7c:b0:cc:7c:0e:0e:e0:62:cf:a0:33:
b7:e5:20:c9:1e:83:e9:17:45:f4:c8:9b:2d:ab:54:47:16:68:
b6:15:1e:8c:d6:fe:0b:e1:39:76:64:c0:4d:91:f2:73:c1:d4:
56:cc:4c:6f:b6:63:6f:07:91:c5:7f:42:12:8c:0f:d7:fd:98:
2d:fa:3e:a4:ab:41:0d:f3:21:43:a8:96:4b:d9:dd:c9:f6:f2:
07:57:b5:89:bc:87:94:70:7f:06:65:41:ff:10:01:5a:3a:29:
7b:7d:1d:c0:ff:85:8d:ac:9c:a4:cd:6f:8c:91:ad:a3:b6:63:
0f:61:2d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:15:42 2025 by rpki-client