Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d91b9e3-e4b3-4c5c-84e5-c636eff6a4e2.roa
File: 3d91b9e3-e4b3-4c5c-84e5-c636eff6a4e2.roa (raw, json)
Hash identifier: JrJs8KTyzleV9Zqb+lHKsr5y1uCP6tpZqHqgpW262XE=
Subject key identifier: F7:E0:77:F4:47:05:E2:3E:E2:07:A0:D8:AB:06:21:40:59:D5:F3:83
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 44379ADDE0A05978C5FE6F78E7F029F53CE1CE93
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d91b9e3-e4b3-4c5c-84e5-c636eff6a4e2.roa
Signing time: Fri 17 Nov 2023 00:00:00 +0000
ROA not before: Fri 17 Nov 2023 00:00:00 +0000
ROA not after: Fri 22 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:37:9a:dd:e0:a0:59:78:c5:fe:6f:78:e7:f0:29:f5:3c:e1:ce:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 17 00:00:00 2023 GMT
Not After : Dec 22 23:59:59 2023 GMT
Subject: serialNumber=cf2110fb532145535ff53f44f48005fb9673dc2c179776bde6f1b1da4d9a5889, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:bf:90:a1:b7:c8:52:c6:e0:74:5f:0e:2d:
25:d1:a0:87:08:e2:78:f6:04:d7:81:d3:19:99:bb:
55:e9:ad:77:b8:fe:4a:89:6e:0c:3e:6b:d2:2d:59:
36:07:73:24:18:7d:e4:30:4b:65:a7:39:5d:ac:24:
3b:86:39:58:c0:26:29:bb:e8:32:2a:e2:c6:dd:7e:
54:2f:38:d3:f6:fd:bd:59:bf:fb:be:97:26:0d:05:
30:6d:90:71:a1:6a:73:2e:e9:08:8c:5c:96:0f:16:
24:d1:f9:5c:51:d7:6e:70:1b:1a:5f:f7:30:41:06:
90:55:02:ff:99:2a:52:d2:c4:7c:e6:fd:20:17:30:
e5:17:81:f8:db:c9:86:9f:58:c0:83:37:4f:ef:cb:
ab:ba:84:71:23:0d:e8:28:4a:7c:d4:80:36:f3:28:
a9:6d:9e:18:44:a5:f5:79:6a:34:ca:b3:36:bb:10:
c5:50:bd:c0:0e:70:14:35:1d:bc:5f:92:df:b6:a6:
f3:59:4e:93:2a:73:c3:e1:4b:a4:c6:75:b2:b4:41:
10:56:b2:7a:58:10:f1:a8:2e:4f:fc:73:28:60:09:
b3:a4:64:6b:54:c4:3f:69:1b:e7:76:cf:59:de:54:
56:9d:04:25:91:e4:dc:2d:48:fa:63:7d:65:c1:07:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E0:77:F4:47:05:E2:3E:E2:07:A0:D8:AB:06:21:40:59:D5:F3:83
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d91b9e3-e4b3-4c5c-84e5-c636eff6a4e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
30:3e:ef:65:e2:a2:ca:28:be:29:73:d0:7e:4e:b1:76:71:79:
70:7d:09:ee:b9:40:fb:a7:6d:b5:26:88:71:06:c9:92:d1:b7:
93:d4:c3:d3:7d:b4:80:9e:9a:da:81:6e:73:44:ea:b6:d2:bc:
36:68:8c:e1:ba:71:5a:6d:29:99:b8:ee:3e:fa:86:4a:6b:40:
3f:c1:86:a7:f7:8d:7f:8b:37:59:49:d3:31:fc:00:b4:39:34:
3f:5e:ad:61:ce:4b:c4:b1:86:8a:5a:f7:26:a9:9a:c4:9a:14:
91:54:b8:7e:d4:e5:6c:29:85:e4:09:97:d0:a6:05:7d:ac:44:
5c:e7:34:cd:3b:cf:92:01:ca:f6:5b:8f:9f:1d:f3:49:6c:ec:
4e:1f:90:bc:7d:09:0c:6a:43:d9:f7:88:b7:22:47:fa:eb:7a:
c1:79:9a:ec:8d:08:33:59:4e:45:f7:6f:fb:a6:d9:12:ef:ec:
d3:a2:5b:fa:4e:b4:e9:4d:6c:c9:d2:41:86:9e:24:b0:a0:d2:
00:50:b2:f7:17:7d:8c:5e:91:d4:47:0f:9d:ae:fe:99:d5:41:
1b:80:e1:5f:b5:0d:c7:d8:da:ff:51:45:c2:27:00:67:47:83:
00:87:0c:73:90:90:95:9e:4e:2a:29:55:71:78:1b:b4:28:9f:
d9:40:03:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:38:48 2025 by rpki-client