Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/431687f3-f3e4-4f1a-bb6d-5db12999098d.roa
File: 431687f3-f3e4-4f1a-bb6d-5db12999098d.roa (raw, json)
Hash identifier: S4KDvNvuGiaorXqr6eyF2+bHzMDNmS8Vk809GOH7GPc=
Subject key identifier: 57:10:7C:D5:2C:7C:DB:AA:05:24:FD:29:C4:8E:D1:50:8B:13:A3:B0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 09A8BE84020D72E4A5F70B7916EA101DD31EFE1E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/431687f3-f3e4-4f1a-bb6d-5db12999098d.roa
Signing time: Fri 22 Dec 2023 00:00:00 +0000
ROA not before: Fri 22 Dec 2023 00:00:00 +0000
ROA not after: Fri 26 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a8:be:84:02:0d:72:e4:a5:f7:0b:79:16:ea:10:1d:d3:1e:fe:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 22 00:00:00 2023 GMT
Not After : Jan 26 23:59:59 2024 GMT
Subject: serialNumber=54d4c351317cc98f681cf2649dd8af0679928e7c81fe7c9ba76974075a3d7fa5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:d6:54:74:38:b2:46:38:de:ba:1f:29:67:
ca:cd:c1:f8:b9:dc:bf:71:65:65:06:c3:6c:ae:a4:
11:2b:29:33:c2:12:60:6e:85:63:2b:7b:6c:fa:58:
9a:45:18:2e:88:cb:73:6d:a3:85:19:60:8c:16:83:
0b:20:5f:4a:a3:b2:8b:35:9f:91:c9:13:21:46:c9:
e2:17:7d:cc:54:8e:70:f2:db:90:4f:a1:b3:e7:c8:
6d:47:c1:8f:71:6e:d1:47:e5:0a:3e:c4:e3:d5:3b:
6c:63:30:e6:34:3d:7a:4b:df:38:59:4b:00:60:ab:
9b:21:0e:84:df:88:da:c3:73:35:10:54:29:70:34:
de:0f:75:2c:f4:a5:6a:50:02:17:bb:76:10:9f:7b:
46:97:ab:50:74:b6:f4:dd:23:5c:db:e8:15:f7:21:
6a:15:33:82:e4:04:8d:e9:47:0c:da:72:b0:99:0d:
15:28:c0:d3:52:24:2f:d0:94:00:4c:d6:5e:e1:6b:
0c:21:a9:d8:1d:c1:72:34:68:18:ec:0e:c3:e8:a4:
93:5b:34:cf:28:bf:5e:2d:3d:5e:2d:20:2f:08:29:
4d:7d:a1:10:6a:54:36:fa:b5:d8:3a:b9:3a:55:37:
f0:4c:c9:8a:4b:89:48:06:a5:67:bf:8a:d2:3f:26:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:10:7C:D5:2C:7C:DB:AA:05:24:FD:29:C4:8E:D1:50:8B:13:A3:B0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/431687f3-f3e4-4f1a-bb6d-5db12999098d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
59:59:9e:52:9b:af:28:c2:d8:83:65:af:ad:7b:ec:e9:20:8d:
b1:87:df:bb:a2:f1:24:ba:20:37:a3:b7:30:12:11:0f:1e:6e:
d8:5e:38:49:cd:3e:18:05:65:d1:36:de:65:a1:b9:c0:ab:9d:
18:5a:e7:45:ac:2e:37:32:d2:f6:b9:04:33:2e:c9:72:ad:1c:
5b:3c:63:ef:03:0e:99:93:d9:65:f4:a7:c2:23:b0:ae:7b:bd:
4d:5b:aa:aa:f5:36:d5:7a:28:26:e3:fb:6c:14:ec:f2:ad:97:
0c:02:e5:0a:b0:60:b4:5a:78:61:27:dd:5b:18:b5:3d:d3:63:
a4:fd:e2:3a:df:9e:2c:dc:06:66:05:32:b6:a8:fc:f1:1b:e9:
34:fc:04:86:61:fb:9f:dc:b5:ce:bb:2a:41:73:b5:0b:1e:72:
f6:be:12:0e:85:45:f5:00:69:e8:67:3a:b3:b1:59:39:13:b2:
f7:b1:f1:44:0e:50:ed:3d:9b:4b:90:ab:60:4f:f1:58:d4:6b:
ba:b0:f1:80:6f:0e:19:96:64:d9:17:ad:76:21:fe:d2:ba:83:
3e:1e:9b:96:08:a2:b8:5d:99:c7:f5:ec:6b:b5:62:47:55:d5:
56:e3:25:9d:69:30:d5:3f:c1:9f:00:68:b8:c0:e3:4f:88:c7:
85:2d:b1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:27:24 2025 by rpki-client