Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/46ab5265-05e2-4452-a2aa-443d93aef966.roa
File: 46ab5265-05e2-4452-a2aa-443d93aef966.roa (raw, json)
Hash identifier: Xs1keC5W0GEKoGsg/i1naf3X4XBIzJllNvUbtMIHRvo=
Subject key identifier: 8B:B1:CB:0C:31:22:CA:6F:F4:49:35:48:E5:F4:1A:BA:C9:00:76:0F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 50C2AF58A0927FC2B8B926CD7886CC044757284A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/46ab5265-05e2-4452-a2aa-443d93aef966.roa
Signing time: Wed 20 Sep 2023 00:00:00 +0000
ROA not before: Wed 20 Sep 2023 00:00:00 +0000
ROA not after: Wed 25 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c2:af:58:a0:92:7f:c2:b8:b9:26:cd:78:86:cc:04:47:57:28:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 20 00:00:00 2023 GMT
Not After : Oct 25 23:59:59 2023 GMT
Subject: serialNumber=3abe3045c9d36a06c23ba8a938cf465687c0d7a7b175c764da7058c2b9d6b30e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:85:e2:a2:b5:ec:0d:75:1b:b2:00:8b:06:
e8:3d:b6:93:7e:83:d8:d2:34:97:2d:8f:d6:9d:11:
19:28:0d:75:30:3c:4e:e4:1e:6c:d5:e1:7e:25:01:
8c:1e:7b:ce:66:14:b7:92:45:33:5f:71:40:2e:3f:
54:30:82:d3:52:50:30:be:e7:b7:e0:da:eb:eb:c4:
21:55:67:2a:74:ee:fe:c4:12:9d:11:ee:f9:db:59:
5a:b0:91:ac:88:6c:81:43:e9:a1:1c:a0:9e:58:cd:
2c:94:da:7f:13:b1:be:0e:d8:9d:cf:5f:3f:5c:ad:
d5:0f:95:54:b5:d7:7c:3c:e1:76:50:94:08:a5:53:
fc:03:1f:ab:29:31:47:1a:3f:37:7b:44:6f:51:f2:
d2:99:83:83:cf:9a:6e:de:69:e3:10:13:73:73:0f:
84:99:b4:62:69:b5:48:a6:80:f3:e4:59:1c:f5:69:
28:6f:04:f9:26:e7:45:7b:a2:c7:d5:a7:49:65:fe:
66:4b:84:94:70:1a:9e:13:1e:e1:39:61:34:71:75:
0e:5f:a5:09:07:0f:9d:59:54:1d:3c:bb:66:92:4a:
dd:b2:2d:98:29:64:db:bb:6a:b1:15:c7:4e:e1:20:
d4:6a:05:75:b3:a2:e9:14:76:50:72:99:63:cd:f2:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B1:CB:0C:31:22:CA:6F:F4:49:35:48:E5:F4:1A:BA:C9:00:76:0F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/46ab5265-05e2-4452-a2aa-443d93aef966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:5d:45:93:1f:3b:20:1f:fe:f6:23:b6:9b:f1:9e:d6:ee:3f:
c8:6e:02:df:50:ca:81:e6:d0:46:fe:a0:51:dd:ee:94:24:e9:
a4:e6:9b:e8:6d:8c:cb:64:33:da:d3:2b:dc:16:44:3c:97:43:
38:95:14:91:16:f7:d4:ce:8d:92:73:ce:29:73:5e:67:28:36:
b3:b0:6c:a1:c7:c7:af:38:93:30:ec:d4:58:dd:f2:a1:4f:34:
ba:17:57:19:10:f2:b2:b3:8d:83:37:08:b3:32:46:2f:22:89:
36:af:5e:03:5e:8b:4a:ac:2b:c4:01:97:6a:70:3d:29:a5:8b:
5a:d1:77:02:77:47:39:ab:df:3b:5a:56:93:5e:f1:0f:83:8e:
59:ea:9d:a1:a8:53:39:3f:f3:33:ae:4d:46:87:be:8b:9c:6d:
2c:1e:a2:a7:72:24:f4:13:3d:33:a8:e7:f8:5e:f7:42:99:54:
5b:b3:d6:2b:a4:4b:ec:4e:c5:92:4d:9c:94:10:7d:ad:8d:1d:
18:72:19:8a:2f:3e:2f:5b:6e:22:4b:1b:0d:ad:0e:9a:4a:f5:
d4:f5:2c:89:6f:1c:d4:83:c9:83:16:3d:63:74:ab:2c:54:f4:
18:c3:04:1c:38:11:82:42:1b:4d:0d:6d:3a:c0:75:f0:69:ea:
00:44:31:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:07:10 2025 by rpki-client