Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/48008ab3-3a6f-4860-80b0-4ead410c5e90.roa
File: 48008ab3-3a6f-4860-80b0-4ead410c5e90.roa (raw, json)
Hash identifier: 65cwQis4CA0EQymF0nTBgb8lWLtUtGwPke/97g7oGXk=
Subject key identifier: 0C:5A:B2:C4:90:E8:60:21:4E:E3:4E:5A:B6:A2:25:A9:F2:B6:26:8C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0FFE005B820F30AE36278B4A6529AAA28CCAA2B7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/48008ab3-3a6f-4860-80b0-4ead410c5e90.roa
Signing time: Wed 20 Sep 2023 00:00:00 +0000
ROA not before: Wed 20 Sep 2023 00:00:00 +0000
ROA not after: Wed 25 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:fe:00:5b:82:0f:30:ae:36:27:8b:4a:65:29:aa:a2:8c:ca:a2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 20 00:00:00 2023 GMT
Not After : Oct 25 23:59:59 2023 GMT
Subject: serialNumber=e9db8feb386677be6c184e7c8f4458d1f39be44f1eeb93551e2fbc7c987f5465, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:a9:fd:82:4d:57:af:82:9d:3e:05:3d:42:
0b:0a:87:c8:f0:17:e6:51:f7:20:b7:88:99:58:12:
62:1e:c2:da:c2:7d:ec:3c:77:5b:74:bc:5d:73:77:
39:11:b5:23:0b:88:55:28:ef:38:06:e3:6c:3c:26:
56:57:df:08:c2:cb:ae:18:12:c6:e2:e7:10:09:b2:
c5:61:73:d9:c9:96:18:fe:01:b4:d0:da:93:97:63:
13:9c:23:f3:81:39:60:a3:7c:9c:83:d8:4c:a5:39:
96:dd:31:45:57:01:54:5d:90:33:f6:79:67:e0:ec:
88:92:33:da:70:06:94:b1:a7:1f:30:fa:f0:b7:21:
42:c8:24:fa:1c:41:65:80:c5:e8:62:1d:3d:ea:7f:
43:ae:00:c2:99:f4:c9:81:65:7f:19:c9:1b:6f:40:
50:00:e6:f1:92:4d:cb:3b:dd:3a:d1:9f:84:fe:a6:
cf:4d:6e:ad:5e:db:74:83:8d:26:01:5c:4a:07:eb:
5b:fc:a5:40:98:27:06:84:dd:a9:84:11:9a:db:e5:
33:ae:e8:b1:86:f0:59:52:ca:32:b3:d9:41:c8:dc:
be:7f:6d:62:0c:0b:fc:46:ba:bc:c2:e2:d8:d0:0b:
f6:5a:1d:1d:c7:48:a0:99:1b:c7:61:72:57:87:fb:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5A:B2:C4:90:E8:60:21:4E:E3:4E:5A:B6:A2:25:A9:F2:B6:26:8C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/48008ab3-3a6f-4860-80b0-4ead410c5e90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:8d:74:62:42:ea:27:73:46:dc:44:b1:10:a5:7a:08:55:60:
ce:3d:6c:07:09:93:bb:f6:76:8e:4e:77:52:74:ed:5d:22:2c:
d6:0c:dc:43:20:08:4e:90:82:32:da:98:07:41:46:32:6a:41:
f7:01:ee:b0:a4:86:29:56:7e:76:6f:14:7b:1a:81:0a:8f:7e:
22:f2:6f:88:d9:a3:63:bb:7b:f4:a0:33:3a:0d:15:5c:69:4c:
da:0c:00:9f:34:66:51:c0:b2:80:e1:47:0d:ca:2b:d8:b4:c1:
f2:f3:2c:51:71:73:05:9b:0f:99:94:a8:e8:03:15:19:5b:8e:
6a:17:7c:77:81:f7:cc:05:5f:3e:b5:86:86:0a:e8:9d:a7:26:
7b:76:ab:c6:63:e8:23:8e:78:31:eb:ae:ba:ad:69:4d:34:f6:
ef:c8:2f:e3:48:64:31:3d:98:7f:41:71:ec:08:44:4a:7e:5b:
b0:1d:4a:fd:c0:bf:ed:d3:1e:91:91:d5:a7:28:84:78:8c:6f:
b4:d4:34:c5:f1:65:26:f0:05:37:b6:7f:12:ec:10:24:e2:4a:
1d:03:bb:5c:53:c5:ed:35:fe:fe:f8:02:63:64:d7:4e:12:71:
47:a2:ef:da:0d:74:05:ab:ab:74:4d:87:33:11:56:96:25:29:
25:88:5a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:10:55 2025 by rpki-client