Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4bf78367-0b2b-46ba-8069-2448d0ebd4e0.roa
File: 4bf78367-0b2b-46ba-8069-2448d0ebd4e0.roa (raw, json)
Hash identifier: 0fkOym/HuOVpYsA37hdsHUvq4XZeOa2wFdgYsl00fzM=
Subject key identifier: 2B:4B:64:0F:73:BD:DC:AE:CC:12:99:CB:1D:CB:FD:92:0A:9E:8E:8A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6660495E57E3DDD60FEBE97A5525DADB98D335F6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4bf78367-0b2b-46ba-8069-2448d0ebd4e0.roa
Signing time: Fri 14 Jul 2023 00:00:00 +0000
ROA not before: Fri 14 Jul 2023 00:00:00 +0000
ROA not after: Fri 18 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:60:49:5e:57:e3:dd:d6:0f:eb:e9:7a:55:25:da:db:98:d3:35:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 14 00:00:00 2023 GMT
Not After : Aug 18 23:59:59 2023 GMT
Subject: serialNumber=d9c0b116290941ddda07c62d0890c2d61446fbf043a17fa28cfca3249d727421, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:a1:15:a5:31:eb:df:46:00:99:a5:77:50:
35:a2:2e:f7:ed:8f:d1:b5:74:3d:d6:c4:55:c6:d0:
cf:a1:6e:0b:16:bf:7f:42:18:b1:51:21:c9:e2:6d:
d9:2c:42:91:3e:4f:fa:4f:f9:be:be:75:67:a0:e2:
84:0f:fd:19:21:94:d2:5e:17:ca:d7:05:4f:fe:ae:
cc:81:07:16:12:45:cb:fa:d2:c5:6f:35:70:4f:e4:
b7:c9:bd:a7:f2:b3:27:2f:7f:a9:be:12:c6:93:92:
2e:d1:dc:d0:d6:b8:07:56:bf:81:58:0a:b4:13:99:
cc:b1:6e:ff:90:a6:64:52:f7:f9:c4:0e:18:f5:09:
bd:3f:eb:df:19:b5:bf:2c:48:ff:b7:20:84:c3:6e:
99:06:96:e8:71:ac:48:11:ca:ac:52:4c:66:0a:a3:
a9:4f:3a:0b:6c:32:80:6e:ca:f5:32:47:b1:7e:3e:
99:79:91:44:b7:3f:99:9b:ba:a9:26:f1:e1:ad:dc:
5b:bf:b3:16:ab:0e:49:aa:46:2f:8b:a5:8a:98:f4:
27:4d:89:2c:b0:34:56:53:f0:a6:0e:ff:33:40:d2:
cd:75:4d:65:b3:b7:6d:38:15:c9:0a:6f:b1:ea:bc:
2a:6f:89:aa:16:2c:d3:0c:a4:0f:8a:b6:f9:49:ab:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4B:64:0F:73:BD:DC:AE:CC:12:99:CB:1D:CB:FD:92:0A:9E:8E:8A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4bf78367-0b2b-46ba-8069-2448d0ebd4e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5a:23:10:e3:77:92:aa:2c:7c:6e:21:da:8a:0b:1b:ed:de:
7e:42:84:b7:e5:ff:89:db:84:a9:0b:4d:18:0f:58:55:e2:b4:
04:45:dc:8f:12:11:3b:2f:10:b1:bc:c5:d0:5c:2b:20:69:14:
e5:72:53:e6:55:9e:5a:81:f9:fc:57:31:6b:3f:4b:d4:51:b9:
f0:34:ba:81:33:ca:c0:5a:56:88:70:54:3f:72:1f:a9:24:62:
40:f4:be:aa:35:ab:17:04:20:1a:f3:20:e0:5c:68:05:f3:62:
bf:3f:ad:34:31:66:ff:11:b8:68:48:a0:3d:a8:cb:a9:73:94:
f8:ce:fa:4f:6c:8f:45:08:2c:bb:37:c8:50:cb:8c:16:f8:cf:
21:2e:5c:ea:00:1b:49:e6:55:7f:19:e7:ad:e2:1b:87:60:a1:
4b:a4:79:63:77:34:b3:3e:54:b0:6c:fe:b2:93:2b:48:66:a9:
56:f1:1f:9e:f8:8b:a3:5b:c3:8f:b1:a2:4c:3e:69:af:33:37:
5d:a7:b4:da:3c:49:d5:d1:29:48:5d:5c:b4:e4:33:3d:9a:d8:
61:4a:db:1e:91:56:5d:48:e2:39:3c:ae:3d:44:29:5a:a9:e1:
f4:5c:fa:ea:2e:9c:ad:a0:17:89:b5:d9:31:01:aa:e1:cb:0d:
c9:d4:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:01:53 2025 by rpki-client