Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4d56613f-a938-4145-9213-9f0b0c88bdb0.roa
File: 4d56613f-a938-4145-9213-9f0b0c88bdb0.roa (raw, json)
Hash identifier: DW+ptYvIkvCymIejyqDJbtZK+vVQjqbvq1n4rtZd1Xw=
Subject key identifier: 31:D9:B7:2C:AE:F3:94:66:03:7F:B6:C6:C5:DB:68:27:40:10:5E:5E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1670F6160AB483EAECB6B267DBA75799286BDBDD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4d56613f-a938-4145-9213-9f0b0c88bdb0.roa
Signing time: Wed 22 Nov 2023 00:00:00 +0000
ROA not before: Wed 22 Nov 2023 00:00:00 +0000
ROA not after: Wed 27 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:70:f6:16:0a:b4:83:ea:ec:b6:b2:67:db:a7:57:99:28:6b:db:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 22 00:00:00 2023 GMT
Not After : Dec 27 23:59:59 2023 GMT
Subject: serialNumber=bb643d60694596490c86a42769f0911b7d6a3b1885833c6922678a8c3135e3b5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:ca:08:62:af:60:e8:32:cd:cf:bb:71:f7:
5b:9d:bc:5e:d4:a5:82:66:73:1d:9d:ea:b4:6b:51:
9d:9b:af:37:f5:35:2c:ad:6a:dd:b2:6a:95:3a:16:
dc:26:c4:f1:3a:b3:3b:e9:a7:ae:63:1c:88:cf:2c:
e9:f5:57:cf:51:a1:44:7d:2e:56:55:53:31:87:fb:
34:fb:97:6b:00:6c:41:89:62:03:fe:4b:2f:27:06:
ad:cd:ca:df:f5:97:95:83:d5:26:65:c3:c3:3f:77:
2a:ad:50:41:ba:0e:33:d8:72:49:8a:6c:2c:96:8f:
c8:1b:e9:f4:07:59:d0:c0:2c:66:51:89:da:29:2e:
55:00:cd:0b:af:a0:4e:0a:de:03:4b:72:fa:ae:cd:
a8:13:0e:4a:87:1f:e9:e8:04:47:82:04:62:c4:aa:
4e:e1:43:64:27:8f:3b:41:28:b5:17:61:a5:86:ed:
8f:d9:28:1c:fe:9d:af:80:ee:ec:a0:bb:65:07:36:
07:86:73:3b:e1:11:62:14:76:0d:60:6c:f5:da:87:
9e:72:b7:db:57:b7:b1:ef:f0:bd:5b:9b:d5:f5:00:
a2:22:ef:bd:79:8a:71:36:95:73:69:51:f7:74:52:
9c:0a:f8:8a:6f:35:03:d4:d8:86:ff:a6:f8:77:39:
88:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D9:B7:2C:AE:F3:94:66:03:7F:B6:C6:C5:DB:68:27:40:10:5E:5E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4d56613f-a938-4145-9213-9f0b0c88bdb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:92:a7:ea:95:61:11:19:29:02:dd:ca:d5:64:b5:ac:27:56:
ef:da:80:8b:ff:4e:d4:d1:7c:83:48:f9:25:ab:6a:44:4d:76:
f2:af:18:4e:c2:25:ed:39:ab:2d:22:b6:57:b7:20:dd:cc:b6:
07:26:39:d3:af:b8:71:4e:8e:ea:ac:44:f3:ce:e4:70:17:36:
0e:f9:30:43:ef:44:4e:55:fd:69:b6:81:38:1e:2b:07:7e:76:
d2:85:07:a5:7e:70:88:a3:59:23:bd:99:46:59:a4:0d:fd:d3:
5a:5d:16:3e:82:b3:70:1a:98:d9:1a:98:6c:91:55:6e:56:68:
9b:04:f3:94:4b:94:0d:b3:71:88:de:46:e4:f0:d2:9e:71:74:
b2:2a:6a:e1:3d:a3:19:8f:49:f4:96:76:8f:dc:f1:88:ea:79:
a1:93:0b:33:56:29:65:e4:9e:da:51:e3:4c:dd:5c:2a:da:1e:
1c:bb:53:e3:07:7c:84:4a:26:c7:50:05:c1:f7:ab:da:8c:fb:
dd:e4:0a:57:24:f4:c8:6a:c1:8a:f6:ce:99:bf:fc:bb:2f:ec:
c2:92:ea:71:ed:7f:72:51:5e:d8:00:16:be:5d:62:fb:76:66:
78:34:44:42:32:9e:0d:d3:6d:58:e9:cf:09:6f:49:1d:7f:a4:
e4:b5:f1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:55:44 2025 by rpki-client