Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4e2d9b89-97e8-42be-b27a-74c42911032b.roa
File: 4e2d9b89-97e8-42be-b27a-74c42911032b.roa (raw, json)
Hash identifier: QBtysQP4JzYMaj5YyFo8PXNAcldWvW5ZJkUZmgkto6I=
Subject key identifier: D3:B8:DB:FF:7C:F0:49:0B:16:E4:FB:0E:2F:74:90:04:8F:77:46:67
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 62FB5B05F937CD5BEDF1FF16724C7B1611E03850
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4e2d9b89-97e8-42be-b27a-74c42911032b.roa
Signing time: Wed 09 Aug 2023 00:00:00 +0000
ROA not before: Wed 09 Aug 2023 00:00:00 +0000
ROA not after: Wed 13 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:fb:5b:05:f9:37:cd:5b:ed:f1:ff:16:72:4c:7b:16:11:e0:38:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 9 00:00:00 2023 GMT
Not After : Sep 13 23:59:59 2023 GMT
Subject: serialNumber=2eb645865d3b41cd1931e0106d45c430369ad55049c31e8309348e9849ffb5fe, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:c4:f5:29:37:c9:23:32:4c:4d:23:a0:ca:
a4:85:28:01:99:a8:38:4e:b3:18:07:f3:c8:6e:dc:
08:ed:a3:c8:b1:fc:83:ab:7c:be:38:eb:73:b6:05:
e2:a8:1e:fe:22:6f:a0:91:34:aa:1a:01:26:f4:10:
cf:f4:eb:10:2e:8f:1c:ef:84:5d:da:87:00:3b:25:
a9:2c:93:74:12:6f:ae:f5:4a:6c:50:49:f7:1f:74:
3a:69:c2:b7:a4:71:a2:f6:c5:4f:e9:11:28:1b:04:
40:d1:25:5d:a5:82:ee:ff:60:10:13:1c:f2:3b:87:
79:d5:d7:64:a9:06:23:05:20:42:2a:fd:b4:6c:ab:
78:30:61:6f:71:e3:42:4f:82:55:ef:53:59:cb:ef:
91:52:50:29:37:87:8b:43:c9:8d:bb:2d:12:bc:41:
c0:6d:39:e8:83:d5:78:a7:0f:99:6f:44:07:e0:45:
55:94:95:4b:90:52:23:6e:dc:eb:3a:ce:72:1e:0e:
15:f7:3b:23:45:25:e0:fe:7b:07:e3:43:c6:45:49:
ae:66:7f:e2:d6:85:ea:25:46:f9:17:ca:f8:f1:75:
56:c1:3a:4f:e7:95:79:19:d8:bc:de:8e:ed:76:82:
42:3f:48:55:0d:11:e6:9b:ef:45:c2:ad:90:8b:c2:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B8:DB:FF:7C:F0:49:0B:16:E4:FB:0E:2F:74:90:04:8F:77:46:67
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4e2d9b89-97e8-42be-b27a-74c42911032b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:80:5a:2b:06:ea:60:4f:d4:3f:f7:39:eb:85:29:0e:5f:d4:
f4:c7:0b:63:54:59:9f:16:be:cf:70:00:4c:ee:c9:7b:31:f3:
96:d2:de:5e:74:f5:1a:04:d7:6e:b5:3f:e4:67:77:b3:67:2a:
18:fd:6d:db:a4:91:90:97:30:94:1c:20:4b:69:5a:c0:da:0e:
bc:34:1b:4d:7d:e7:ae:d8:19:76:7f:f3:4d:ea:ad:51:b6:9f:
cd:78:e4:46:5a:bd:bd:fc:e5:97:c1:cd:f6:2b:9a:16:ad:ea:
66:c6:fa:6b:8d:fc:81:28:54:7e:a0:64:ac:fb:3a:72:a4:95:
9b:39:04:92:ae:2b:6b:fa:86:4a:37:25:1c:4e:30:50:f4:5d:
aa:ee:7a:0b:ea:ec:6e:38:98:ac:43:c9:f6:1b:7c:61:66:29:
90:64:f0:e7:43:5f:15:3c:5e:50:26:61:db:15:35:80:40:ec:
7c:88:e3:35:4f:83:f0:51:62:93:27:d3:51:5c:f3:c1:a8:91:
de:a9:51:50:de:e6:09:3e:0c:c2:1e:94:4e:99:66:0e:25:3c:
16:89:4f:0b:6c:e4:58:d0:1b:1c:75:d5:6c:af:b3:59:ac:f2:
38:f2:76:e2:27:e1:e7:9a:f1:38:a7:06:3c:3c:22:6b:e5:c6:
6b:70:1f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:11:53 2025 by rpki-client