Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/594b931e-819b-4e55-96c7-b8d303e4e077.roa
File: 594b931e-819b-4e55-96c7-b8d303e4e077.roa (raw, json)
Hash identifier: xDhNvQpUUxzsvOPxHb8mIFq066jbz8hLzhmL/VoGd3Y=
Subject key identifier: AA:03:D3:8A:A1:95:EC:33:29:6B:96:1B:CC:7A:D0:67:5F:0E:B0:A0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6E026902A5D95DF8316CBEF653509FB43517D3A7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/594b931e-819b-4e55-96c7-b8d303e4e077.roa
Signing time: Mon 31 Jul 2023 00:00:00 +0000
ROA not before: Mon 31 Jul 2023 00:00:00 +0000
ROA not after: Mon 04 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:02:69:02:a5:d9:5d:f8:31:6c:be:f6:53:50:9f:b4:35:17:d3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 31 00:00:00 2023 GMT
Not After : Sep 4 23:59:59 2023 GMT
Subject: serialNumber=059968205c0862472ef223ea8a277d243ac2725c69b15fa19aaf020c8b5483b3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:9e:ab:18:1e:99:85:73:77:52:04:e2:ce:
9e:78:18:52:f2:99:87:47:c0:41:b6:11:8d:70:5a:
af:8a:60:cb:e5:df:76:09:2c:00:da:20:a8:73:19:
dd:16:a0:df:e9:29:8f:e6:a3:00:c3:1d:c9:f0:ca:
2e:67:ee:90:03:ee:ce:ba:07:eb:42:66:a1:1f:49:
27:6a:db:e9:2f:6f:c9:dd:ef:c6:bc:24:6e:db:99:
2e:4b:fd:36:cc:59:6b:13:3b:c1:41:b2:79:01:75:
e2:f1:fd:bf:0e:c3:f0:f4:e7:70:25:f8:99:e5:f3:
56:e4:14:06:b4:91:c4:15:88:3a:1e:a7:e9:55:9c:
4b:43:20:c6:74:a3:d0:46:ed:80:bf:10:b3:b2:0a:
9e:04:4c:0a:94:cb:99:ff:8b:a1:71:aa:ae:69:b9:
15:25:bc:fe:bb:fb:ec:98:4c:a3:ef:33:67:30:86:
37:1e:4c:91:96:5f:93:44:8f:14:6a:5c:56:46:a1:
03:19:58:ae:e3:de:c0:77:90:6b:a8:3f:42:87:0c:
a5:c6:44:d0:18:73:59:04:da:39:e5:51:76:b7:17:
7a:8f:dd:b0:ce:2b:ad:9d:3b:bc:cc:a5:98:84:b4:
46:f3:fb:fc:9d:f5:a9:e0:36:f1:d3:70:d0:f0:87:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:03:D3:8A:A1:95:EC:33:29:6B:96:1B:CC:7A:D0:67:5F:0E:B0:A0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/594b931e-819b-4e55-96c7-b8d303e4e077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:e4:24:46:d8:d4:a4:e3:15:49:4c:8d:12:75:26:a9:4d:f2:
53:af:02:ca:54:42:ba:7c:72:d0:84:7e:b9:5c:60:b5:fc:70:
7b:6d:d0:26:c1:7e:dd:24:85:2b:88:29:93:25:0c:01:18:d0:
96:66:91:77:19:b0:f1:9f:59:de:48:5e:10:6a:dd:60:1a:99:
e9:b2:93:22:c2:1c:88:56:d4:9b:9e:bd:23:66:62:1b:de:89:
90:f8:e0:fe:9b:48:5f:9e:99:0e:af:ea:65:e1:ff:3d:0b:87:
bf:cd:5c:ef:d6:f2:08:3e:a4:bf:d2:4f:dd:93:5d:60:05:10:
ec:e6:eb:ab:42:8b:4a:85:fc:0b:be:84:c3:d7:bb:44:5d:9a:
b6:6c:eb:ac:cc:ad:24:99:80:4a:5f:c6:bc:31:b2:79:f5:2b:
5c:f0:31:94:5c:62:73:91:f6:0c:52:47:db:52:d6:12:35:b5:
2c:3f:03:67:f6:f7:47:20:4b:c3:06:da:08:f8:a6:f6:9a:1c:
b4:84:53:94:5d:f0:7a:6e:ee:75:65:9e:8c:d4:51:bc:23:5c:
48:9d:c5:79:1a:d9:36:98:13:9e:bc:a9:3e:8f:07:46:26:04:
25:75:7a:7f:43:f4:00:28:41:3a:f6:84:b2:fa:e5:8f:8c:a0:
63:26:55:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:05:28 2025 by rpki-client