Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/61255169-b569-48f8-8aa0-67b9e145b1c6.roa
File: 61255169-b569-48f8-8aa0-67b9e145b1c6.roa (raw, json)
Hash identifier: sW3s03EnKX35IZKLmKlDAmcyx9ZMljXYqS2EzPeyBAk=
Subject key identifier: 90:7A:60:92:54:0D:B4:DB:28:0A:FF:DB:4F:CE:E0:56:1C:6D:A1:21
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 21EF2DDEB704F696DEB8FB38DA4930C8F3D17BB2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/61255169-b569-48f8-8aa0-67b9e145b1c6.roa
Signing time: Fri 15 Sep 2023 00:00:00 +0000
ROA not before: Fri 15 Sep 2023 00:00:00 +0000
ROA not after: Fri 20 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ef:2d:de:b7:04:f6:96:de:b8:fb:38:da:49:30:c8:f3:d1:7b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 15 00:00:00 2023 GMT
Not After : Oct 20 23:59:59 2023 GMT
Subject: serialNumber=ae7952a2cdc8d79d31fb91fa653d9dbb3834618a90820816c02593601fe6b2a8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:e4:21:1d:68:53:81:fb:bc:c1:e6:51:15:
cd:66:f4:b8:64:8f:98:09:b5:08:07:b3:ff:b4:b7:
9d:89:fc:c6:ab:7f:ae:61:07:c1:3e:31:21:28:0c:
b1:2c:17:84:56:79:51:a8:43:7d:06:6d:ff:97:73:
90:7d:60:ed:ba:ad:1e:69:ef:3c:ea:ef:f4:83:32:
0b:e8:7e:93:38:11:7a:19:b5:be:db:fa:0b:55:38:
2a:1a:23:d6:44:e0:ea:ad:11:00:34:99:8d:b2:d4:
55:80:25:28:b6:0c:6f:f8:43:f7:00:19:5a:42:e5:
98:5a:a5:3f:39:f5:07:12:c7:2d:4f:e5:ec:4b:30:
03:99:05:32:64:dc:a0:1b:38:53:36:5a:25:07:0e:
06:00:d0:a8:a5:11:49:97:28:1a:f1:35:10:a2:37:
f8:fb:99:2c:83:f8:e7:27:70:93:1c:42:5d:5a:4d:
84:0f:e7:72:78:3d:dd:bd:90:82:5e:c0:bf:13:78:
15:57:78:8e:a5:60:da:59:34:f0:58:61:9f:77:37:
f9:e6:7f:8b:ce:96:35:05:20:25:b7:30:04:a5:53:
71:3d:a7:1f:40:1b:9f:b6:e0:96:9c:46:01:68:98:
20:e2:50:13:82:45:d5:41:5d:ab:d4:47:40:01:a9:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7A:60:92:54:0D:B4:DB:28:0A:FF:DB:4F:CE:E0:56:1C:6D:A1:21
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/61255169-b569-48f8-8aa0-67b9e145b1c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:8d:fd:c7:15:7b:bf:37:1a:8e:aa:62:c9:61:c8:c3:e6:8b:
9f:13:5a:37:8c:04:95:88:62:4c:0f:34:f2:3b:67:1d:32:a3:
36:8a:34:66:e9:b1:51:04:d8:1f:98:ad:ed:95:13:37:2a:d2:
d5:19:ef:b6:cc:97:73:a6:2b:92:9e:b9:e9:56:15:f0:24:46:
b5:e3:34:3f:95:7f:da:b0:96:49:d8:cf:09:6a:d7:a9:19:ab:
6e:95:cd:58:80:d8:9d:aa:d8:dc:df:b4:be:01:2e:71:52:b9:
74:74:5b:5c:2c:24:d4:fb:42:c7:eb:40:f5:99:3f:73:f6:52:
e4:3b:3f:27:db:6f:92:0a:b5:70:b2:83:7e:75:7b:c3:19:82:
63:87:dd:31:49:5c:65:03:ad:0a:70:b8:b0:4b:84:48:ed:3e:
cd:b3:ef:bd:46:71:1d:b7:8b:91:f8:26:53:95:01:a5:dc:1b:
ce:02:ee:dd:eb:58:9b:a2:14:25:ab:21:5b:b3:22:d7:79:ca:
7b:af:4f:dc:b6:06:eb:87:9d:f2:8c:0b:aa:24:7b:5b:e9:fd:
2d:69:c5:de:23:3d:95:0d:75:ce:a3:c5:aa:45:36:a1:db:6f:
86:a7:b7:b6:3f:2d:a6:46:16:2f:93:a4:6e:ae:57:c8:7b:e4:
13:de:a9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:08:40 2025 by rpki-client