Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a83b133-5917-4bb7-bdf1-1e43f2ef7cd5.roa
File: 6a83b133-5917-4bb7-bdf1-1e43f2ef7cd5.roa (raw, json)
Hash identifier: 6EF4sj0UE7i8rPu9Rct0SkBOxCrlIAqd/gWovUpg7Q8=
Subject key identifier: 88:84:86:9A:82:6D:DC:03:18:3C:FA:15:8C:C5:31:A0:12:B4:24:E5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 119C418F1F54D2DA539C1A05492AADB621782C51
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a83b133-5917-4bb7-bdf1-1e43f2ef7cd5.roa
Signing time: Mon 17 Jul 2023 00:00:00 +0000
ROA not before: Mon 17 Jul 2023 00:00:00 +0000
ROA not after: Mon 21 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:9c:41:8f:1f:54:d2:da:53:9c:1a:05:49:2a:ad:b6:21:78:2c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 17 00:00:00 2023 GMT
Not After : Aug 21 23:59:59 2023 GMT
Subject: serialNumber=42f4021bde867285ed23a38eafbdd8f2698e72e691c03feec43db1441051e85d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:b0:6b:15:05:fd:c8:ed:4d:db:a1:ea:6b:
de:44:59:ea:9b:a3:08:10:04:5a:37:75:df:32:5d:
e3:57:4e:c6:08:4b:d6:52:11:05:e6:88:ed:9d:20:
a1:b8:6a:2c:5a:8b:80:4a:04:c0:54:a6:41:e0:0b:
32:6d:8e:71:a9:ce:3e:40:d4:ca:59:72:be:e1:9e:
41:62:c9:d5:c3:b1:8c:ce:d0:1e:a0:20:d4:a3:c1:
7d:45:85:68:e0:90:9d:55:2c:43:d7:c7:72:49:f5:
f8:a5:ff:72:e9:5f:18:dd:73:3c:ef:8e:76:cd:6f:
50:65:2b:b2:0f:c1:6d:9b:fe:a4:54:1b:2d:6d:0b:
33:93:75:8a:c9:c9:58:3a:40:a3:b5:85:58:a1:24:
63:e6:84:c2:32:ac:cb:e4:3c:3b:01:24:ef:97:03:
af:d6:a0:b6:3f:96:bf:29:fb:3a:87:08:6a:06:f7:
4f:07:67:b0:b1:e7:39:f6:e0:12:07:2d:ce:84:5a:
ca:e5:3b:70:7d:32:3f:80:ba:8c:6d:ea:c2:95:47:
02:6b:f3:9a:22:90:79:08:3d:63:90:07:bd:c4:1b:
9b:41:a5:02:4d:6c:ba:5f:91:c7:fc:b2:16:fc:4c:
4a:c0:ac:d5:05:55:55:80:3e:6d:41:19:28:bb:84:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:84:86:9A:82:6D:DC:03:18:3C:FA:15:8C:C5:31:A0:12:B4:24:E5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a83b133-5917-4bb7-bdf1-1e43f2ef7cd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
04:44:31:11:2f:85:7f:6a:bc:0c:2a:f5:d4:b1:1f:2b:73:53:
45:cb:e4:0b:b0:3f:06:26:53:52:59:7a:ea:70:ad:e6:d1:96:
d4:88:c6:26:85:dd:91:6c:57:b1:7d:f4:eb:f3:50:9f:f3:c9:
84:8d:4d:d5:83:88:7a:08:06:2b:af:b7:7a:cb:39:e6:33:0a:
e8:5d:c5:33:ee:3e:8b:e5:58:81:32:c4:2a:a8:9b:f1:46:cb:
fe:15:05:09:32:83:5f:3d:c1:86:25:9e:c8:93:aa:d5:c4:9e:
d6:de:dc:7e:4c:2b:c9:a5:ce:6d:7d:73:ef:ec:27:f8:61:44:
8a:c6:37:52:a6:a3:af:a2:dc:ef:ee:7f:f2:02:28:fb:2b:81:
ac:82:8a:d9:9a:56:bc:1d:48:84:2b:68:d9:69:7f:48:f6:d2:
b3:e3:ef:63:e7:e1:83:af:07:a6:0d:14:5a:9d:90:e8:5f:9c:
dc:e8:44:e9:f5:14:92:5f:42:e1:63:6b:fe:a7:18:66:c7:2f:
29:58:96:86:82:87:dd:be:6c:ed:b8:a5:ce:15:7d:7d:42:b3:
b6:23:6e:1f:ce:6a:9d:44:85:43:ca:57:87:c0:ca:fd:e5:fd:
86:a3:0b:c2:88:31:a3:b6:df:61:b0:86:de:bd:8c:09:73:82:
e5:fd:b5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:55:32 2025 by rpki-client