Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6bd85631-e99c-4c3a-84a2-bbae74f72fc8.roa
File: 6bd85631-e99c-4c3a-84a2-bbae74f72fc8.roa (raw, json)
Hash identifier: /mOg7Kaw/NpLNuw2gyoO+m00FKDL2lfz8YP8GdziERc=
Subject key identifier: 70:0D:75:1B:B5:27:D0:D1:A4:69:A0:DC:27:74:D6:AA:AC:51:8B:DE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6FE8B21FD9DFEEDE7D41E872F010C5C1236B0AF4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6bd85631-e99c-4c3a-84a2-bbae74f72fc8.roa
Signing time: Tue 25 Jul 2023 00:00:00 +0000
ROA not before: Tue 25 Jul 2023 00:00:00 +0000
ROA not after: Tue 29 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e8:b2:1f:d9:df:ee:de:7d:41:e8:72:f0:10:c5:c1:23:6b:0a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 25 00:00:00 2023 GMT
Not After : Aug 29 23:59:59 2023 GMT
Subject: serialNumber=3f8ac718e7f94f4b6ab981658aba623e768d8b877e98a680c52b1df4983a129e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:30:41:97:b0:ba:ff:2f:01:41:2d:74:8b:
11:8d:22:33:b4:70:39:5d:f2:5b:68:48:f5:cf:7c:
60:a7:91:d8:15:13:f4:5c:67:29:ac:4f:3c:b9:b6:
aa:7e:6c:aa:13:27:f0:5c:78:b5:30:19:59:03:6a:
fa:70:fc:05:61:bc:ca:00:d2:e7:7e:e6:f0:e6:16:
f8:9c:81:6e:64:22:d3:37:2e:59:c9:de:de:71:52:
74:a8:a9:0f:21:1d:b8:90:f9:38:92:65:af:8e:22:
29:d2:72:ff:56:a9:34:86:0b:02:00:fc:a1:d5:82:
ee:b0:4b:5b:65:71:6f:54:17:03:a8:1a:ec:69:4a:
0e:73:1e:42:a0:e0:c5:d8:9c:93:95:72:1a:6f:4f:
59:65:f8:8e:2e:da:3f:ee:4d:5d:da:43:b1:55:53:
78:ee:de:bc:ed:b1:ab:88:d4:61:2f:ef:d2:04:68:
a5:0d:7f:2d:2c:45:4a:d3:b6:f5:fe:18:4d:a9:c1:
5e:20:67:ca:5d:10:7c:5f:f2:49:d2:e6:56:b6:08:
e2:35:cc:4e:57:8a:a3:17:57:43:83:7a:aa:bb:aa:
99:48:26:39:f4:df:64:2a:a3:31:2d:82:45:28:06:
c4:7c:ec:ab:d3:ca:92:66:15:16:08:e2:2e:88:0d:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0D:75:1B:B5:27:D0:D1:A4:69:A0:DC:27:74:D6:AA:AC:51:8B:DE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6bd85631-e99c-4c3a-84a2-bbae74f72fc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:86:3b:72:fd:19:42:28:6a:bc:3a:92:8b:fe:0f:83:1c:27:
36:b6:01:ce:fa:f1:2d:78:24:15:3c:30:7f:d7:13:2d:5f:d7:
23:fb:f6:df:ab:6c:ea:4b:d3:63:81:f4:ef:5c:78:fa:82:8a:
22:6a:84:24:4e:20:e1:c8:2f:e9:e9:7c:27:a4:dd:8a:5b:62:
5a:63:a4:e4:55:5c:18:bf:7b:29:72:1b:4b:e4:07:4a:11:87:
7d:55:0c:a8:7c:75:78:a7:e9:30:ce:e7:f4:5b:f4:2b:75:3f:
2a:60:b7:7d:1a:b1:24:b9:fc:ed:2c:3b:82:09:f1:bf:07:e1:
8a:a9:d8:4c:db:d4:ba:c0:b3:94:77:da:fc:18:9c:1b:16:2d:
cc:02:b2:78:cc:01:b0:73:de:fa:89:07:c9:1b:05:31:34:83:
7d:39:01:97:a4:ce:c3:04:27:7a:df:20:41:5a:7a:11:8a:95:
90:79:c7:d9:96:cc:d1:98:aa:b8:38:bf:d1:4f:e7:7b:90:90:
a7:61:a1:05:63:f7:5d:37:1b:24:d7:91:df:57:59:5d:59:fc:
95:ac:57:f3:3b:dc:72:e7:77:90:7b:bb:26:e6:2f:99:a3:2a:
8c:2f:6a:4e:da:60:8a:1e:07:71:96:61:ce:4d:b8:84:94:7d:
34:40:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:15:55 2025 by rpki-client