Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6cd7ffaf-1921-48d8-b513-79e460d2f490.roa
File: 6cd7ffaf-1921-48d8-b513-79e460d2f490.roa (raw, json)
Hash identifier: BjrIEywiurMORboY4dElC6Ro8QybRxhLoVHj5rbp4nc=
Subject key identifier: DE:D5:80:6A:8E:1D:C4:96:BD:90:47:05:E4:EA:55:90:B0:03:E8:DD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5665925F8C74ED550FEEB62D1DEC5B12E0224590
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6cd7ffaf-1921-48d8-b513-79e460d2f490.roa
Signing time: Fri 12 Jan 2024 00:00:00 +0000
ROA not before: Fri 12 Jan 2024 00:00:00 +0000
ROA not after: Fri 16 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:65:92:5f:8c:74:ed:55:0f:ee:b6:2d:1d:ec:5b:12:e0:22:45:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 12 00:00:00 2024 GMT
Not After : Feb 16 23:59:59 2024 GMT
Subject: serialNumber=e8ac2ff939077c016caa3f88b42dc88a56e832a7e26f1430cb37565b9a21f86e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:6b:91:3b:b8:6d:f2:6a:b0:6f:24:4b:3f:
ca:98:c2:3e:d0:18:74:8c:84:13:76:43:ee:5c:e8:
c7:08:e3:d0:19:ca:22:85:2d:5a:65:a0:8a:08:ef:
82:4e:8a:e7:df:15:11:b8:02:b5:6d:0c:02:1b:af:
7b:f8:dc:49:59:03:f8:a1:1f:9d:40:44:66:7a:88:
ed:46:9c:3e:32:84:b6:40:d8:7b:1a:35:26:64:b2:
c0:36:ce:f7:7b:db:19:cc:c7:63:9a:78:ba:3c:86:
4f:55:9d:bd:4b:41:8b:3c:63:0b:8a:fb:27:1c:3f:
67:06:c2:59:71:c4:87:a5:d3:4a:92:e9:a6:84:29:
50:3d:db:5f:b0:6f:39:a9:4f:d5:06:8a:1e:cb:5b:
67:51:9d:2f:c7:5a:e6:43:c4:72:bd:f4:45:ca:28:
6d:b2:71:23:5b:66:8a:f2:9f:b8:da:81:e6:2a:d9:
da:07:ab:0d:02:8f:70:af:a0:cf:6d:e2:ba:84:b5:
53:45:a7:01:c6:d6:89:be:07:3d:72:b1:63:4e:7a:
f9:3c:b1:c6:1c:d7:90:31:aa:c1:96:29:e7:89:fc:
ae:8c:3d:2e:db:ae:24:88:f7:c5:33:eb:2e:08:bd:
85:a5:08:9d:02:d8:49:f7:da:1d:f5:d7:83:1f:55:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D5:80:6A:8E:1D:C4:96:BD:90:47:05:E4:EA:55:90:B0:03:E8:DD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6cd7ffaf-1921-48d8-b513-79e460d2f490.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f6:1f:2d:74:1b:eb:30:f7:cc:b8:a8:6d:99:33:3b:67:79:
da:6b:f3:fe:77:e1:0c:1d:27:ff:85:6b:26:55:f2:fb:e6:e3:
3d:9b:2e:ff:3b:fb:ef:0e:3f:22:51:bd:4e:86:60:79:5b:e9:
c9:49:50:0d:cf:d1:4a:fa:2f:d4:13:1a:ff:d8:6e:68:39:70:
74:9c:2b:b1:2c:ab:cf:fa:f8:6e:b7:93:83:d0:c1:43:0e:e2:
56:c0:ae:4b:0e:22:a3:2a:34:4a:e2:1b:06:30:79:aa:0f:d7:
2e:4e:c6:c3:65:20:4d:55:47:64:31:c9:81:ee:6c:cb:75:42:
b8:56:cf:7a:64:4d:d9:27:a0:8f:68:d5:30:f0:c3:cf:a0:2f:
77:94:02:b9:d8:0d:90:b9:58:43:c0:6f:eb:56:51:87:8c:c6:
3b:28:bb:26:6c:d9:7b:f9:f4:04:af:90:12:32:30:d2:3b:bc:
ea:44:16:a8:37:dc:88:02:e5:fb:de:50:f6:ae:10:0d:f9:0f:
9f:8a:d3:46:95:1a:37:c0:9b:42:f3:6e:69:27:4c:73:d5:f6:
cb:0d:8d:84:23:d1:51:7e:4e:cc:2e:cb:d8:2d:e7:c1:c5:3f:
fd:b0:54:50:6a:79:7c:a4:1c:90:37:d5:2c:d1:67:80:c5:93:
c1:72:4f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:25:38 2025 by rpki-client