Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6db8efe5-15c9-46f6-abc7-708c5944c239.roa
File: 6db8efe5-15c9-46f6-abc7-708c5944c239.roa (raw, json)
Hash identifier: CN+MJXWOea5G4FWVdiAFSnIsJT4ed2JJ7F0HJmC78kA=
Subject key identifier: 7D:A2:E3:64:34:F9:92:C8:F3:69:49:B5:9A:E4:1B:34:F6:CD:33:8E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 74A190F9B34B5CB6021C20E96CE91CBC380260A7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6db8efe5-15c9-46f6-abc7-708c5944c239.roa
Signing time: Wed 01 Nov 2023 00:00:00 +0000
ROA not before: Wed 01 Nov 2023 00:00:00 +0000
ROA not after: Wed 06 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a1:90:f9:b3:4b:5c:b6:02:1c:20:e9:6c:e9:1c:bc:38:02:60:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 1 00:00:00 2023 GMT
Not After : Dec 6 23:59:59 2023 GMT
Subject: serialNumber=5960210bc44daeb1541b56d8bdfd04937c7bac44680ab3112e9045ae244d9bb7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:31:0b:bb:4f:6f:0f:73:02:f0:9c:8e:59:
e5:49:ec:4d:b7:ff:c0:84:a4:52:ee:48:5f:79:b8:
a1:e2:e7:3c:95:57:e0:ef:52:27:d7:9f:bf:44:ad:
8a:08:d4:2b:98:a0:b8:d9:3a:cb:d0:83:a8:d7:98:
e1:d5:fa:30:0a:c1:39:2f:85:01:f1:ca:37:ba:fd:
9b:9d:c1:dd:1c:a5:11:38:b5:7a:d6:84:2c:cf:a7:
34:6a:8f:0c:8a:1a:15:f9:ae:11:f7:73:4b:09:55:
e8:8f:f4:bf:be:71:b9:ce:08:85:4f:b3:f5:a5:d2:
7b:22:dc:c8:e4:b8:ed:f4:2a:1c:74:77:1d:87:c4:
c0:47:97:38:75:df:65:b7:5f:06:dd:51:bf:a3:f3:
ad:c1:a9:84:40:cb:a4:e9:33:33:80:16:d4:8c:79:
1c:c5:b1:98:ea:80:0c:c0:2d:50:f8:f0:19:87:46:
4e:3d:7f:f8:06:27:01:89:00:3a:46:e7:f8:cb:62:
e2:a6:ea:d7:02:85:33:98:c6:d2:39:78:bb:4e:65:
fb:86:05:4e:bc:86:7f:76:03:e6:4a:38:90:dd:1d:
04:a0:89:62:82:c6:2f:50:18:81:a8:77:de:cc:15:
2c:2d:7a:54:6f:75:8e:18:50:39:72:a7:a7:11:8f:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A2:E3:64:34:F9:92:C8:F3:69:49:B5:9A:E4:1B:34:F6:CD:33:8E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6db8efe5-15c9-46f6-abc7-708c5944c239.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:27:83:fd:72:46:7c:c4:bc:bc:90:20:7c:fd:36:24:f3:67:
8c:84:c6:f1:df:4a:ad:f9:b4:77:22:93:4f:e4:f3:f0:fa:98:
71:aa:94:d2:08:4f:09:1d:5b:26:5a:0b:29:b6:68:37:87:83:
5d:d9:a0:d6:4c:61:89:17:24:58:38:7d:59:2c:c3:25:27:39:
93:bd:af:99:74:a9:b0:df:58:c0:c8:0e:1f:42:51:e1:c4:db:
3c:35:21:c0:27:99:64:a0:a8:88:0f:62:34:fe:d3:88:8d:9e:
84:0c:b8:b3:48:17:34:40:c2:c9:60:29:4c:1b:f4:f5:0f:0c:
aa:ce:6d:de:e1:ef:40:85:57:aa:0f:d7:4e:2c:6a:d8:81:50:
ed:c0:52:db:4f:12:d2:44:b7:64:b3:da:28:82:66:d9:c9:37:
bb:60:e0:61:fb:97:e0:04:c1:99:92:e7:47:05:41:e3:1d:ea:
30:f9:05:d2:08:e8:d4:31:60:43:ac:57:1b:92:49:fb:ec:40:
a2:3a:28:84:1a:2e:f3:ec:5b:ab:16:29:8d:b1:10:ce:52:33:
1a:f2:76:37:78:42:e0:75:fe:3e:9e:e1:9a:85:e3:b6:5f:bc:
97:9c:2a:39:d6:3e:e7:e0:f0:66:76:a3:e7:5e:88:cc:8d:37:
3e:52:0b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:07:11 2025 by rpki-client