Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6f9c09f4-3542-46e1-994c-273214f7b8f4.roa
File: 6f9c09f4-3542-46e1-994c-273214f7b8f4.roa (raw, json)
Hash identifier: 7Q7Q84LTvwAhCPEbnfX2jLN7SJPRZRQVrGV7kCSYpw4=
Subject key identifier: 4B:48:06:CB:30:0F:D3:7F:51:2F:22:C5:47:26:8D:3A:75:E7:70:58
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 48BC2980DD64555B6172AB1A60A715AE6809B2E9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6f9c09f4-3542-46e1-994c-273214f7b8f4.roa
Signing time: Wed 26 Jul 2023 00:00:00 +0000
ROA not before: Wed 26 Jul 2023 00:00:00 +0000
ROA not after: Wed 30 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:bc:29:80:dd:64:55:5b:61:72:ab:1a:60:a7:15:ae:68:09:b2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 26 00:00:00 2023 GMT
Not After : Aug 30 23:59:59 2023 GMT
Subject: serialNumber=cc32538f909c86f5a6ae7ea80d89e3c0f13b38a6109b8d9832e8d3eeae9ac65f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:e0:b8:8e:0c:82:ff:bd:55:86:0a:0b:aa:
8d:8a:15:f7:9d:43:91:94:18:3f:e1:2b:70:f2:3f:
4c:50:df:20:8e:1b:7d:40:92:2b:49:dc:26:99:ec:
87:42:d1:d9:71:30:38:ff:2d:39:20:ae:32:c5:75:
02:3f:57:e3:82:f7:8e:0a:2d:ae:bd:bf:c4:ea:e2:
d7:f7:68:2a:4a:c7:f0:15:5f:74:0c:1e:1b:e2:cd:
a1:e3:c9:39:92:00:e5:35:b5:68:67:e6:8c:9d:49:
98:6a:97:4c:2b:30:43:cb:f9:9d:5d:f3:dc:d6:17:
73:ee:de:e0:f2:74:b2:5d:f9:a3:75:f0:7d:1a:e9:
5d:a3:97:1f:47:21:09:9f:e7:6b:60:67:69:64:2f:
da:ef:08:9d:d2:da:e5:72:cf:b1:36:cf:06:23:28:
de:0c:8f:b9:5f:f7:d7:40:58:45:34:a7:6f:2b:20:
e0:03:8a:70:d0:ae:f9:da:17:6a:4a:44:ff:ec:69:
47:f8:79:6d:e4:9f:68:36:b5:ba:66:f8:5c:79:f1:
de:bb:e8:69:1b:e5:fd:d7:5d:cd:3e:2b:a5:38:d0:
42:db:52:2e:7b:4c:8b:6c:57:8f:57:19:77:71:5e:
48:45:f0:61:4c:58:33:24:67:6b:d1:a7:d4:97:31:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:48:06:CB:30:0F:D3:7F:51:2F:22:C5:47:26:8D:3A:75:E7:70:58
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6f9c09f4-3542-46e1-994c-273214f7b8f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0d:9a:d8:bb:9f:1b:c6:d7:91:6e:83:92:4a:32:4a:a1:9f:
f4:b9:9d:0b:18:3d:35:b6:0b:7b:a0:e5:ee:c5:6d:58:ae:cc:
9d:be:e0:88:fc:b5:55:10:d7:32:10:25:92:c4:9b:b0:84:9a:
dc:85:76:ec:ca:06:69:59:0d:89:29:fb:04:80:73:f4:2f:4e:
0e:7b:5f:c5:84:b0:33:8e:07:60:37:fa:68:ea:48:5c:39:e2:
79:9f:80:7b:af:08:bf:ba:a2:03:da:9f:4f:fb:16:f0:61:dc:
1e:cf:78:06:c6:31:9b:1d:37:ba:0c:09:62:ac:88:c6:0a:48:
43:5d:29:8c:cc:ae:e3:97:cc:67:1c:02:17:1e:97:bc:e8:01:
4b:e7:0d:c6:3d:d4:0a:d9:26:ee:d5:c1:14:2d:cc:a1:5c:f6:
21:a9:a1:3b:c1:60:ab:f9:f6:b8:e3:0a:df:ab:d4:9b:df:f2:
62:98:6a:8b:0c:a5:1e:21:e6:6f:b8:80:fc:c5:1e:df:5a:5c:
2d:f7:b4:a9:cf:7a:bf:30:d1:5a:27:08:0f:b2:b4:13:57:54:
82:b1:23:72:cc:67:c8:ef:76:31:b6:b8:29:15:d4:bc:e3:e2:
30:c3:62:3f:19:3a:ad:8e:62:d8:b2:41:33:48:d9:bd:cd:71:
e6:93:17:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:07:48 2025 by rpki-client