Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/714c5bcd-88fd-4560-9560-ade7b4c271c2.roa
File: 714c5bcd-88fd-4560-9560-ade7b4c271c2.roa (raw, json)
Hash identifier: LBWB/JK2NCH4bXdNudsqeulNly0rAMWL2jbU6mZnEMc=
Subject key identifier: 3A:B1:B7:7A:9E:48:F6:B4:8A:E8:08:14:21:5E:C6:A7:4B:60:E3:99
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 79ECDFFFC21F59B107E62A58171B8F58236AD37F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/714c5bcd-88fd-4560-9560-ade7b4c271c2.roa
Signing time: Mon 02 Oct 2023 00:00:00 +0000
ROA not before: Mon 02 Oct 2023 00:00:00 +0000
ROA not after: Mon 06 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ec:df:ff:c2:1f:59:b1:07:e6:2a:58:17:1b:8f:58:23:6a:d3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 2 00:00:00 2023 GMT
Not After : Nov 6 23:59:59 2023 GMT
Subject: serialNumber=e809f4572e50061065fd538749862758979d70eeb6fc99f62a538d51d84ef62f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:2b:42:35:2f:98:13:33:ce:76:ee:5a:cc:
40:6e:1d:1e:e3:ed:f8:12:55:83:1d:32:f1:a4:1a:
ab:f1:7c:ee:d4:7c:d3:6f:8c:ee:63:26:8b:aa:24:
3a:2c:98:85:65:4c:7b:09:00:a1:ee:53:54:a9:0d:
1a:94:5d:d8:c5:17:51:65:30:82:fe:10:98:00:3f:
6d:ae:32:c1:9c:35:9b:5a:f3:77:20:66:7c:98:05:
b5:64:9b:0c:70:4f:24:f1:36:d2:84:ea:ba:73:d1:
0d:c5:e5:1c:45:8b:a2:41:74:75:d8:7b:fe:97:04:
52:e9:ae:e4:37:25:fa:1f:c6:d2:93:17:e5:89:32:
6f:1e:3c:d3:fa:cb:57:1c:65:ff:7a:3d:af:ad:c3:
6e:f2:cc:bc:b4:6f:00:50:30:76:c8:02:32:1b:2b:
f6:ce:08:66:00:a2:53:13:0b:62:89:68:34:4a:aa:
08:64:b2:16:85:76:b8:81:ab:55:42:58:03:7e:13:
66:cd:85:ac:e9:63:9f:27:01:a1:d8:a4:e2:c0:9e:
2b:ba:15:6c:ed:a9:4e:67:c8:ea:33:c1:cf:a8:8c:
15:df:75:1a:e8:8d:34:a3:0c:13:e5:44:13:2b:ef:
6f:87:5e:a6:9f:62:da:7f:2f:7e:c3:0f:99:cc:71:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B1:B7:7A:9E:48:F6:B4:8A:E8:08:14:21:5E:C6:A7:4B:60:E3:99
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/714c5bcd-88fd-4560-9560-ade7b4c271c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
80:41:e9:ef:ae:f5:e1:d4:73:44:7e:e0:ab:62:a6:b7:23:78:
b9:3a:df:46:14:b0:0a:26:84:d6:10:92:7c:95:d8:fa:e6:f1:
8b:8b:92:03:d5:4f:a7:0b:53:1d:95:44:ee:bd:8d:64:39:cb:
82:c9:54:d6:32:1f:47:55:a6:2b:dc:f9:71:a2:7e:04:07:c4:
d4:9c:9f:e8:d8:8c:08:57:c8:19:e9:7c:fd:52:3c:30:f4:b2:
ed:20:c8:22:fd:94:d4:e0:bb:7e:94:4c:b4:ec:c7:ed:c0:95:
f5:4c:60:e7:94:b9:9f:2d:25:17:2c:54:38:de:57:d7:40:f9:
53:9f:51:f7:81:8f:0b:1c:96:35:46:d9:61:65:31:35:21:42:
1f:b2:4f:9e:8a:41:e2:53:2b:ef:85:5a:8b:ee:2f:9c:b3:ca:
cc:37:46:bb:a0:54:ec:36:50:b2:26:25:df:da:d3:4e:bb:bb:
31:ca:12:ab:46:9c:5d:d5:2d:28:7a:79:a4:d0:89:27:a9:7b:
01:63:31:d3:74:27:03:ae:82:ed:7f:40:ce:15:b7:23:e5:62:
4d:cd:6b:37:31:fb:4e:11:c1:ca:ff:0d:bf:f7:0d:3d:fc:e7:
a9:92:30:58:e0:bf:f1:7a:10:b0:fb:10:8e:94:0e:a3:23:e8:
34:8f:eb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:44:01 2025 by rpki-client