Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/72eb6df1-38c0-44ab-bbd5-94307f2ae037.roa
File: 72eb6df1-38c0-44ab-bbd5-94307f2ae037.roa (raw, json)
Hash identifier: vgqyEWshXRjhlAQmqNpRtzL3DAFXu5fOl+H57eEOWRc=
Subject key identifier: 51:88:3E:6A:D6:10:D6:F1:3C:5F:FB:BE:09:53:C4:80:75:9C:16:FC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 74AC5B53A6BC984DC2C17665696B9C66325EEA09
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/72eb6df1-38c0-44ab-bbd5-94307f2ae037.roa
Signing time: Sat 15 Jul 2023 00:00:00 +0000
ROA not before: Sat 15 Jul 2023 00:00:00 +0000
ROA not after: Sat 19 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ac:5b:53:a6:bc:98:4d:c2:c1:76:65:69:6b:9c:66:32:5e:ea:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 15 00:00:00 2023 GMT
Not After : Aug 19 23:59:59 2023 GMT
Subject: serialNumber=552270b552c1e6ec501547d996ae4cadc357ebdacc5e36e8bb1e3971d305e063, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:eb:ff:5f:6c:4e:82:1e:07:6e:93:97:93:
b7:65:8e:cc:02:4e:d5:5f:31:69:d8:b4:6c:17:f3:
22:fd:1b:3b:52:c6:69:96:4c:49:00:03:40:03:7a:
8d:5e:e7:c7:1b:81:de:3c:2b:51:3f:6a:ee:76:e0:
f9:e0:02:8e:c7:6d:45:cf:20:2f:7d:59:ca:64:0b:
28:ca:cc:0b:09:87:84:8e:1b:5e:03:1b:12:50:99:
f7:31:68:b3:30:04:8d:32:72:f3:c8:20:86:80:5e:
e7:ca:a5:99:2d:94:cb:8e:e5:c9:be:51:dd:83:a9:
d3:9e:f6:04:c7:e6:4b:fb:e5:33:da:af:34:b3:e0:
cd:99:27:87:57:5a:53:e3:38:1d:b3:df:0b:63:1f:
3f:b1:38:b4:ae:9d:03:ba:3f:d9:ce:5d:a9:f6:ca:
f0:12:6a:cc:bd:11:8a:db:30:30:19:d4:76:ea:76:
8d:9c:ad:d2:4b:9e:29:9a:f9:05:f9:04:11:9f:4d:
c6:7c:d5:4a:fe:3c:7b:7c:62:2b:c0:19:71:20:b1:
82:12:18:f1:20:79:02:8d:ba:7c:96:42:93:dd:3d:
7b:7c:43:69:d6:59:f7:3d:03:92:29:17:cc:3e:04:
c2:e6:81:84:db:d7:10:cb:86:9d:fb:12:b8:02:28:
b6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:88:3E:6A:D6:10:D6:F1:3C:5F:FB:BE:09:53:C4:80:75:9C:16:FC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/72eb6df1-38c0-44ab-bbd5-94307f2ae037.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
55:04:7e:7e:76:7a:66:ef:93:47:5f:40:d3:7d:b0:32:64:c3:
1a:af:6f:03:6a:8d:6a:8e:e3:f5:0f:70:cf:f6:b7:49:f5:fb:
ed:0c:ec:3c:10:37:20:04:38:7a:d6:b9:6f:de:17:47:e9:d3:
fd:25:18:e4:a3:7e:bc:83:27:a0:40:d7:fb:f8:c8:f1:7a:59:
57:d2:7e:72:ee:47:ae:1d:9b:89:42:b8:f8:be:0a:e4:f6:bf:
fe:ff:09:d5:bf:72:02:ec:1f:ee:9c:51:82:8e:fb:fc:de:ac:
5f:15:ca:39:da:61:9c:fb:3b:5f:52:78:c2:7f:82:85:17:9e:
c0:e9:86:1d:8b:73:36:70:e4:62:62:47:25:be:f7:82:47:ad:
c2:7e:60:0a:65:02:9b:6d:8c:b3:41:76:80:32:71:10:ab:e1:
a5:ce:0a:9b:01:c8:63:4f:48:c1:c7:19:c7:c1:97:6e:ba:3e:
6a:1a:1a:07:55:34:03:d7:e2:6d:f5:0c:dd:97:a0:29:3d:ec:
0e:7f:f1:98:70:6c:0f:f3:25:fa:a9:d3:9e:89:6e:14:bd:4b:
aa:91:d4:44:d7:37:10:2f:28:e7:32:d5:08:9e:36:88:81:94:
6a:9b:e5:79:8b:e5:a0:2e:4b:06:ce:5d:d8:be:06:3f:e2:45:
69:27:b4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:13:32 2025 by rpki-client