Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b1ecfd4-6649-4ddb-bb70-368fd57290be.roa
File: 7b1ecfd4-6649-4ddb-bb70-368fd57290be.roa (raw, json)
Hash identifier: hE+mJyHhTayse3HqMi4gbqsRBw4YzO0ykhsJlxq2jEY=
Subject key identifier: E9:CC:44:7F:7E:5B:D3:91:22:3B:07:C2:2A:A8:73:A2:71:1C:F1:8F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5D4CA722030B716A32F5581B8496DDCD1EB0DE92
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b1ecfd4-6649-4ddb-bb70-368fd57290be.roa
Signing time: Wed 25 Oct 2023 00:00:00 +0000
ROA not before: Wed 25 Oct 2023 00:00:00 +0000
ROA not after: Wed 29 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:4c:a7:22:03:0b:71:6a:32:f5:58:1b:84:96:dd:cd:1e:b0:de:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 25 00:00:00 2023 GMT
Not After : Nov 29 23:59:59 2023 GMT
Subject: serialNumber=0930da3c5e37f46fc3629f4f79dbd3bb52f338ea9cf2883325486ee9c391cf1e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:db:cd:6f:cb:d7:e3:3a:a1:ff:35:73:03:
55:22:38:17:8a:37:3f:d9:ae:f2:9b:ea:c0:b5:d4:
3e:81:7c:38:d9:d1:42:81:0d:f3:4c:2f:b4:6e:8b:
17:b6:38:8f:e5:06:f0:8a:16:82:c9:82:32:a1:76:
ab:c4:c4:43:46:ed:0e:e9:cd:aa:1b:e3:3a:7b:75:
f6:5c:11:cb:3a:f3:fe:e5:7c:37:25:db:8b:a2:7c:
df:84:e3:29:55:f8:08:1a:77:95:fb:50:83:b2:34:
93:2e:94:d0:3d:fc:37:fc:60:eb:4a:e5:82:b7:fb:
a3:41:fc:81:54:d9:a7:1d:3b:b6:58:b9:a8:4b:23:
ba:d7:c0:07:20:b1:4f:b1:79:a5:67:f4:54:c4:30:
50:01:26:2e:c7:d5:a7:97:5e:1d:c1:12:0a:0d:3c:
93:62:70:47:fa:db:99:65:9a:36:da:10:e8:13:f6:
89:43:5c:27:b7:84:c7:b5:f4:d9:5a:95:b1:1e:a5:
6e:e5:e1:b3:89:82:b7:25:81:b9:c5:7c:a7:b0:4d:
2f:e9:8c:4c:6f:e3:10:36:00:4f:ee:6b:66:da:ad:
d3:f9:79:8f:66:31:8e:6a:69:e8:eb:f2:2d:69:e2:
49:c0:f6:35:fd:59:00:d2:a4:ac:9d:e1:4f:b5:52:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CC:44:7F:7E:5B:D3:91:22:3B:07:C2:2A:A8:73:A2:71:1C:F1:8F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b1ecfd4-6649-4ddb-bb70-368fd57290be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e3:bd:b5:92:a3:b7:32:01:49:34:95:03:0b:72:6c:5a:df:
8b:30:c3:d7:24:2f:21:32:03:a2:0f:8c:32:47:da:c1:82:73:
a4:b1:1c:03:c2:e1:97:f6:b8:81:6f:de:b7:a1:28:50:03:09:
ba:be:69:a3:ec:2f:fc:0e:b8:93:21:ad:18:d7:33:38:f9:9e:
ea:3f:a8:02:32:f0:31:88:66:70:3e:75:d8:31:59:1d:47:19:
fb:a4:59:3f:48:de:b4:2c:2a:37:1c:3b:66:91:41:da:7b:c6:
2b:b5:d1:cf:60:fa:84:5c:ca:77:6a:40:2c:2c:c1:92:c1:ff:
21:02:73:c4:fe:41:83:70:bb:0c:41:ae:06:3e:27:75:52:18:
ff:0b:64:cf:76:ce:eb:be:2f:2c:d7:b2:16:28:14:fb:8d:fa:
3f:e0:1b:66:e8:c5:5e:ba:87:7a:ba:ef:98:23:04:c0:a2:8f:
9e:21:af:51:f9:98:40:4a:b9:44:80:e9:e7:ef:c1:cc:b3:11:
09:1f:52:06:f4:06:dd:fc:c4:52:76:48:15:4a:2f:3c:c1:35:
d9:63:75:a4:65:75:79:b6:11:8f:45:f0:f8:50:09:f7:71:f7:
fa:11:3a:a3:54:5a:28:03:d3:14:ff:be:9f:d8:e7:03:ea:1f:
aa:49:41:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:43:32 2025 by rpki-client