Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7e2b885e-550d-4aea-9ecd-5a5f24d469d3.roa
File: 7e2b885e-550d-4aea-9ecd-5a5f24d469d3.roa (raw, json)
Hash identifier: eC7eQA2zZg0KzfGUkbT+EQFwSoZBDJqXjz2SaOwhYmY=
Subject key identifier: 5F:54:D8:D8:A3:E2:4E:6E:1A:25:DA:6C:3E:02:46:CE:56:93:29:59
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4AA6EC809D6752123244EFA48A7E1181A2F59E31
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7e2b885e-550d-4aea-9ecd-5a5f24d469d3.roa
Signing time: Thu 02 Nov 2023 00:00:00 +0000
ROA not before: Thu 02 Nov 2023 00:00:00 +0000
ROA not after: Thu 07 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:a6:ec:80:9d:67:52:12:32:44:ef:a4:8a:7e:11:81:a2:f5:9e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 2 00:00:00 2023 GMT
Not After : Dec 7 23:59:59 2023 GMT
Subject: serialNumber=554d49fc1b80e8e988b52ab82e431057a5b4187cd29a0e34fd7a1808f078d16b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:5e:fe:56:f3:61:dc:69:11:3c:8e:86:2f:
22:1a:1a:c4:85:4f:87:1e:3f:ad:f9:06:0d:7a:8b:
d7:98:92:79:e3:83:af:b4:1c:41:26:3a:2e:d6:e0:
bf:5e:f0:f7:cb:a0:a4:1d:ea:39:9e:15:bd:c1:0d:
19:1c:e2:02:50:e1:39:3d:f3:67:fc:9c:92:e0:37:
73:73:c1:fe:96:57:f2:37:83:f9:00:de:73:d0:83:
f7:78:a4:b2:94:c1:17:a1:66:62:65:68:81:bf:89:
54:49:2f:7f:82:65:36:09:50:00:c0:36:aa:ee:94:
51:28:c0:9f:92:5a:44:2b:a3:ba:93:de:dc:cb:ed:
20:77:01:c0:0f:b6:6b:7f:d4:65:f3:e2:63:72:51:
eb:57:4f:f0:0e:29:8f:af:7a:d9:b5:72:7a:e2:95:
eb:db:d0:04:4f:ea:f2:84:e6:13:28:19:6d:68:36:
fe:1c:94:41:6b:5f:3e:bb:22:16:e4:03:23:c0:1e:
82:b1:39:39:30:c4:1f:78:cd:29:0a:9b:e7:d0:ca:
1e:2b:c0:15:c4:65:f6:da:de:43:3e:45:ea:dd:79:
ea:18:b5:41:9f:3d:bf:c3:20:90:c8:39:40:6f:90:
68:e8:ee:8d:82:c0:fc:f9:fe:10:4e:d6:79:39:16:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:54:D8:D8:A3:E2:4E:6E:1A:25:DA:6C:3E:02:46:CE:56:93:29:59
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7e2b885e-550d-4aea-9ecd-5a5f24d469d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d4:70:e1:5b:67:93:23:70:fc:3e:34:4a:8d:0c:71:b8:e5:
10:d3:1a:b1:39:2c:8b:48:e8:2c:24:b5:21:d5:07:16:77:35:
d2:22:56:04:a6:9a:95:cb:dd:8a:1e:34:b5:99:69:04:2c:39:
c6:c7:a8:9a:7c:22:6d:f9:f2:44:1d:28:f7:a4:ac:fe:f6:84:
50:ef:12:7a:4c:06:14:a3:38:c8:db:b4:4e:95:dd:45:ba:63:
bd:aa:12:8d:fd:60:f3:ef:6d:56:5b:df:3b:a9:31:ef:44:9d:
2b:a8:cd:d7:2e:0d:14:fa:2c:24:1a:fa:bc:c0:33:88:30:6c:
48:b6:45:49:65:63:cc:0e:85:0d:c5:20:41:45:8a:8d:23:f0:
e8:cf:88:ac:0a:b4:86:e1:eb:28:7e:d8:4b:94:86:b1:04:fa:
32:c4:76:64:9f:c6:bc:ee:1f:4b:8f:37:f5:6b:98:7d:d9:8c:
a1:98:b7:da:a8:69:38:e3:84:cd:2e:c9:c1:8c:49:d0:c3:32:
78:1a:72:3e:bc:fd:7c:ca:3d:00:bc:10:b0:0f:70:80:c5:28:
bd:b0:65:c8:16:47:82:8a:77:4d:dc:68:41:f7:09:5b:c3:36:
f1:22:f7:c7:85:ea:eb:6a:6e:db:ac:de:19:b5:fd:2e:7c:9e:
86:cf:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:16:55 2025 by rpki-client