Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/85dcadc1-00ac-4fc9-9c78-7ef0dca0d9ad.roa
File: 85dcadc1-00ac-4fc9-9c78-7ef0dca0d9ad.roa (raw, json)
Hash identifier: OGa4sJqNTTPJxaqaA2N6YryY/3EJKdwueWwOXwUn64I=
Subject key identifier: 5B:D9:47:EB:EB:13:64:17:6B:73:BE:ED:C2:0A:08:77:99:6E:95:81
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 30F086F1FE177F605E77D9776CAE68BE7433E118
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/85dcadc1-00ac-4fc9-9c78-7ef0dca0d9ad.roa
Signing time: Fri 01 Sep 2023 00:00:00 +0000
ROA not before: Fri 01 Sep 2023 00:00:00 +0000
ROA not after: Fri 06 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f0:86:f1:fe:17:7f:60:5e:77:d9:77:6c:ae:68:be:74:33:e1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 1 00:00:00 2023 GMT
Not After : Oct 6 23:59:59 2023 GMT
Subject: serialNumber=3f7fcfbeae8bbd18dc3348a13f1884b8fe1864a94953cf0c91217ea56c77986c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:cd:a7:50:64:c7:98:0a:91:d4:71:ea:73:
34:80:b8:ff:b5:b0:9b:f5:5e:1d:7a:c9:79:63:3c:
45:d1:df:ce:7c:29:84:41:67:48:0d:c4:6e:0e:2f:
57:29:07:41:d3:82:97:db:13:2e:38:63:d6:08:30:
19:f5:d7:01:b2:d7:d9:c8:f0:d6:2b:fb:34:03:6c:
99:d8:3e:8d:e8:52:19:66:f8:bf:1f:b1:e5:e2:36:
86:af:9d:ee:69:8e:90:e9:ce:b6:b7:59:6c:aa:1d:
d2:46:80:a6:b2:31:58:23:da:d3:55:57:57:6b:cb:
e6:00:4b:73:b3:72:76:87:2a:0d:d2:2e:35:e3:b4:
ad:6d:01:4f:65:bf:04:6e:0f:a4:68:ee:ce:8a:dc:
de:d6:ee:6d:86:ad:79:da:5f:be:67:b8:20:87:a5:
97:ad:d1:a9:e9:b1:12:8a:9d:f1:54:bd:30:fb:c7:
84:38:7a:df:5b:0b:9d:42:80:65:51:2d:5d:02:b0:
a8:0b:15:6f:48:ed:44:56:ef:2b:29:09:62:0d:e3:
7c:44:d7:68:f5:cf:37:fb:3e:60:11:a2:28:33:37:
55:37:b3:13:db:8a:42:56:61:bf:d0:d9:34:bc:13:
bc:82:d5:8a:5e:42:8a:66:d9:0a:26:65:b0:96:b6:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D9:47:EB:EB:13:64:17:6B:73:BE:ED:C2:0A:08:77:99:6E:95:81
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/85dcadc1-00ac-4fc9-9c78-7ef0dca0d9ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:62:c6:44:db:b2:a0:38:d3:53:74:14:53:30:b6:c0:c1:4e:
b3:06:b8:9b:28:f5:5d:99:be:15:53:ab:9d:48:76:da:21:57:
dc:41:2c:e8:70:e6:18:7e:bd:88:66:0d:e0:5f:00:63:90:c2:
51:a7:71:54:37:44:d2:ce:83:94:e8:a3:b7:13:33:90:fb:a1:
1b:50:34:ea:d2:92:38:fe:fd:92:cc:7f:61:34:77:e8:c8:e8:
56:37:0b:c1:02:2b:a1:62:a4:2e:2d:0c:6a:77:ad:ed:22:56:
e7:20:a5:6f:54:ff:1a:d9:07:d1:11:3e:ef:cc:72:16:c3:ef:
11:9b:35:26:89:5d:b1:93:e7:05:02:fe:c3:d1:c9:6f:e5:08:
62:70:91:23:9b:3f:56:f9:92:c1:4f:4e:84:da:0f:02:86:a9:
93:d9:2e:e2:8c:d4:32:fb:ae:11:d5:1b:fe:45:bf:41:29:92:
ad:03:e1:b1:a5:aa:e5:d5:6c:6d:fc:ae:f9:4e:0d:d7:08:df:
c7:62:09:e6:84:53:b4:e4:f2:0b:63:fa:0b:42:ec:cc:2f:a3:
84:bc:0c:b8:78:7e:d7:d5:9e:09:f7:0e:0d:31:e4:af:26:40:
40:ad:2b:bb:9c:9d:1c:73:4b:54:92:ba:ad:ca:f7:e3:88:d6:
8b:5f:f3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:32:08 2025 by rpki-client