Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/86dd42b1-5507-4a60-9411-78827df6a3c7.roa
File: 86dd42b1-5507-4a60-9411-78827df6a3c7.roa (raw, json)
Hash identifier: 3booTY4lu4dH8MmZ/j9KA5yCA7CLrGuax8eGBwnZmws=
Subject key identifier: F1:8F:B2:BF:B8:74:58:42:D0:9C:DE:20:30:FE:93:FE:3F:D6:C8:98
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 60A04406AD5A0C7A21576026A99C74D6B826A2C5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/86dd42b1-5507-4a60-9411-78827df6a3c7.roa
Signing time: Wed 30 Aug 2023 00:00:00 +0000
ROA not before: Wed 30 Aug 2023 00:00:00 +0000
ROA not after: Wed 04 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:a0:44:06:ad:5a:0c:7a:21:57:60:26:a9:9c:74:d6:b8:26:a2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 30 00:00:00 2023 GMT
Not After : Oct 4 23:59:59 2023 GMT
Subject: serialNumber=a9e4491f96869eeb722700a4535aa0f7625f2a1cff9e9aac476c24ab78f2ece7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:43:b7:56:26:a2:ee:2c:21:4b:e8:40:2e:
33:12:1c:6a:75:05:0e:24:0f:5a:87:d4:28:c8:af:
5a:cc:87:99:42:00:73:d1:38:a6:00:53:12:72:38:
44:6e:9f:61:82:0f:94:75:5b:29:ad:63:7d:a0:85:
2b:81:98:de:cb:56:d5:1a:f3:f6:1d:29:6c:b7:b4:
7a:57:ad:71:f9:b7:13:6f:dc:75:92:dc:09:cb:d7:
92:15:7a:58:19:b3:60:06:1b:e3:46:8a:77:da:77:
13:55:ba:f6:40:a2:68:80:a3:d5:53:dd:59:cb:4f:
c9:db:b1:f2:18:cc:b6:d8:c8:72:3a:42:3d:07:ce:
1e:68:6c:c0:20:56:a6:6d:95:77:ad:01:cd:7e:17:
ed:47:00:d0:47:1c:40:b0:a5:b6:a3:3f:47:c0:50:
e1:dc:20:87:26:89:67:56:b2:a3:24:4b:26:95:21:
6a:93:c9:67:24:22:e2:94:20:b0:2f:6c:9d:53:8d:
02:b6:0f:42:00:c2:2b:cf:c4:e7:39:24:55:ba:9e:
47:af:77:9b:98:57:d3:29:26:fb:ca:b2:50:41:8a:
81:de:9e:27:a4:bc:e0:c6:eb:1c:5c:08:ac:03:3b:
c0:12:3e:8d:0f:4d:26:a4:0d:91:e1:06:fe:cc:b6:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8F:B2:BF:B8:74:58:42:D0:9C:DE:20:30:FE:93:FE:3F:D6:C8:98
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/86dd42b1-5507-4a60-9411-78827df6a3c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b6:d1:28:6a:d6:ff:23:eb:e2:d0:27:7e:3b:31:6e:a4:c2:
20:50:ca:8b:13:fc:e6:b7:8e:6b:68:e1:49:8a:13:dc:f0:be:
9f:23:1f:db:f6:ab:06:6b:91:38:a3:0f:84:93:b2:f7:cb:f2:
b7:45:f2:b4:69:38:16:bb:d7:39:f1:89:d3:57:ff:e0:1d:25:
71:d7:15:2e:c8:04:4a:1c:c3:02:c0:62:91:be:ba:13:d7:df:
d4:86:de:7a:cc:4a:c5:81:dd:5f:c0:74:88:57:d0:a0:8e:1d:
50:af:32:68:ae:66:61:71:35:1f:99:18:88:ed:8a:d8:96:72:
2b:9e:c1:be:af:bc:fd:e6:46:d3:f2:b1:ca:79:f6:7a:f8:da:
c6:d0:fe:b2:b7:ef:5e:37:80:bd:51:8d:36:67:98:f4:b3:a0:
8e:c5:bb:e7:9f:d0:13:9f:2d:af:74:ab:83:56:15:51:3e:57:
4e:20:c5:f0:48:80:86:2e:26:95:59:7e:c0:23:20:5c:a2:da:
b6:a2:1a:5c:98:0d:63:f7:e9:fc:d8:b7:a2:da:bd:28:30:63:
ec:c5:87:f5:02:39:13:92:25:1a:4c:33:d4:f6:90:ad:ea:9d:
02:60:a6:3b:22:60:84:04:db:b2:14:be:1b:9d:22:99:88:5c:
54:81:d1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:22:43 2025 by rpki-client