Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/872cf689-080a-42c7-96f7-403df4b1102f.roa
File: 872cf689-080a-42c7-96f7-403df4b1102f.roa (raw, json)
Hash identifier: +8JpxcrqklR/eZhXlVhfQlrEYuZIczx5sWTOXq5qFME=
Subject key identifier: EE:F5:F7:2D:75:71:3A:72:3C:A2:34:AB:FE:8B:98:89:A2:AE:7B:E1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4863098681B5ED502B8F18D8B12F05AF6FB2DFF0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/872cf689-080a-42c7-96f7-403df4b1102f.roa
Signing time: Thu 09 Nov 2023 00:00:00 +0000
ROA not before: Thu 09 Nov 2023 00:00:00 +0000
ROA not after: Thu 14 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:63:09:86:81:b5:ed:50:2b:8f:18:d8:b1:2f:05:af:6f:b2:df:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 9 00:00:00 2023 GMT
Not After : Dec 14 23:59:59 2023 GMT
Subject: serialNumber=f5383176599272b9ed860c2b9ce697e98dc017ce1086f42085471f6d6cee0526, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:dc:89:00:56:65:c9:0c:e4:09:5e:c8:b7:
b7:f2:15:7f:d1:8f:84:73:5c:79:99:05:62:7b:86:
c8:0e:7c:3e:d2:72:1e:93:d1:f0:92:ec:98:e7:ab:
59:80:bc:fa:f7:29:b2:80:70:af:f7:0a:f6:3a:8c:
e5:2f:19:17:16:f3:0d:16:67:c7:84:1b:f3:f8:d4:
ed:88:12:13:0a:f1:84:35:ac:88:86:06:83:53:32:
2c:02:8b:32:b4:96:03:d8:e7:95:42:ce:47:da:67:
77:d0:a1:03:a7:9a:54:e7:83:c6:37:30:63:c1:bf:
58:b1:be:15:73:0a:f6:bf:28:f7:35:8d:c4:fa:8d:
13:cb:ef:93:d5:35:12:7f:a4:db:93:67:b2:5c:c6:
ce:cb:ef:b2:20:5f:10:02:b0:46:fc:be:dd:ee:79:
58:1b:e8:38:48:6b:09:3a:28:88:68:9a:97:82:a2:
5b:ea:8e:72:df:bb:6e:5f:9d:f3:69:7a:00:5a:53:
d7:81:dc:78:06:b3:7e:62:87:f6:fd:e8:aa:8d:d8:
a2:c3:9b:a5:65:a2:16:a8:0d:2a:d4:c9:39:38:e0:
82:01:f0:ad:8c:46:7f:32:9c:21:25:f2:cd:37:80:
a4:aa:78:36:3c:18:57:3a:e3:55:04:c8:3a:0d:a6:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:F7:2D:75:71:3A:72:3C:A2:34:AB:FE:8B:98:89:A2:AE:7B:E1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/872cf689-080a-42c7-96f7-403df4b1102f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d6:a1:e9:d9:fe:c2:99:4b:04:d8:32:22:73:1d:4e:75:2b:
59:5e:c5:b2:a9:3f:26:0a:2b:bc:76:e2:95:e2:98:55:c2:bb:
cf:8f:1c:be:f1:f3:07:36:fd:ff:e6:58:93:8c:fc:6e:11:a3:
a9:0c:93:32:6f:80:b1:a4:a4:33:d5:ef:8e:1e:d6:b4:f3:14:
b1:d8:1c:a7:a5:09:35:04:38:88:f9:f3:3f:45:f6:01:02:33:
6d:c3:0a:28:a5:81:92:a8:57:02:24:94:c5:5c:bd:4b:0a:83:
87:ea:15:5c:49:93:76:2d:5f:71:4d:de:bf:b6:5e:8a:f4:2a:
cc:95:6e:14:78:fa:86:f6:3a:e4:e5:c4:84:6c:94:d4:ca:ba:
f2:e8:00:9e:72:ac:4a:d7:d5:ed:00:da:4b:04:64:a4:8d:7a:
65:80:a1:99:55:1e:c7:5a:fc:a1:9e:06:0d:4c:6f:db:61:69:
f0:3a:dd:9d:db:4f:1d:21:fb:4d:59:54:20:bd:18:63:df:b8:
5c:09:e8:9a:54:ed:ac:52:ef:34:d8:0a:6f:fc:7c:a7:63:5e:
ca:a5:af:82:a6:c4:9b:2c:fd:75:58:0c:92:66:3b:5d:8f:95:
fe:46:f3:b6:8a:1f:19:f3:71:9c:dc:fd:7f:4b:19:e8:c9:57:
1c:3e:49:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:28:12 2025 by rpki-client