Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8946eee8-26aa-4b11-865e-c3630d9a57a0.roa
File: 8946eee8-26aa-4b11-865e-c3630d9a57a0.roa (raw, json)
Hash identifier: p7EYNcwH3AkgUUP5+AjFn9I/XiyPj5tXtOnX7gdj2mE=
Subject key identifier: 7B:CD:EE:C5:2B:90:68:5E:53:9E:ED:48:4B:D7:2B:21:C7:70:9E:4A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7B5732CC0DD853A60C94F1C4E411CC4F00D7532A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8946eee8-26aa-4b11-865e-c3630d9a57a0.roa
Signing time: Fri 08 Sep 2023 00:00:00 +0000
ROA not before: Fri 08 Sep 2023 00:00:00 +0000
ROA not after: Fri 13 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:57:32:cc:0d:d8:53:a6:0c:94:f1:c4:e4:11:cc:4f:00:d7:53:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 8 00:00:00 2023 GMT
Not After : Oct 13 23:59:59 2023 GMT
Subject: serialNumber=725260c4a34dbc587a718ab5cdaa87bc09c084568cded0661c6ab8e5d107c03a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:97:82:27:9e:b6:07:ad:3a:cb:5b:d2:26:f7:
71:51:48:41:39:34:c1:16:7b:b4:97:b6:1c:e3:be:
4e:fc:dc:c2:3b:a0:39:dd:9d:34:fe:7e:4f:02:b0:
63:86:3a:8e:ae:0c:20:65:a3:1e:07:7e:b1:65:cd:
63:03:81:da:a8:83:a9:8b:87:a4:40:33:a1:56:ab:
ce:89:8e:9b:30:f5:62:82:4b:eb:60:29:c4:4a:64:
ed:2d:8a:b5:4e:b5:6c:fb:0d:ba:ba:13:e9:3a:d3:
6b:4a:cf:56:f0:cf:91:88:38:a4:1f:f3:d6:dd:8c:
c4:7a:59:f0:1a:9e:c4:2d:5c:7a:71:8d:63:c4:d0:
12:50:8b:32:87:3e:ae:27:c8:f4:34:96:b4:d9:ca:
d4:59:f2:8d:57:b9:98:7a:33:b7:b6:11:0a:f8:1e:
2f:5d:00:28:ea:65:79:0a:db:22:1b:b7:c1:1d:34:
9d:cd:28:98:ed:9d:31:3a:99:79:9d:4e:2f:a4:d3:
99:46:39:39:08:0b:d1:9d:36:84:7e:41:e9:45:bc:
0e:72:fc:2b:e9:a6:73:d4:71:08:48:05:a0:95:61:
df:2d:d8:2f:d2:58:de:84:12:41:5d:1f:b5:0a:8a:
77:ed:78:10:6c:ca:fc:b2:91:53:b7:ac:64:85:b9:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CD:EE:C5:2B:90:68:5E:53:9E:ED:48:4B:D7:2B:21:C7:70:9E:4A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8946eee8-26aa-4b11-865e-c3630d9a57a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:6a:19:b7:65:47:b9:bb:2f:2f:0a:ff:b0:fa:71:ce:20:91:
52:2d:34:7a:40:a4:89:7b:dd:65:ce:45:fc:0b:8f:77:62:fb:
27:98:10:f2:1d:5a:6d:0c:ff:8e:5b:ce:14:b5:e8:4d:30:e9:
ef:61:e2:ff:1b:d6:86:e1:96:57:d6:8a:2c:4d:2f:b8:e0:bd:
4f:ed:2c:ba:43:1a:34:53:85:6e:60:54:42:08:32:e4:95:58:
ac:b5:88:c0:e9:cb:0b:be:77:9a:cb:9a:23:58:31:f2:11:c4:
16:ad:95:fb:24:2f:6d:4c:a6:a6:d2:0f:91:61:23:19:7f:92:
cb:be:8c:d0:9c:6a:4f:56:2d:ab:29:c2:da:0e:4a:46:4c:19:
05:80:a1:0b:c6:98:63:eb:3c:0d:c0:0a:a4:12:95:ab:43:d9:
75:19:38:dc:e6:ee:82:93:8f:02:0b:b5:7c:ff:62:bb:94:68:
66:0f:ce:ab:e1:c4:13:71:d7:ac:90:fb:d2:00:a7:ef:10:e7:
4c:6f:65:a3:ff:a9:b6:a6:88:43:9b:d9:9f:74:b8:22:ff:8b:
bb:e4:f5:cf:5d:7b:67:6a:32:ec:86:06:bb:72:6e:99:5e:bd:
ce:2a:f7:e2:33:b0:19:57:cd:9f:c9:75:93:43:be:2a:ce:84:
48:67:be:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:52:40 2025 by rpki-client