Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/89883ad7-1169-47b9-8c44-45f14cf66d50.roa
File: 89883ad7-1169-47b9-8c44-45f14cf66d50.roa (raw, json)
Hash identifier: N5tUplywZbFan4Q1yldqdGDk2BYIa69GZKWrVo8Y4Mo=
Subject key identifier: AE:AD:A3:CF:27:67:20:EE:88:E4:38:7F:6A:BD:2F:3C:9D:7A:C4:5C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 36B5F48FB0AB48B207035D2FB67D3148A339706B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/89883ad7-1169-47b9-8c44-45f14cf66d50.roa
Signing time: Thu 15 Jun 2023 00:00:00 +0000
ROA not before: Thu 15 Jun 2023 00:00:00 +0000
ROA not after: Thu 20 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b5:f4:8f:b0:ab:48:b2:07:03:5d:2f:b6:7d:31:48:a3:39:70:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 15 00:00:00 2023 GMT
Not After : Jul 20 23:59:59 2023 GMT
Subject: serialNumber=af87b62d71e947b3b345639aafdf58e1fbc47be5da4bbc5e03a018c148f6e8e5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:36:6d:58:d5:45:c0:74:6f:05:ae:e9:fb:
66:a6:47:14:eb:66:97:c6:9a:7f:27:08:bb:5b:08:
19:aa:a7:6b:30:47:03:0a:14:86:55:35:44:56:de:
5d:de:89:0c:e2:c4:20:03:f8:1f:6b:ad:e1:f9:e0:
0a:3b:35:85:cb:ed:42:6d:6e:af:78:e9:81:c7:ad:
4e:ac:92:c7:80:bb:d7:e4:5d:a3:1d:e0:90:d2:8e:
d4:b5:30:e8:45:56:86:6f:18:26:34:88:97:b9:d8:
a7:6b:ec:47:03:6d:26:4a:2d:e0:5e:03:f1:e0:af:
79:6d:54:2b:fd:13:72:e5:d2:87:e8:d1:07:77:2a:
a8:fa:d5:8b:db:64:c4:31:81:a8:d6:ac:3b:d8:d4:
1a:5b:53:22:1a:fa:77:c7:cb:9a:4e:83:72:05:93:
6c:94:f0:0d:14:70:c7:f6:35:a8:92:ba:bd:b2:21:
82:3a:0d:a6:96:9d:ef:46:00:9e:db:9f:22:04:2c:
73:3f:e0:25:bd:3a:64:4f:03:5e:fa:64:75:59:62:
a0:f2:cb:12:49:4a:03:e8:54:b7:3e:70:6b:0b:e4:
c0:9f:74:8a:b8:8f:38:bf:38:ae:58:3c:ae:1d:da:
7f:50:0d:54:7d:6b:74:ba:b0:49:94:3a:85:4a:7e:
c6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AD:A3:CF:27:67:20:EE:88:E4:38:7F:6A:BD:2F:3C:9D:7A:C4:5C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/89883ad7-1169-47b9-8c44-45f14cf66d50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c5:88:05:11:b8:45:1b:24:4b:4a:12:8c:f7:1b:fd:3d:9a:
3d:9e:1d:51:21:26:bc:0e:a3:1b:2e:f1:93:e3:ea:3a:cf:9d:
2e:4b:0d:1f:5b:83:d9:3b:8e:b4:77:fd:ca:1d:5d:a8:92:bb:
6d:9e:61:2d:77:ac:fb:5a:b9:69:f6:05:55:75:fe:51:6f:65:
92:90:6a:0d:40:f2:2f:77:e5:92:f8:36:86:fc:29:5c:da:b4:
c7:f4:7a:2d:0f:63:fe:2f:8e:73:e0:74:57:5c:a5:57:bd:8c:
25:f8:c4:86:fe:34:ce:dc:35:03:b9:80:73:59:80:c0:2c:88:
72:3e:6d:46:5f:4a:28:ed:52:a5:ae:29:be:d2:e9:f0:5a:41:
7b:88:bd:87:83:f2:4c:20:36:d3:b0:29:e3:9a:fc:a2:17:02:
70:65:fd:fb:40:56:dc:07:d2:1f:e7:dc:d8:dc:54:97:01:19:
3c:80:32:1f:6a:d7:60:3b:73:d5:64:e9:15:9c:97:ea:4c:c0:
19:ef:6d:f0:94:b9:56:d8:74:1b:37:86:46:af:8a:67:9a:cd:
41:22:da:fa:6b:7d:aa:ac:87:7c:f1:2b:07:c0:38:a4:61:11:
b5:19:e7:07:c1:00:db:82:cc:82:6c:4e:16:98:92:42:75:65:
9e:f2:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:11:28 2025 by rpki-client