Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b29be87-ecb5-48f0-b4db-92f95a716c01.roa
File: 8b29be87-ecb5-48f0-b4db-92f95a716c01.roa (raw, json)
Hash identifier: sE+epGTytg4u1mSwwKsJ0+IvDkY5PH9J8knE/EhNM80=
Subject key identifier: DA:65:D5:4F:91:CB:72:C3:66:13:18:4A:CD:18:39:48:C3:B2:46:67
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 655585BBA0F3ED4DFE3A7B0910044E0648CA2F87
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b29be87-ecb5-48f0-b4db-92f95a716c01.roa
Signing time: Thu 21 Dec 2023 00:00:00 +0000
ROA not before: Thu 21 Dec 2023 00:00:00 +0000
ROA not after: Thu 25 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:55:85:bb:a0:f3:ed:4d:fe:3a:7b:09:10:04:4e:06:48:ca:2f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 21 00:00:00 2023 GMT
Not After : Jan 25 23:59:59 2024 GMT
Subject: serialNumber=d95e6b6ced485f5d842f6f5b8bf9f387814bee0d1552ffdf45b3a8fa81f8877d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:df:a0:3f:36:5c:14:7d:2d:e7:34:4b:eb:
2d:ee:94:fb:38:76:71:fa:f2:cf:db:77:96:19:d3:
b7:a7:f8:af:f0:78:69:2d:3c:99:82:74:9c:4a:dd:
aa:ab:7e:c4:73:c5:18:de:bb:24:b0:7b:a8:ef:2f:
92:d4:2d:9b:f3:3e:f7:e4:8b:a3:5c:87:50:b6:9b:
23:8e:b7:e0:c5:06:85:8a:49:bf:5c:3c:7f:c6:9d:
77:a5:3c:7a:a0:f9:4f:46:c7:28:92:47:63:11:1f:
77:ce:d6:44:52:4c:f8:45:a6:af:88:c1:14:c8:df:
7b:4f:e4:6c:1f:4c:c1:be:e7:56:d3:e1:7b:2c:a7:
67:63:db:2e:bb:c9:30:0d:ab:6b:9a:0f:7f:af:cc:
25:f8:b2:1c:12:95:6b:c7:a1:22:77:7f:a1:b2:d2:
d4:98:a5:a7:b5:6f:ce:f6:ce:f9:70:8c:a9:af:88:
fd:5a:bb:28:5b:e1:83:63:11:d5:5b:9e:e7:d0:99:
1a:27:fb:37:2a:6b:d9:a0:ae:fb:72:69:0a:1d:d0:
d6:03:ba:80:30:6f:2c:6b:d7:c3:06:05:b7:a5:4f:
ff:46:e4:ec:62:16:ac:c0:0a:35:04:2f:72:01:65:
bf:52:f3:6d:47:79:78:d7:ec:1a:c6:98:fa:07:cd:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:65:D5:4F:91:CB:72:C3:66:13:18:4A:CD:18:39:48:C3:B2:46:67
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b29be87-ecb5-48f0-b4db-92f95a716c01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
05:93:6b:02:ed:57:b8:be:d9:f2:6c:19:26:6d:57:53:3b:83:
1f:2f:71:56:96:b7:49:7d:75:11:b3:d4:b1:55:91:32:6e:3d:
57:a8:27:c6:31:87:41:b7:5c:58:5a:42:cc:fc:1b:86:97:b8:
ec:5a:1a:24:bc:d6:f3:40:5a:63:c4:e4:5c:36:44:41:07:60:
27:99:c7:b0:28:d3:6c:97:aa:c3:ee:3a:a9:af:a4:2c:07:31:
11:57:d5:ce:47:15:02:a5:e2:18:8e:1b:fd:ed:0e:6d:b1:ac:
8f:86:6c:fb:be:51:25:8e:b0:c0:06:fa:40:7d:85:08:05:3e:
95:98:5e:14:24:c3:96:3e:47:4e:82:fb:93:38:3c:e8:b4:7d:
a0:0c:cf:ef:c4:86:ee:f2:a3:c3:e2:71:9f:33:f7:72:d5:1b:
fe:c8:50:dc:fe:e7:74:e8:3e:38:83:94:d2:77:80:7f:63:ce:
42:96:4a:b1:59:84:4b:7e:0f:fa:a1:6a:65:3c:c9:ee:8b:72:
f0:8b:6a:7e:eb:1e:c4:0d:47:52:3e:e0:40:89:1c:d9:dc:71:
f0:ad:02:03:44:81:a5:b6:79:a4:ed:4a:75:be:54:fb:81:da:
d1:76:88:30:f0:ab:b6:d3:d2:82:4e:0b:1c:e9:4f:24:b9:d1:
f0:04:6e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:37:43 2025 by rpki-client