Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8faa296d-9353-4e67-aa55-bc83a7ef06a8.roa
File: 8faa296d-9353-4e67-aa55-bc83a7ef06a8.roa (raw, json)
Hash identifier: iLiJOshsaq1pypxKW4GoShFaN9blXxsJOVT3V5pZLxg=
Subject key identifier: 0B:BC:9C:50:A9:A8:3D:64:BC:38:70:6E:A8:4E:03:86:CB:8B:94:29
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7AA17EFF93FDBE2D7484E6E4B3D45331ACC42BC7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8faa296d-9353-4e67-aa55-bc83a7ef06a8.roa
Signing time: Sat 16 Dec 2023 00:00:00 +0000
ROA not before: Sat 16 Dec 2023 00:00:00 +0000
ROA not after: Sat 20 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a1:7e:ff:93:fd:be:2d:74:84:e6:e4:b3:d4:53:31:ac:c4:2b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 16 00:00:00 2023 GMT
Not After : Jan 20 23:59:59 2024 GMT
Subject: serialNumber=77aadc7e35c17da054a3bcd0bf63e34c2d636056107bfa75849314b1f4921f9c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:b0:4c:c2:c4:33:f9:34:e9:61:3c:89:41:
5f:f0:46:1d:c3:be:9e:ab:ac:e4:bd:73:5d:86:b1:
8c:af:cb:26:17:e6:de:aa:e9:99:2e:6d:00:85:9a:
48:ac:4f:73:b3:7e:28:27:89:43:1f:5a:a9:9f:9e:
5d:bf:87:4f:2d:68:32:91:f0:19:d2:22:f2:d1:8a:
f5:71:c3:1d:76:01:62:5b:ab:6e:66:0b:33:48:c3:
a6:7e:7c:d5:02:26:2c:f9:a0:40:b5:42:f2:94:aa:
dd:5d:81:13:58:90:c5:c7:4d:d8:70:eb:26:7e:14:
2e:24:b9:14:45:4b:0a:1f:c9:50:bb:94:33:a5:da:
e1:e9:10:89:fb:20:67:1d:68:c0:90:10:1e:68:c1:
f4:1f:89:8b:dc:87:9c:82:41:32:f0:52:6b:46:82:
7e:6a:62:a9:09:57:a0:14:33:ef:11:fa:f3:32:7f:
9a:ff:f4:d9:3e:ed:86:ba:51:8b:b8:db:70:37:34:
4d:a9:ae:fd:12:1e:c6:8e:04:ec:89:b1:18:2a:d8:
d9:7e:41:b2:d0:b4:22:d5:e6:23:c3:36:d0:56:74:
38:d5:70:44:92:9d:c7:da:47:e6:b0:d5:30:54:70:
6a:92:91:18:61:75:99:43:1f:93:b0:77:9d:c0:7f:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BC:9C:50:A9:A8:3D:64:BC:38:70:6E:A8:4E:03:86:CB:8B:94:29
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8faa296d-9353-4e67-aa55-bc83a7ef06a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:7d:17:8c:c5:fd:7a:27:a9:d5:37:28:2e:45:a0:73:ac:98:
e1:04:7a:bc:80:ce:85:95:68:31:d8:3c:48:a6:3e:5f:94:f7:
dc:1b:cc:e8:79:7e:53:91:a8:cc:78:c2:61:18:af:56:d4:52:
86:ed:0c:67:39:be:05:dc:f6:c4:5b:be:9c:92:14:57:ee:33:
fe:8e:2c:96:35:b2:b4:aa:35:c8:78:a4:e9:08:d9:92:e1:d5:
06:06:3a:d8:00:ff:d6:c2:76:bf:7d:e4:8d:61:7a:11:59:a9:
bc:5c:05:5d:db:95:91:73:42:81:6a:a1:5e:64:96:e6:dc:58:
78:9f:9f:15:6b:03:0d:cf:6b:49:7c:b7:c7:2f:e5:67:25:44:
4b:ff:a9:38:7f:c4:91:b5:00:e1:a7:82:93:09:b2:6e:0f:5a:
2c:1c:49:03:f1:c3:a9:ef:73:f9:7d:d0:8b:73:73:85:99:d1:
8b:0f:39:f6:43:fe:d3:8b:e6:a1:29:f6:8d:5a:29:f5:86:38:
86:d3:40:0d:70:e4:8f:a7:3e:6c:eb:5f:3f:42:7f:c1:0d:b2:
51:e9:4a:9f:a4:2e:8c:70:aa:87:df:c0:2a:d9:41:77:ba:21:
c9:b5:e1:09:ad:12:db:3c:9b:a9:7a:1a:8e:da:cb:b2:04:b0:
99:29:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:38:50 2025 by rpki-client