Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/92cbd212-68f5-433a-9836-6993893b58b9.roa
File: 92cbd212-68f5-433a-9836-6993893b58b9.roa (raw, json)
Hash identifier: dhJRoODq0FAqMgbhhJ5O1ggA06oqxD9aBRPy3om21Bw=
Subject key identifier: 06:89:21:27:F9:38:97:CE:EC:36:45:24:D0:CC:2E:E8:75:6F:C9:6E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4FEE16C99820B6FDEBDF44E4C8892E83AF4A1CC6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/92cbd212-68f5-433a-9836-6993893b58b9.roa
Signing time: Sun 12 Nov 2023 00:00:00 +0000
ROA not before: Sun 12 Nov 2023 00:00:00 +0000
ROA not after: Sun 17 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ee:16:c9:98:20:b6:fd:eb:df:44:e4:c8:89:2e:83:af:4a:1c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 12 00:00:00 2023 GMT
Not After : Dec 17 23:59:59 2023 GMT
Subject: serialNumber=e902663b152d045beefad7ee655e08359f01bd55f763c6ae3bb457958b708b4a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:95:5f:8b:7b:18:91:f5:5d:fa:fe:6c:f4:
32:1d:24:ff:b7:79:6e:ac:49:d2:d9:9c:90:a3:14:
dd:cd:03:80:cd:92:d2:7b:bf:55:c3:75:2b:47:85:
d7:59:aa:10:c9:45:74:ed:7c:bf:4a:3c:75:d0:d9:
3a:da:18:fe:5b:3b:0b:e6:5a:d0:36:b4:07:a2:d8:
da:dd:66:54:fd:d2:8e:8f:93:26:bb:54:2e:19:39:
d4:85:6b:23:f7:9b:db:f4:ba:85:08:76:6b:09:e4:
f9:f0:57:b3:b2:47:03:6a:04:43:ee:7d:f8:5e:98:
14:3e:5c:d8:cd:a9:f4:69:05:20:d6:6b:0e:7b:7e:
01:9d:48:b6:2b:26:14:be:14:41:c6:63:8f:d2:f0:
e3:4f:dc:d6:1b:0f:ec:93:5c:6f:46:31:39:2d:e4:
64:74:30:4a:7b:91:17:cb:7c:4e:fd:0c:c9:95:09:
87:4b:ad:0f:e0:65:ef:62:a6:4a:d8:9b:8a:3c:4d:
2f:7a:44:54:6e:c9:32:39:8c:92:24:87:0c:8f:e7:
1f:6e:92:6f:72:e1:c6:cf:3f:e1:09:f1:da:bb:36:
7c:be:1f:c8:1d:72:53:27:cf:61:70:8f:ce:20:01:
bf:b1:f8:9c:fd:7f:76:0e:91:a2:96:c8:52:6a:27:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:89:21:27:F9:38:97:CE:EC:36:45:24:D0:CC:2E:E8:75:6F:C9:6E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/92cbd212-68f5-433a-9836-6993893b58b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:4d:7a:d4:1b:c4:a0:39:a3:d9:03:e9:db:5d:79:9d:2c:33:
32:67:56:17:3e:35:3c:d1:91:25:6f:c1:24:2b:ac:22:97:74:
b5:13:56:03:a3:30:99:e1:3f:9d:74:e7:4c:21:92:fd:28:e7:
82:81:a3:79:3f:bc:ab:bd:00:cf:b4:5c:fd:37:83:6a:c8:4c:
ed:a8:a7:a3:ec:0f:02:f6:d5:5a:1b:03:c5:a9:94:e2:c7:49:
b4:5d:91:6c:27:7b:64:02:b6:d2:71:76:b7:a7:72:7a:1e:53:
ef:54:70:39:e5:8e:c9:c7:74:74:1c:69:73:a5:03:84:5f:79:
40:e9:b4:38:04:c0:20:18:1f:69:8d:31:5d:15:47:a5:4f:16:
42:1a:e7:9c:7c:fa:f6:f3:7d:fd:11:16:f1:8d:38:c0:1e:c3:
ba:0d:27:03:66:22:73:28:cc:f7:6a:f0:8c:c2:99:18:b6:e4:
3c:7a:b0:12:4f:8a:41:51:99:8c:19:d1:cc:3d:54:ed:35:7f:
43:92:3a:c6:e8:e0:00:9d:1f:96:33:71:a2:14:b9:c4:fa:1c:
2e:6a:18:38:77:72:d9:9d:be:1b:f8:42:67:d9:84:04:dd:f2:
95:67:0d:6f:bf:6c:e6:2e:87:9d:b1:70:9d:4f:b9:b7:97:54:
f1:e0:70:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:09:33 2025 by rpki-client