Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/95fdee9b-ea7c-4b96-bcba-50a7b3cbb998.roa
File: 95fdee9b-ea7c-4b96-bcba-50a7b3cbb998.roa (raw, json)
Hash identifier: Vu78FviSDIA1uSwEmw70SbyUrtcswAWFTXGicFxzkS0=
Subject key identifier: 1C:C2:2B:1A:FC:C2:C9:ED:9E:6A:90:C9:77:10:07:C0:9D:69:DC:D2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4143A8267F01A6EEE90FFC1E242F4B1E8DEEEABA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/95fdee9b-ea7c-4b96-bcba-50a7b3cbb998.roa
Signing time: Sun 30 Jul 2023 00:00:00 +0000
ROA not before: Sun 30 Jul 2023 00:00:00 +0000
ROA not after: Sun 03 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:43:a8:26:7f:01:a6:ee:e9:0f:fc:1e:24:2f:4b:1e:8d:ee:ea:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 30 00:00:00 2023 GMT
Not After : Sep 3 23:59:59 2023 GMT
Subject: serialNumber=0240c75ea20d78d7a19dff992bb5dac20f344bf1ea7aef9e2e29627dd7254537, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5d:50:e3:b6:5e:0d:00:82:17:15:d5:f5:e4:
57:f2:4c:25:f1:2b:dc:3e:a5:54:92:68:cb:68:a4:
f5:50:5a:2f:06:6b:df:d8:5a:4f:91:38:ef:fb:77:
4c:aa:69:97:e4:b1:c7:e6:aa:17:9b:a8:b7:89:31:
0d:d5:97:92:80:77:59:fb:95:a0:14:76:62:ee:ac:
ef:a0:37:f2:2e:85:75:f9:bb:56:5f:e7:b7:2d:42:
94:17:c5:c5:0a:9e:9a:dd:bf:90:cb:07:42:90:9c:
f0:3a:7e:1c:e1:27:b8:88:4a:f2:82:ff:a7:77:0c:
25:1d:40:39:47:59:81:d9:61:5a:cb:52:79:f5:de:
54:87:1f:74:21:08:d6:92:0e:af:d1:71:9f:58:7e:
79:b5:0c:64:60:f2:ae:5d:fa:0f:7e:bd:b3:38:e9:
17:d8:0a:8d:da:a0:6f:bd:90:d6:ad:08:2e:dc:10:
2d:e5:a3:29:8f:bf:74:23:e2:4c:99:8d:84:28:22:
ab:52:4f:dc:b9:6e:7f:49:3d:49:9f:49:f7:fb:11:
d1:09:85:84:9a:ee:ba:85:cd:6c:4d:12:68:53:6c:
41:f7:49:c0:23:a0:85:e9:00:19:d2:8a:a1:29:f7:
ee:cb:15:55:78:b5:9f:13:a4:57:a5:c9:12:05:1c:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C2:2B:1A:FC:C2:C9:ED:9E:6A:90:C9:77:10:07:C0:9D:69:DC:D2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/95fdee9b-ea7c-4b96-bcba-50a7b3cbb998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5b:82:27:2e:f0:6a:71:06:aa:d1:35:ef:41:8f:d8:05:34:
82:3e:af:2c:54:7c:34:f3:d0:22:95:3d:3a:62:a7:6f:ed:cb:
94:ca:28:78:b0:39:f8:eb:af:ca:29:64:f1:6c:91:98:cf:bc:
9a:6f:02:c3:c0:27:bf:c3:97:39:1d:a9:f7:bc:82:8d:6a:5f:
76:30:58:fd:ff:96:a9:69:03:2d:4f:1d:10:63:1c:83:70:73:
ff:cc:6b:45:e3:6c:e0:36:50:af:c1:11:28:02:f7:97:e2:a2:
ec:08:d1:5e:21:5a:2f:be:25:4e:4a:9a:5a:07:92:8f:da:c6:
c2:77:be:14:48:2d:a1:79:0b:9b:c4:f6:ef:e2:36:f2:50:a7:
e1:88:fd:39:fb:df:12:5d:29:aa:74:9f:7b:c7:04:51:7a:5a:
b2:e4:de:ba:e0:00:b2:3c:c3:d2:2a:62:93:2b:b0:67:61:ca:
5a:5e:18:f6:0b:c4:82:67:8b:3d:ea:6d:41:58:51:55:a3:da:
ab:c8:08:fe:46:ec:08:c3:a3:33:b8:6d:b8:ef:1f:de:0d:65:
f3:11:ca:66:61:4b:17:7e:68:34:3d:0a:4b:e6:69:b9:63:42:
39:2d:b0:79:b3:b4:c3:f7:0b:5f:d4:fe:46:7b:de:ca:43:ca:
d1:c9:ed:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:40:16 2025 by rpki-client