Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e133f9a-45b1-46c8-b92f-9c5e06806809.roa
File: 9e133f9a-45b1-46c8-b92f-9c5e06806809.roa (raw, json)
Hash identifier: EKgL5+ALgMF19zHUylEGFcLyzIWNQH4lEqVUhsr++Lc=
Subject key identifier: FF:32:FF:64:85:51:58:10:4A:2D:EB:FF:DD:34:9F:64:84:E0:5A:32
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 776E91BF7DC2478EB642CF5048D86235B1E3CE10
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e133f9a-45b1-46c8-b92f-9c5e06806809.roa
Signing time: Fri 14 Jul 2023 00:00:00 +0000
ROA not before: Fri 14 Jul 2023 00:00:00 +0000
ROA not after: Fri 18 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:6e:91:bf:7d:c2:47:8e:b6:42:cf:50:48:d8:62:35:b1:e3:ce:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 14 00:00:00 2023 GMT
Not After : Aug 18 23:59:59 2023 GMT
Subject: serialNumber=02b5e143ab03fca5f492ce993658cd0fb2b3060376742b5f3d9221570811e898, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:cf:01:3a:16:37:69:21:ef:84:05:cc:4b:
ae:1c:95:df:03:47:3b:cb:1c:bb:59:4f:db:fb:14:
d6:79:c7:cd:56:b8:f0:d7:23:4d:e1:19:5d:85:86:
46:e8:e3:f4:a5:68:fa:2e:fc:82:fb:fe:bb:c0:64:
69:b3:39:a7:11:90:b2:ef:83:5a:80:0f:93:cd:09:
bb:f9:b4:02:85:c4:97:f3:74:8b:a4:52:53:74:54:
e0:1f:27:41:10:29:07:c3:80:07:d2:b9:b5:57:65:
d7:e9:96:57:e9:ce:36:3a:9d:ff:39:82:04:e6:8d:
22:b1:7a:c5:20:dd:d3:b4:40:e1:8d:68:b0:f7:ad:
40:30:d3:ef:9a:1b:d5:0c:1d:a7:68:fd:e4:ad:ce:
6c:e8:bb:80:49:c6:88:58:a2:bb:f8:bf:34:17:e3:
5c:18:8b:05:75:a9:6c:07:bb:ff:fb:ef:c8:d4:b8:
98:b3:69:f9:51:5f:9d:60:7e:c7:b6:01:ca:fd:b2:
7e:be:0e:4e:f3:be:9d:b3:62:c3:42:7a:9b:86:37:
33:f5:cb:1f:9d:87:7b:af:4a:7a:db:83:67:e5:74:
45:6c:fb:f4:6d:5b:56:13:ad:14:78:81:74:4b:de:
aa:4c:86:54:68:37:3f:26:b2:8d:f3:63:41:0e:68:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:32:FF:64:85:51:58:10:4A:2D:EB:FF:DD:34:9F:64:84:E0:5A:32
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e133f9a-45b1-46c8-b92f-9c5e06806809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:90:40:19:37:a3:10:01:62:05:c7:25:7a:66:8f:2c:3e:dd:
fb:e1:29:d6:a8:6c:99:7c:fa:88:8b:02:84:c7:41:77:02:07:
ff:ed:17:be:57:90:7e:7f:e2:19:89:73:5a:d5:74:48:e8:08:
e6:3c:da:d3:19:99:dc:ef:e2:fd:be:29:f7:e5:b5:7c:6e:6d:
df:3c:a5:a4:10:f3:05:14:25:72:75:aa:39:44:1e:b4:ba:46:
63:92:0a:51:ea:77:8b:64:8a:c0:90:81:ae:57:33:1b:5e:7d:
8a:1a:28:7a:ec:9b:4b:c0:58:60:2d:c0:1f:bb:0c:72:1d:40:
f2:7a:8d:9d:ca:94:eb:7f:d8:3d:6e:3e:06:17:a6:0f:dc:1a:
a7:0e:b3:e2:d1:6c:4f:0d:b8:7d:f1:21:bb:c6:6d:29:8e:e3:
1f:74:c6:d5:40:66:02:41:03:0b:55:bc:cb:b5:ca:9b:69:28:
c4:f3:57:89:75:3a:cd:67:d6:7e:1c:bf:54:a4:74:4a:3a:c6:
22:ed:07:59:52:82:79:28:8d:09:e2:91:ec:a2:a7:1f:20:c2:
02:99:22:c9:fa:fc:05:27:82:af:a5:eb:0d:ac:4c:d5:f1:b4:
6c:c2:68:fe:82:a7:bc:93:83:df:ae:8b:39:8e:51:90:17:f2:
bb:9c:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:04:27 2025 by rpki-client