Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a293be57-a8b9-4aa4-8d9e-03a81a75f2f9.roa
File: a293be57-a8b9-4aa4-8d9e-03a81a75f2f9.roa (raw, json)
Hash identifier: 10BL/lc5aSIcBR04QnERtkZnjutImGLI82rTDWv6jqM=
Subject key identifier: 3E:C5:4C:A3:5E:37:33:94:2D:C8:90:86:8D:92:5F:38:5A:46:F6:D5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 55829C76970C2B93A0DDBB86A908A696F88DFD80
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a293be57-a8b9-4aa4-8d9e-03a81a75f2f9.roa
Signing time: Mon 13 Nov 2023 00:00:00 +0000
ROA not before: Mon 13 Nov 2023 00:00:00 +0000
ROA not after: Mon 18 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:82:9c:76:97:0c:2b:93:a0:dd:bb:86:a9:08:a6:96:f8:8d:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 13 00:00:00 2023 GMT
Not After : Dec 18 23:59:59 2023 GMT
Subject: serialNumber=f62c51223b6a09339e82c7f013e23494db8de0f500a66c97caf411c474bda3ed, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:d9:0f:9c:77:41:34:4b:de:c7:03:99:e4:
96:28:ce:7d:28:c6:98:a9:82:bb:e8:02:65:c1:21:
26:a0:d5:b1:85:35:7e:03:8c:7e:9d:10:15:12:b5:
83:56:8c:8f:6d:c7:66:19:69:d1:ca:b6:04:b8:43:
07:a1:77:14:23:09:d9:70:69:47:1c:dd:d8:11:b0:
69:b4:c8:e8:f2:f8:ce:33:95:8e:bb:c7:1c:c0:15:
40:5b:07:10:de:9f:03:88:b7:52:68:74:b6:09:cf:
e4:51:1a:5c:de:91:55:52:1a:7a:b8:f1:4e:04:be:
0f:b2:66:5c:35:c4:fa:51:60:55:56:1c:5a:97:8f:
46:79:03:65:4b:5e:92:6c:c1:2c:77:4f:2e:cd:36:
9b:53:96:0c:49:65:13:aa:18:17:da:e0:09:e4:3f:
a0:7f:f1:f3:82:7d:04:f5:57:02:c0:ed:75:16:30:
4c:e2:55:cd:86:b1:2b:b1:0b:e5:77:18:80:22:45:
bc:6c:2c:00:3e:35:36:fd:8f:ba:45:78:62:bc:5a:
65:36:41:79:b8:92:ba:ee:18:f9:02:48:be:0b:19:
9c:27:cd:0e:6a:2d:be:35:37:80:a6:a6:1d:5b:92:
c8:f5:f3:b3:63:58:e2:6b:59:ec:8a:6f:1b:c5:c0:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C5:4C:A3:5E:37:33:94:2D:C8:90:86:8D:92:5F:38:5A:46:F6:D5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a293be57-a8b9-4aa4-8d9e-03a81a75f2f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ff:f8:d9:a3:2d:08:f8:2c:c9:8d:8e:63:f0:53:b2:50:1e:
44:49:04:e1:c8:8d:d3:f6:54:08:51:e3:f2:4a:e0:b4:43:72:
2a:be:46:2c:79:ed:7a:53:6c:f4:73:85:99:0c:a6:bc:69:83:
25:bb:3a:f3:27:2d:86:f3:78:90:91:1f:87:05:1f:3d:0e:11:
01:e3:b3:81:e6:f6:e4:d8:b7:87:ce:cf:b7:84:fd:be:06:42:
96:bd:64:26:a9:b3:bd:4f:b5:7f:01:96:76:de:70:57:fd:15:
c3:00:08:74:24:0f:85:ef:85:6b:97:f0:66:2e:77:3e:e0:d4:
5c:b5:d0:ae:aa:95:37:21:56:86:87:ec:ad:e3:1a:1f:42:d1:
65:b1:59:3b:fb:b3:01:09:bb:89:64:92:b4:5f:da:2d:02:fa:
bd:a6:01:76:d0:43:8d:65:1a:57:8d:03:f2:15:4e:d5:23:a5:
24:e9:fd:7d:8e:f7:c6:a8:15:ba:db:40:88:55:af:54:55:d6:
4c:fe:10:8c:e5:0a:7f:50:74:93:e4:b4:7c:83:0b:1d:c6:d0:
ff:1d:8e:56:98:08:03:f5:18:60:64:26:b7:b4:ec:04:74:08:
92:db:53:e0:ba:f6:87:ee:1a:0f:12:c8:94:df:cd:2e:f9:84:
8f:43:8d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:39:20 2025 by rpki-client