Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a35564dd-9ff1-4ca1-bc94-cb96b14e6813.roa
File: a35564dd-9ff1-4ca1-bc94-cb96b14e6813.roa (raw, json)
Hash identifier: 53HCu2tSuWNPZQND0tplgomRGbuyI8h83jMFCFbK9/o=
Subject key identifier: 88:F1:C8:E2:BC:19:B6:3C:BF:55:79:1F:2A:90:A7:6E:A2:95:A2:D4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6D72F1349470FAC33D55A40C25078481CBD75706
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a35564dd-9ff1-4ca1-bc94-cb96b14e6813.roa
Signing time: Mon 02 Oct 2023 00:00:00 +0000
ROA not before: Mon 02 Oct 2023 00:00:00 +0000
ROA not after: Mon 06 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:72:f1:34:94:70:fa:c3:3d:55:a4:0c:25:07:84:81:cb:d7:57:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 2 00:00:00 2023 GMT
Not After : Nov 6 23:59:59 2023 GMT
Subject: serialNumber=df1d4fbdd56f424533683ca99cbdb220c16f438a23667b88f5c6a3ca4699d39b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:9e:e7:be:bf:4f:aa:ce:83:e3:88:19:a6:
4f:a6:64:46:a5:ab:e9:63:47:f7:db:64:84:12:0d:
db:6a:ef:d8:09:95:45:ba:e2:4e:af:f0:6f:78:71:
65:40:b6:e1:49:a2:11:81:61:53:75:2d:9a:e9:fe:
b5:ad:9c:8c:fa:09:71:65:a2:86:9d:81:9b:94:7f:
bf:5d:05:81:b0:64:bb:4e:5a:8c:76:44:f3:5d:f0:
71:20:9a:d9:2f:bb:ce:c1:2a:aa:93:3f:8b:f9:7e:
1e:73:11:75:11:e0:6f:59:46:94:b1:93:5b:db:69:
dc:2e:42:14:d1:f3:85:2f:7d:40:b7:14:d8:78:2d:
82:dd:a7:30:f2:37:56:87:da:e4:20:51:33:67:dc:
c0:32:bd:6b:52:58:76:81:85:ec:d0:23:7f:47:ce:
e7:fa:76:ec:e7:5d:96:14:7f:be:43:5a:4a:b5:b2:
82:e9:54:4d:2f:19:8d:d3:ef:c2:0b:1a:64:45:84:
73:97:d9:da:bf:16:d3:95:1d:8e:ea:de:1e:b6:13:
36:83:2e:80:9d:aa:3f:9d:27:e8:8e:9f:99:07:17:
a7:e9:03:9f:ae:07:e3:a5:52:8b:cd:11:16:c1:c7:
3e:03:33:b4:a9:81:d6:c1:4d:2c:a0:17:da:82:39:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F1:C8:E2:BC:19:B6:3C:BF:55:79:1F:2A:90:A7:6E:A2:95:A2:D4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a35564dd-9ff1-4ca1-bc94-cb96b14e6813.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
56:48:e9:b3:ff:ef:5a:94:0b:36:bc:27:e3:96:15:56:e9:fb:
80:d3:b0:91:36:e1:7d:fb:33:f7:5f:80:51:1a:1d:93:23:b2:
2f:cd:b2:86:60:2c:6a:b5:c5:3c:3f:bb:ee:5c:97:8e:78:7c:
2c:ba:6f:03:e0:73:aa:9a:56:af:7e:e6:bc:4d:8a:06:9e:f3:
3e:af:66:ae:f6:08:5b:03:4f:90:68:c1:87:05:c7:46:6c:38:
8d:7a:60:a5:30:31:24:7b:bc:8f:66:5e:6f:e8:f7:c9:a7:a3:
3f:f4:cc:6e:d8:30:42:b2:7c:92:0c:27:7e:c9:68:92:fb:ed:
1a:88:89:88:28:2d:65:37:ed:a2:63:14:7e:92:44:4a:45:7d:
ed:2b:e4:d4:34:55:6e:3e:23:98:8c:27:e4:91:e2:52:48:e4:
38:41:9f:24:60:53:d9:82:ff:6f:c9:f4:b3:5d:13:3d:04:c4:
59:32:21:fc:5b:3c:45:c7:f9:be:96:76:f2:b4:60:54:71:09:
9f:fb:c8:db:c0:58:2d:1a:cb:bc:6c:9e:a7:55:e4:48:c3:b8:
ab:2c:bf:83:5a:c2:cf:16:4b:02:40:0e:ad:f6:97:85:99:50:
08:71:e6:1a:80:e3:2b:17:15:2b:ad:2d:5a:ab:bd:23:f2:1e:
99:39:2f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:45:51 2025 by rpki-client