Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a46e532c-c118-4f60-8046-fb0894836fe7.roa
File: a46e532c-c118-4f60-8046-fb0894836fe7.roa (raw, json)
Hash identifier: 4Vd3v5qRQn7qU+I5TFQHu+8ukT95iqAnMHF4tTZHl6w=
Subject key identifier: 2A:F0:55:1B:08:77:8D:62:7E:12:49:8E:50:B7:C4:FF:2F:15:0D:75
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7FB93A1EBB9066252A2710E8C21434B9B5675748
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a46e532c-c118-4f60-8046-fb0894836fe7.roa
Signing time: Sat 29 Jul 2023 00:00:00 +0000
ROA not before: Sat 29 Jul 2023 00:00:00 +0000
ROA not after: Sat 02 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b9:3a:1e:bb:90:66:25:2a:27:10:e8:c2:14:34:b9:b5:67:57:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 29 00:00:00 2023 GMT
Not After : Sep 2 23:59:59 2023 GMT
Subject: serialNumber=488b1630b199c4d9f2f267fb9f42d809bb607205f99f273420a1c5432e2fbb15, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:64:27:0f:5c:21:2e:e9:11:7b:e1:c8:89:e9:
f2:98:d0:e0:b0:7a:54:61:dd:a8:6d:31:6c:19:c9:
7c:39:a7:57:ca:27:2f:44:bf:50:4f:93:e8:b9:0b:
ea:19:86:fa:53:ce:f9:7a:cf:b3:d0:d2:ce:d4:c7:
cd:8b:63:7e:ee:c6:64:17:cb:56:ed:36:b5:0d:f2:
ba:9f:64:89:42:9e:3c:f0:0a:93:02:79:96:6d:00:
05:aa:de:25:93:6a:bd:eb:c8:56:06:a1:b3:77:6f:
ef:a6:0c:ca:6e:ab:b6:9a:38:70:15:66:73:6a:72:
5b:59:b0:5b:03:8d:50:7e:89:c0:96:e1:71:57:aa:
1d:b7:dd:3d:c2:30:c1:c5:89:f9:b1:83:a2:56:58:
dc:f4:64:9d:f3:86:81:ad:62:52:5a:d6:3f:04:47:
0f:da:ec:c1:c4:80:13:5c:1d:45:43:0f:06:16:48:
01:f3:06:f9:fc:12:b0:45:88:8b:0f:cb:9b:ca:a2:
2a:d0:2b:0b:dd:1b:19:51:ed:54:fe:09:b2:db:6c:
79:56:ed:41:5d:3b:17:40:7a:3c:b6:74:32:6e:94:
42:1d:77:3d:19:b9:51:88:9e:4b:76:0d:e7:fa:99:
f8:ac:fb:9f:6b:5c:a6:05:b7:9d:4b:b2:f5:de:95:
13:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F0:55:1B:08:77:8D:62:7E:12:49:8E:50:B7:C4:FF:2F:15:0D:75
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a46e532c-c118-4f60-8046-fb0894836fe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e0:92:f7:0c:58:65:2a:55:57:4a:7b:76:02:4e:87:36:b3:
22:55:b6:06:dd:59:3a:5e:20:e7:a1:e6:dd:c4:fd:01:ef:a7:
81:bd:7f:34:97:34:a4:8c:04:bf:07:97:91:e4:e9:51:a3:cc:
38:7e:d5:7f:75:89:5c:34:78:d0:4e:eb:38:4c:2b:b9:9e:03:
d4:cc:ee:3b:d0:a3:89:c5:76:8b:96:c6:79:da:2e:2b:9e:12:
0f:21:bb:72:77:f9:78:b7:8f:b0:7c:c1:88:98:ab:0f:17:b8:
1a:4b:60:24:c6:61:36:56:eb:99:9e:3a:da:a8:15:be:72:05:
16:42:78:03:49:6f:db:8b:4d:4e:2c:8d:cd:6b:50:6c:98:76:
a9:02:25:d3:c1:af:e4:a1:9b:14:ae:bf:67:6e:89:17:ec:8f:
1e:82:4b:22:18:be:57:af:ef:ab:c4:a0:61:86:d2:90:7e:f8:
08:97:62:8b:dd:82:0a:17:71:56:f2:1d:cf:6e:0c:cb:d8:52:
c4:56:4f:80:d0:ed:e0:99:af:80:55:8c:3a:25:9e:5a:c6:b4:
eb:17:b4:f9:af:aa:d4:73:63:fb:b4:16:75:e2:a1:ad:3f:2e:
b9:d3:4a:5a:38:80:29:ca:9b:f7:3b:b0:ae:29:53:32:37:b5:
fb:44:1f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:11:29 2025 by rpki-client