Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a8298023-07ca-419e-a3fb-8a5e9792ff85.roa
File: a8298023-07ca-419e-a3fb-8a5e9792ff85.roa (raw, json)
Hash identifier: /J7//mh+MPY9FT2EaoMcGCzG3Qs2++NQUDbiv+f3/JY=
Subject key identifier: D0:78:8D:28:B6:C2:8F:76:EA:74:97:18:04:78:75:77:53:98:AE:13
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 119386A08F771447342F5993AEED38806E0DA134
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a8298023-07ca-419e-a3fb-8a5e9792ff85.roa
Signing time: Wed 15 Nov 2023 00:00:00 +0000
ROA not before: Wed 15 Nov 2023 00:00:00 +0000
ROA not after: Wed 20 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:93:86:a0:8f:77:14:47:34:2f:59:93:ae:ed:38:80:6e:0d:a1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 15 00:00:00 2023 GMT
Not After : Dec 20 23:59:59 2023 GMT
Subject: serialNumber=f90a0f2fb7877199e4ba0e73461e20e8099eb6c2aeadd46b895a784bfc138fc5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:4d:58:37:c4:b9:4c:3b:44:72:af:f8:f4:
fe:25:8a:6f:9b:d7:f2:44:fa:48:96:11:7f:1a:44:
0a:1a:d3:f4:53:10:28:bc:60:ea:74:62:e2:16:73:
22:fe:b9:2e:7c:d5:5a:ac:5f:49:fc:fa:9f:5e:17:
54:39:24:64:35:d6:34:90:fc:c4:ca:56:36:d3:c9:
38:a2:a7:12:a4:a7:13:1e:71:16:54:2a:ca:87:e9:
77:49:9c:70:f7:98:8a:5a:38:17:da:a2:0f:2f:70:
e5:be:cd:02:38:94:bd:07:ca:6b:d5:26:b9:eb:94:
90:bb:a2:4f:9d:e8:fb:17:25:84:e9:c5:ff:6a:e2:
62:ea:84:bd:fa:74:11:77:eb:f7:f1:3b:99:ad:d0:
10:de:fa:20:1c:b9:d4:b2:8a:00:42:37:55:b8:2a:
68:9f:d6:fb:5b:c2:e7:66:7e:ad:4a:2a:a7:8a:56:
f7:d6:32:9e:1d:d7:77:c1:13:ca:4b:0a:f6:1d:bf:
cd:ad:dd:d1:6e:d5:a3:0c:99:f9:74:f0:45:d7:be:
64:dd:f2:a9:87:79:f9:b6:bf:c0:5f:3a:da:dc:0e:
cc:de:80:42:5a:6e:98:7b:aa:57:ab:4f:c1:4a:54:
a5:12:7e:14:95:d3:d8:7d:b3:ee:98:01:af:a7:53:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:78:8D:28:B6:C2:8F:76:EA:74:97:18:04:78:75:77:53:98:AE:13
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a8298023-07ca-419e-a3fb-8a5e9792ff85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
11:3d:99:fd:97:e8:56:47:b3:51:59:32:f6:27:f7:3f:37:68:
34:9a:42:ae:ff:df:9b:76:76:b2:4d:0a:32:dd:c6:3b:71:2b:
8f:f4:4d:d0:08:95:4d:22:51:fe:12:a0:30:46:50:14:c8:b7:
1c:74:68:31:f3:0d:ad:f6:6c:a1:22:9e:00:f2:47:52:85:14:
68:d6:81:21:f1:bb:63:53:9e:09:18:57:00:d6:7b:7f:6c:b6:
b3:98:58:0f:ee:75:c4:67:03:6e:e3:09:38:c0:88:7b:32:2d:
fa:02:58:4c:5d:93:de:18:d6:4e:df:7f:a4:52:06:2c:6f:ba:
5a:09:7f:2b:39:6e:3e:95:c0:c2:ab:b7:39:ac:87:10:cc:e0:
8f:79:62:16:4e:19:b1:bb:eb:b1:89:60:9d:89:ad:6d:41:d4:
1d:5d:11:3c:7b:ea:e5:ae:80:4f:65:86:0f:5e:03:40:0c:0e:
e7:97:56:0e:85:da:f3:f0:42:2e:63:05:e2:b1:e3:6d:6a:5c:
32:2a:a5:3f:85:44:d0:a3:14:30:af:2d:6d:2d:5f:6d:7d:50:
e2:7d:17:24:82:f2:17:b8:57:75:94:d3:d7:a3:00:18:88:08:
61:27:bb:0c:16:58:f2:50:13:11:b7:03:96:ff:4b:cb:21:e3:
e8:3c:99:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:47 2025 by rpki-client