Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a9d5f57b-512d-4166-897b-aeb27ff576ef.roa
File: a9d5f57b-512d-4166-897b-aeb27ff576ef.roa (raw, json)
Hash identifier: K2/uK3V/72fA1mRih00cKPunLt9COypdktgPRQC35Ck=
Subject key identifier: 16:CF:C7:96:53:B0:C3:5C:E7:23:61:10:E2:EC:0D:31:E5:67:07:0D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6736EC42B1BD3A9EF58ACAE52256DBCD7F463E72
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a9d5f57b-512d-4166-897b-aeb27ff576ef.roa
Signing time: Sat 09 Dec 2023 00:00:00 +0000
ROA not before: Sat 09 Dec 2023 00:00:00 +0000
ROA not after: Sat 13 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:36:ec:42:b1:bd:3a:9e:f5:8a:ca:e5:22:56:db:cd:7f:46:3e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 9 00:00:00 2023 GMT
Not After : Jan 13 23:59:59 2024 GMT
Subject: serialNumber=5bbb484dca822501abf567bbc990efad32bdcb54b09bd207a4ca5f8c6ad78dad, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:db:16:77:27:e7:17:76:53:4c:37:ea:10:
62:6a:98:6c:c7:66:29:4a:a8:ec:d9:51:ea:d0:ee:
eb:4e:95:e9:59:98:da:79:c1:88:a9:21:13:86:c7:
46:2f:2e:50:74:de:9d:86:f8:c6:b8:ec:0c:8a:38:
49:82:26:56:d5:02:14:55:f8:c9:c7:14:ea:9c:c5:
5f:4e:d9:bc:b9:69:da:65:e7:80:5c:50:16:47:61:
04:dc:eb:21:fe:1d:6d:b5:4c:bb:03:8b:9d:fb:44:
75:6c:9e:bc:dd:9b:7d:92:69:27:93:31:73:08:15:
b9:af:7b:74:c3:2e:43:af:24:c6:3b:38:67:39:a1:
24:1f:0b:47:3f:81:b3:6c:a3:eb:4c:f7:6f:f3:5e:
7d:02:59:9c:aa:cc:ab:55:ce:bf:6c:2a:90:b9:9f:
47:ac:66:dc:9e:73:23:e5:25:04:f7:75:e3:7a:42:
92:cb:56:0a:ca:34:fc:b3:40:af:d6:fc:d4:25:d7:
bf:48:21:b4:b5:dc:b8:05:96:91:b9:df:be:24:8f:
f4:2f:c1:48:84:3f:83:3c:4b:d8:9c:0a:f2:d9:ce:
d4:19:25:6f:86:a0:32:0d:30:30:04:26:51:77:8d:
bc:2a:cf:f0:82:30:dc:48:1c:5b:f2:3b:3f:bb:25:
66:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CF:C7:96:53:B0:C3:5C:E7:23:61:10:E2:EC:0D:31:E5:67:07:0D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a9d5f57b-512d-4166-897b-aeb27ff576ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e4:85:b2:a9:77:64:2a:6e:9e:a1:d4:30:35:0e:52:01:47:
33:96:e5:a9:55:be:fc:d1:cb:d9:d0:1c:99:2c:0e:28:90:cc:
c2:fd:1a:b5:e9:3b:76:b7:eb:c8:8a:ba:4e:8f:bc:17:87:c5:
0b:5a:a3:a0:0c:f2:f9:b7:dc:d2:5e:42:d2:0c:e5:0a:0b:7b:
7b:a4:47:fe:02:ae:76:ef:81:ad:5d:ca:de:ed:84:50:a5:0b:
f7:20:af:55:b5:70:51:3c:54:9d:be:0f:d8:8f:88:68:32:3a:
49:52:b5:de:84:e5:6f:4b:af:17:bb:ab:83:3c:f1:d9:65:c4:
6f:2b:d9:08:c4:ab:8e:02:70:40:c3:de:15:e9:c4:7f:1b:6d:
eb:17:df:36:5d:7f:3c:d5:c0:a5:86:0f:8a:41:16:57:15:fe:
50:77:0d:c8:ef:a2:52:77:6d:8b:30:5e:46:c3:84:e7:63:d1:
f7:34:84:40:2f:82:de:57:b9:75:5b:26:e7:93:ab:c7:a1:fc:
e1:31:00:ce:cc:31:5f:e4:c6:5a:64:5c:82:fa:dc:f7:64:b8:
47:da:80:65:19:06:75:c1:03:1c:7f:ec:bf:97:25:b6:2b:c4:
3b:87:cd:12:15:a6:d8:4f:08:a3:81:07:d3:c7:7b:8c:cf:ac:
2b:27:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:13:37 2025 by rpki-client