Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aaeb09ec-ecc3-4519-a50e-5728825282e1.roa
File: aaeb09ec-ecc3-4519-a50e-5728825282e1.roa (raw, json)
Hash identifier: rm/5J8ZhNBY/QKguWetsy1oLqmIKHEBxVOWEs9jaaSE=
Subject key identifier: 96:32:BC:A6:71:CD:14:A0:97:FB:E9:85:99:A0:70:13:30:9A:ED:36
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 71E101127E4F3E60C6615E44BA08742246A4D116
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aaeb09ec-ecc3-4519-a50e-5728825282e1.roa
Signing time: Wed 21 Jun 2023 00:00:00 +0000
ROA not before: Wed 21 Jun 2023 00:00:00 +0000
ROA not after: Wed 26 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e1:01:12:7e:4f:3e:60:c6:61:5e:44:ba:08:74:22:46:a4:d1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 21 00:00:00 2023 GMT
Not After : Jul 26 23:59:59 2023 GMT
Subject: serialNumber=5b5087cc134e27e557b80b8f5d49c71d2005491c8ae5e35be01f4caf75b2962a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:3b:53:38:26:1c:6b:88:2b:03:73:f5:dc:
ab:49:58:f8:3b:73:8d:97:32:ee:6f:4f:ed:54:9b:
86:e2:d6:9f:52:a4:dc:7c:0d:47:ca:c5:fb:11:0a:
08:9c:1e:3f:b8:bf:32:12:1d:6d:71:67:fc:75:a9:
a4:f8:46:08:dd:ba:ae:25:23:b6:4f:f7:ba:86:bd:
cf:7d:4c:b9:4b:32:c1:a3:41:ac:9a:d3:c8:01:52:
c2:2e:b7:7f:1e:3a:30:f5:2b:4a:7f:0f:28:f4:80:
81:75:f2:15:df:23:fa:45:b2:8c:28:11:27:fa:d7:
34:4f:b1:92:e2:b2:71:bc:a5:0c:e5:3d:d9:1b:d3:
61:f6:3b:13:d5:7d:f1:f0:4c:cf:a1:03:70:19:69:
09:29:ac:af:f4:b0:db:7b:1c:3c:d8:fc:1b:ff:23:
a4:a2:36:08:46:c3:2a:ff:de:cc:f5:94:32:2f:ec:
20:71:5f:c8:2a:a0:68:3b:87:00:86:15:40:e7:55:
ec:e7:b1:5a:48:23:4c:7d:bc:f6:1d:8a:90:45:42:
7a:e8:29:d8:e1:ad:b3:f4:21:05:e7:75:fb:b0:8f:
75:5e:06:2f:22:91:f2:48:88:67:d2:56:b6:f9:86:
a3:ca:cf:1d:72:52:f8:a9:f9:69:25:7a:ac:7e:55:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:32:BC:A6:71:CD:14:A0:97:FB:E9:85:99:A0:70:13:30:9A:ED:36
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aaeb09ec-ecc3-4519-a50e-5728825282e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ba:ad:3e:74:46:a7:fa:f7:ee:a6:ed:36:ac:6b:54:d2:40:
1a:7f:9e:22:a3:03:e3:db:2d:a2:0c:8b:62:ef:a4:fd:9c:b7:
1b:cb:32:e0:1c:a2:90:79:5a:b3:21:18:6e:a5:33:5e:d4:c6:
91:1b:64:a5:a2:dd:4b:df:96:4d:3f:b1:50:99:6b:b8:7f:ec:
62:3b:5f:ab:0e:da:c1:84:76:4d:a2:b1:fd:e5:8c:c8:af:54:
9a:85:51:90:34:04:1e:6a:6e:9a:dd:0d:48:58:54:1f:f7:06:
98:c6:f2:56:01:79:a2:39:9d:9d:66:d4:91:d8:90:e4:89:bf:
ef:a4:d5:f5:10:3f:50:45:83:d8:00:3b:4a:42:7d:4c:15:1c:
ef:df:70:30:2d:c1:4c:4b:cb:cf:09:92:ce:5f:fd:2f:62:78:
5d:2e:98:d0:4a:7f:0c:23:ee:f3:45:58:54:08:19:86:01:0b:
79:e9:8d:ce:dd:6f:3b:b2:45:56:94:34:5b:c0:6f:b8:b8:8c:
24:e9:ef:5b:bb:f8:d3:ad:cc:6c:c3:fb:63:00:41:6e:9a:fd:
fe:db:9a:1c:35:2f:f8:fd:eb:cc:65:2f:a6:47:f3:81:4e:31:
61:dd:8e:44:9c:87:c6:d4:39:30:1f:b3:51:d0:e8:f6:14:5a:
ae:75:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:21:26 2025 by rpki-client