Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab383462-a438-40f2-9022-197df6634dc2.roa
File: ab383462-a438-40f2-9022-197df6634dc2.roa (raw, json)
Hash identifier: muMWRV81m6XDHR0YB8Sa0a4g21yhDgya1KBgaQ8LDe0=
Subject key identifier: 3E:0E:53:0D:35:63:B7:D0:F8:39:59:5E:99:72:DB:B5:82:D3:A9:50
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 19110A08B88B63067511A3C80EBCA378297CA51D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab383462-a438-40f2-9022-197df6634dc2.roa
Signing time: Mon 06 Nov 2023 00:00:00 +0000
ROA not before: Mon 06 Nov 2023 00:00:00 +0000
ROA not after: Mon 11 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:11:0a:08:b8:8b:63:06:75:11:a3:c8:0e:bc:a3:78:29:7c:a5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 6 00:00:00 2023 GMT
Not After : Dec 11 23:59:59 2023 GMT
Subject: serialNumber=9028d5993711f1871315cb35a0f4bcd0496a9df19c4fca17458056bcd5e093ba, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:80:f5:d3:58:75:8d:60:d2:b4:85:71:2e:
ca:a4:c6:ca:fe:ee:ed:2a:16:5a:a6:aa:02:fe:b7:
c5:43:cc:8b:38:d7:8b:ea:44:30:46:ad:8d:1f:70:
62:8a:04:d7:f9:5a:37:5b:8f:82:e3:02:9a:20:2e:
09:78:86:f3:15:6d:b4:d5:cb:56:d6:ab:09:75:61:
69:91:cd:87:fd:44:49:d6:30:a5:6b:33:e7:27:67:
b9:7f:5b:df:9f:a1:89:f7:02:1a:40:ec:17:d5:d4:
2b:1a:97:a0:36:b1:91:18:91:a9:a4:b3:b1:2a:f9:
fd:9b:4c:79:11:5e:cf:e7:bf:f0:81:1f:3f:8e:e3:
96:a7:f0:a5:e6:b9:03:d2:e2:55:5b:4c:a9:9a:66:
64:57:54:c7:0e:6a:04:fb:25:3a:62:7e:56:3e:ef:
8f:64:ce:e9:f2:af:83:2e:f4:bf:33:87:69:fc:d3:
23:d3:38:41:c0:6a:40:c0:23:b8:27:43:49:9c:a8:
4c:59:b9:47:26:61:c2:01:e6:d8:38:a5:2d:e8:7e:
a7:f6:05:34:3e:3c:1f:f4:54:36:bd:42:ef:25:0d:
16:b9:81:6f:70:9a:0d:10:65:41:e6:c6:31:f3:99:
fc:cd:d0:35:8c:5d:dd:7b:df:11:93:d8:50:36:fc:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0E:53:0D:35:63:B7:D0:F8:39:59:5E:99:72:DB:B5:82:D3:A9:50
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab383462-a438-40f2-9022-197df6634dc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:3b:6a:eb:35:2e:15:f8:dc:88:05:fe:f7:92:ad:d9:58:e3:
6f:df:e6:14:b5:32:6c:cd:83:71:78:88:7d:9f:33:b9:4e:2f:
c0:e3:47:eb:9c:ff:16:1c:de:c5:53:45:be:8a:8e:57:40:b2:
e1:8c:35:aa:d5:1e:25:ef:a5:22:a2:a9:ed:fe:91:f1:a7:61:
d7:a6:50:af:b2:da:11:83:63:16:8e:da:85:3c:f5:6d:8e:df:
05:18:d6:04:c1:f6:04:c0:36:fd:f3:0c:ca:9c:52:66:97:1d:
19:24:34:8f:1f:93:d7:b8:52:cc:28:92:34:41:c6:88:29:0b:
0c:33:ae:7e:65:41:bf:c6:2c:a2:e0:91:e7:5a:41:4d:61:e8:
15:28:74:77:b8:6f:7d:3d:59:c8:3f:4f:71:7e:c8:3c:3a:2a:
3e:de:b4:8e:f8:f4:66:0b:97:21:1f:65:26:4a:8d:fc:16:f7:
73:ca:67:79:7d:b5:3c:03:0c:70:ef:c1:8a:27:37:15:94:f4:
47:03:d7:b4:74:20:d9:9a:97:9b:e1:96:da:62:9f:4e:cc:14:
67:08:1d:f3:96:ba:3b:7c:ca:4c:14:c7:c9:c5:6c:b4:8a:b1:
3e:4b:03:c0:da:0f:32:a9:79:df:d1:3c:0f:75:8c:2d:c5:fb:
07:1c:ea:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:27:12 2025 by rpki-client