Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ac21f81d-557f-436f-b518-b0d61866cdf1.roa
File: ac21f81d-557f-436f-b518-b0d61866cdf1.roa (raw, json)
Hash identifier: 5cGS1bmMlaXo4ZWVpAlM3cYzbwKC/jFDNCyCUHlNUgY=
Subject key identifier: 97:D7:FE:31:C6:1A:4E:45:A7:79:5E:F0:7C:A8:48:B3:62:BE:AA:36
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4C2926C91CEE3FDEA511EB1035EC1230333799E9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ac21f81d-557f-436f-b518-b0d61866cdf1.roa
Signing time: Wed 23 Aug 2023 00:00:00 +0000
ROA not before: Wed 23 Aug 2023 00:00:00 +0000
ROA not after: Wed 27 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:29:26:c9:1c:ee:3f:de:a5:11:eb:10:35:ec:12:30:33:37:99:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 23 00:00:00 2023 GMT
Not After : Sep 27 23:59:59 2023 GMT
Subject: serialNumber=e137a6948ff263432fa90db5aead009182bde7ada650f047b759e8ce6868d204, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:bf:e4:12:56:fb:3e:5a:20:cc:9d:49:b6:
d1:88:e1:78:18:68:a4:87:45:e0:73:a4:80:b9:e8:
d5:e2:f7:ab:6e:d7:59:25:de:bb:13:78:c3:6d:b3:
e0:4d:12:a1:97:aa:22:0c:e6:86:74:2c:4f:ff:7a:
64:60:a1:57:9f:a7:59:75:01:42:06:ab:2e:86:20:
30:9e:40:36:77:04:10:67:2e:55:0c:eb:d9:f0:73:
7d:a4:31:05:f6:9f:86:8e:1d:72:67:01:05:12:3e:
c9:cf:c9:9f:8d:d3:16:ef:a9:0d:63:1a:dc:90:ff:
2a:f3:2f:53:7c:c2:37:13:7b:e6:68:0e:81:c0:f6:
54:fd:77:d7:47:6d:c7:3b:ba:41:3a:4b:0b:00:c8:
55:01:54:c6:a7:f6:9c:05:6f:2e:5e:43:56:2a:8a:
24:ef:8d:37:c8:fa:5a:4a:28:19:02:d2:15:c8:38:
6a:23:22:be:0b:bd:1f:6e:18:b1:09:26:74:27:12:
35:b2:82:60:ae:99:dd:eb:b3:4f:a8:2d:2d:a8:c3:
93:b1:84:95:6a:ca:3e:c7:71:b2:ba:ae:ae:fd:63:
44:93:bd:ad:c2:a6:19:fd:cb:e9:e8:84:5f:a5:26:
85:7d:17:59:cd:a5:6d:08:4e:9b:52:3a:d5:c1:56:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D7:FE:31:C6:1A:4E:45:A7:79:5E:F0:7C:A8:48:B3:62:BE:AA:36
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ac21f81d-557f-436f-b518-b0d61866cdf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e9:13:cf:cd:5c:d5:d8:14:26:12:82:8e:7b:26:10:d2:de:
21:71:5d:3e:6d:45:a8:99:c7:1f:b6:95:4b:64:4c:af:28:d5:
97:4e:dd:06:0e:d5:ad:f2:30:6a:1b:e6:ab:99:1e:64:23:c7:
90:c6:d4:7a:cb:91:06:f6:7b:98:36:17:87:bf:7b:12:11:7d:
5e:6b:e8:3a:59:86:84:cf:54:55:83:d1:9b:f0:66:9f:4a:f0:
b9:65:7b:ae:f2:10:da:12:c1:58:be:b9:8b:cc:e1:8d:77:87:
11:31:03:60:e7:8b:f0:36:60:17:61:1f:ea:db:69:53:49:02:
b9:fe:6f:31:84:a6:64:45:d9:49:01:40:73:3c:9e:1e:b3:09:
28:cb:4a:de:21:29:c5:31:71:f2:83:73:49:af:f3:e4:a0:f6:
ec:53:72:a6:11:0f:8f:0b:3a:e7:81:ad:23:f8:f9:9f:1f:71:
ba:e8:07:d0:38:3b:a4:04:04:df:75:be:31:52:c3:b9:cd:b3:
7d:2f:53:2f:ee:61:4e:30:15:e0:dd:81:1e:24:d5:26:26:f7:
f6:39:b1:52:b8:e1:d9:36:d2:78:a8:4a:25:0b:e1:7e:3d:7e:
2f:6e:ae:9d:68:f8:49:b3:7a:a9:1e:c8:82:5e:49:85:6a:3d:
e7:2f:fa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:01:09 2025 by rpki-client