Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ad555beb-ce45-427e-a5e8-0e94d874e77d.roa
File: ad555beb-ce45-427e-a5e8-0e94d874e77d.roa (raw, json)
Hash identifier: pnO0zgP8BIerYDUgJDjbnSJmEhIrhJ64aQcZ0qTar2s=
Subject key identifier: 10:E6:1C:5B:FD:47:1F:43:B4:F9:94:84:B7:ED:E5:01:44:EE:59:AD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 150A82B175C38791929CBE4C00C6443F69B7FAF4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ad555beb-ce45-427e-a5e8-0e94d874e77d.roa
Signing time: Wed 22 Nov 2023 00:00:00 +0000
ROA not before: Wed 22 Nov 2023 00:00:00 +0000
ROA not after: Wed 27 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0a:82:b1:75:c3:87:91:92:9c:be:4c:00:c6:44:3f:69:b7:fa:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 22 00:00:00 2023 GMT
Not After : Dec 27 23:59:59 2023 GMT
Subject: serialNumber=817ec0292e9b55c6a22a2ae4f3fcd7623dc0197bf2c8c7df4884fbb626fd0ae4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:b6:e1:1b:68:05:0c:3b:74:5f:18:ec:58:
63:cb:a5:f8:f0:9f:1a:21:11:29:ec:cc:11:13:98:
ac:6f:c2:8d:57:3a:71:51:58:a8:05:9f:be:96:bd:
a0:92:72:00:3f:34:f9:f4:54:ab:ab:1a:df:aa:63:
ce:9d:b7:3a:0e:f8:0c:21:4b:9d:37:80:40:ea:f5:
bc:be:c4:b0:a1:52:7a:6e:2f:3d:64:cf:ea:cc:6b:
57:31:f4:39:7d:91:3d:de:f9:92:69:79:78:17:c4:
5c:2f:f0:9a:26:3f:99:94:f3:b1:fc:2d:c6:1e:e8:
5b:4d:28:07:95:f3:79:4f:01:56:6d:64:02:74:2c:
89:9e:3c:6e:9c:38:da:72:9b:8c:b6:29:c7:d2:7c:
1b:15:fc:f0:1e:13:50:cc:6c:cf:07:ab:d7:fe:41:
50:b3:2c:d8:ee:b4:11:30:29:03:ab:17:82:0f:f4:
70:78:34:d8:bc:39:bd:a9:17:38:eb:9c:0d:52:02:
5f:31:bc:80:56:79:2b:f3:1d:1f:3c:2d:58:33:41:
e8:8a:aa:1b:38:09:0e:3b:69:3a:f8:10:d7:55:e4:
35:e2:d7:65:d4:42:6b:71:57:55:5c:08:55:14:8a:
0e:d9:50:06:c2:a1:dc:b3:93:3c:67:9b:5a:35:ae:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E6:1C:5B:FD:47:1F:43:B4:F9:94:84:B7:ED:E5:01:44:EE:59:AD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ad555beb-ce45-427e-a5e8-0e94d874e77d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
29:fb:65:dd:7d:30:61:65:97:30:d0:07:52:b7:35:a2:1a:3e:
be:76:ea:94:d5:58:99:11:33:a9:cf:5d:ab:12:91:2c:54:85:
9b:af:d7:45:cc:39:b8:03:76:2c:c0:9b:25:16:c5:c9:fa:df:
d2:53:9e:f6:a6:2b:e2:a7:19:be:eb:97:27:ff:ca:10:49:36:
19:24:8f:19:09:df:63:7b:7b:93:9e:7b:68:b1:b3:06:61:e0:
4c:f9:17:5f:7c:e1:45:ca:41:1c:27:d8:dc:b0:f8:b4:48:5e:
fa:1d:37:30:69:1c:13:2d:be:05:37:20:85:e6:06:83:e7:c5:
fe:89:69:07:16:c4:fd:8c:f4:91:fa:c7:0a:e4:8d:e6:b6:d5:
a4:e6:25:37:8f:9c:12:6c:1b:12:3b:aa:24:1f:d6:de:8d:1b:
9f:ba:e6:ad:ef:66:0c:87:57:82:fc:4b:cc:43:4f:d4:fe:89:
68:f6:15:d2:cd:57:8e:b2:11:88:dc:33:89:8a:96:c2:82:6b:
27:79:48:ea:9c:d5:e9:f4:c5:7d:60:e3:7e:94:9e:f6:5d:d4:
08:6c:4b:dc:d4:0a:c3:65:8b:da:02:06:e6:ec:22:5a:94:48:
73:c4:52:e8:7a:37:e3:a6:c2:4b:43:fd:d6:92:bb:85:72:b9:
1b:d4:8c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:36:27 2025 by rpki-client