Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/afa66594-0d7a-4955-8f63-347835a491ed.roa
File: afa66594-0d7a-4955-8f63-347835a491ed.roa (raw, json)
Hash identifier: 0iBcu9sij0i/J3iACIhvBiIT6PTunsphFoxGXO0pQkY=
Subject key identifier: E2:28:2D:9D:37:A5:35:70:42:0E:09:74:54:15:A7:E4:DA:9C:56:43
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5EAB4AE85E72A496684E77BEB0940876765016EA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/afa66594-0d7a-4955-8f63-347835a491ed.roa
Signing time: Fri 28 Jul 2023 00:00:00 +0000
ROA not before: Fri 28 Jul 2023 00:00:00 +0000
ROA not after: Fri 01 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ab:4a:e8:5e:72:a4:96:68:4e:77:be:b0:94:08:76:76:50:16:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 28 00:00:00 2023 GMT
Not After : Sep 1 23:59:59 2023 GMT
Subject: serialNumber=028b576989c9198b3f062bda1c86a28c0af648cfdae4c2774ad18ddcf6725b4f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:1b:27:2c:d6:17:f3:2c:79:c5:30:c0:2f:
2c:ad:7a:44:6b:c0:25:86:45:b8:b4:91:03:a6:4d:
c6:3b:27:bb:82:95:5d:77:b4:93:a4:41:21:8f:1b:
02:9c:00:15:e2:d3:48:5f:c4:14:1f:31:cd:54:90:
d3:7f:02:4e:ca:0a:bf:f9:2b:3b:f8:d8:af:b3:a5:
38:bd:43:6a:ab:96:84:4d:fa:d6:e7:b2:fc:fa:e1:
92:ba:60:30:ea:80:0d:16:f1:6a:7c:e6:98:32:39:
d9:f5:f7:fa:ea:89:94:49:4c:1a:5d:f8:09:9f:43:
6d:7e:08:4f:c1:5e:05:ba:5f:eb:91:9a:e6:b6:9e:
85:bc:62:4b:1a:8d:46:66:66:ce:03:34:b9:73:b2:
e7:86:52:6b:74:a1:1a:f9:62:16:a1:6a:cc:a3:16:
f9:be:df:18:5a:6f:c4:0d:0d:67:38:8f:18:a4:eb:
4e:b4:fe:1d:d0:98:30:60:4d:a1:b2:c2:48:08:e8:
20:a4:4d:89:df:c7:c4:db:db:f7:4a:03:87:e4:56:
5f:35:c6:61:c1:b7:fd:22:84:83:76:79:ff:b3:a5:
39:08:1a:b4:88:87:f9:e2:6e:08:41:a8:ad:b3:8d:
d5:71:c1:fb:15:da:e6:4b:58:81:75:20:78:08:de:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:28:2D:9D:37:A5:35:70:42:0E:09:74:54:15:A7:E4:DA:9C:56:43
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/afa66594-0d7a-4955-8f63-347835a491ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
92:36:b1:4e:a1:59:1a:50:57:73:ce:07:c1:ea:19:27:6a:d1:
b4:c0:f1:93:84:38:95:35:c1:16:a9:16:84:c8:5f:5f:28:84:
25:5a:54:ff:c2:3e:27:d4:07:69:d7:9b:a8:7d:b1:cb:51:df:
b4:7b:f4:00:04:3b:3c:1d:a1:94:d9:aa:0c:03:f4:cb:ec:e7:
7d:c1:22:56:43:f8:28:24:0a:b8:e1:9b:e6:08:4b:c5:95:5f:
48:f7:8d:4b:62:3e:f2:95:86:64:e1:03:b1:f8:47:ab:7c:88:
e9:cb:bd:4e:c3:a7:7d:9b:42:51:91:36:8a:52:71:11:89:e9:
0b:81:04:7e:16:b2:f0:8b:bf:36:59:41:91:ed:e7:33:46:f3:
c4:86:56:09:d2:03:cd:a3:cd:2c:a1:0f:b9:3a:11:bf:92:a5:
8d:43:2b:55:5a:31:f7:b9:a8:c7:8c:f3:8b:0a:f7:ff:1d:4c:
3c:1c:90:6a:15:a1:e1:ae:23:46:9f:81:c1:e3:36:8e:96:a7:
51:fa:35:9e:a2:83:9e:8a:84:d1:b6:01:7f:86:c5:3a:01:d7:
4e:25:3c:05:9b:9d:99:fd:ca:8c:0c:53:5c:74:d5:47:c2:32:
05:7a:57:09:c6:68:a3:bb:6e:82:71:41:f9:8d:9e:27:f8:96:
68:f9:d4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:15 2025 by rpki-client