Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/afec4a32-5789-4ae8-ae07-fc5d9c2719b0.roa
File: afec4a32-5789-4ae8-ae07-fc5d9c2719b0.roa (raw, json)
Hash identifier: YlyN+aEwmFjGqw45RspR5rYuUBw2EUQaMCHm7PA1iTE=
Subject key identifier: 9F:2A:C1:7B:74:6C:46:F4:11:3E:A5:C1:8D:20:06:4D:59:38:8D:96
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5D0E116165525F806B68B872CB5C6ADED467E47F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/afec4a32-5789-4ae8-ae07-fc5d9c2719b0.roa
Signing time: Sun 08 Oct 2023 00:00:00 +0000
ROA not before: Sun 08 Oct 2023 00:00:00 +0000
ROA not after: Sun 12 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:0e:11:61:65:52:5f:80:6b:68:b8:72:cb:5c:6a:de:d4:67:e4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 8 00:00:00 2023 GMT
Not After : Nov 12 23:59:59 2023 GMT
Subject: serialNumber=af0061167ffabe5c350d81e89339e4ec91b55eac7cdcd99788af225bce46775a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:93:13:a3:cb:4d:b4:7f:02:84:50:38:f9:
4c:e6:9c:b1:1c:55:4d:f4:d9:cc:cb:a5:f9:81:fe:
fd:d6:52:12:cd:02:95:29:80:7f:92:e8:7f:0c:48:
8e:60:54:69:a7:42:26:39:8a:52:2a:9c:de:85:57:
ed:71:c6:f3:2a:c7:6e:35:5a:a9:3f:47:51:69:da:
ac:cb:7b:43:68:cf:25:44:f3:ef:63:3a:47:68:b2:
03:90:be:ad:bc:7e:54:5d:bc:dd:5f:44:f4:d6:89:
c2:5e:ab:6d:1b:31:79:17:14:98:be:78:3e:fa:94:
55:61:77:d2:43:53:c5:7b:59:9f:7b:43:5e:72:41:
7b:95:32:31:38:67:3d:ba:dc:93:9f:0d:ff:3e:c9:
23:c0:41:a8:db:49:9c:29:18:16:5b:7f:b4:43:76:
0d:ff:34:33:30:0f:ba:f3:68:77:2f:79:95:78:59:
e2:d3:c4:83:39:70:12:d2:2d:d5:e9:ee:b8:fa:d4:
40:13:41:8e:fb:4b:c5:eb:5c:38:c6:16:a4:58:b0:
cb:c3:00:76:7e:eb:90:5e:80:f9:34:6d:fa:60:c1:
52:cc:99:40:03:6f:a5:bd:bc:b1:27:28:4a:d9:3c:
02:d2:a1:4f:66:a2:06:19:24:f7:fe:fd:c0:11:d1:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2A:C1:7B:74:6C:46:F4:11:3E:A5:C1:8D:20:06:4D:59:38:8D:96
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/afec4a32-5789-4ae8-ae07-fc5d9c2719b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b9:79:9d:c2:ee:20:55:b9:7c:04:3e:95:ba:33:55:c4:d5:
ff:da:eb:54:1b:3a:55:51:a0:ad:51:91:72:f8:4b:0d:de:07:
e2:cd:2b:95:49:eb:28:34:2d:13:ca:c0:b9:f0:5b:c5:8a:fc:
0e:9d:48:db:8a:d4:d8:fc:40:b5:4c:bf:b0:a3:1b:bf:3f:1a:
ea:b6:d3:98:c5:1b:e3:1d:ef:28:59:c8:f1:88:05:7b:d3:18:
06:71:dd:e0:de:03:64:33:4f:92:9f:12:e8:cf:61:1d:0e:f7:
bd:ff:00:7f:0c:9e:1f:a9:9c:c4:09:a0:9f:df:54:f3:49:c3:
fe:d2:45:45:49:a3:1b:5f:fe:f7:1f:7f:37:91:b4:d0:a5:4f:
5a:27:a2:9a:ab:91:f1:e3:ae:25:69:fe:d6:b5:e3:e8:10:4d:
20:56:57:e4:b7:f6:4b:42:41:ff:1d:f7:a1:bd:f1:2c:f6:70:
54:b6:21:cf:b6:6e:c9:0b:fb:91:7b:54:7c:16:bd:3d:dd:eb:
6d:db:61:94:a5:6f:16:25:c8:06:6e:25:6d:a1:0d:59:2e:a5:
86:07:a3:66:5e:e8:21:86:f3:f7:92:4e:a3:a8:ab:9f:85:a5:
7c:e8:3d:a8:39:cb:76:36:06:65:9c:ec:da:bd:3c:27:04:e2:
a6:21:65:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:00:10 2025 by rpki-client