Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b44a4ae3-9253-4f74-9dc4-c63a5ac33246.roa
File: b44a4ae3-9253-4f74-9dc4-c63a5ac33246.roa (raw, json)
Hash identifier: ABOl104Qvg2+Ey3nizbnu6i27mvEP+GoLqkRA3Ayalo=
Subject key identifier: 55:AB:CE:85:44:C0:85:FB:0C:B9:BC:2A:54:F7:65:5A:5A:32:12:EF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 28F68BA82EC7964409EF81BB132C1C5653E32FFD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b44a4ae3-9253-4f74-9dc4-c63a5ac33246.roa
Signing time: Fri 01 Dec 2023 00:00:00 +0000
ROA not before: Fri 01 Dec 2023 00:00:00 +0000
ROA not after: Fri 05 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f6:8b:a8:2e:c7:96:44:09:ef:81:bb:13:2c:1c:56:53:e3:2f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 1 00:00:00 2023 GMT
Not After : Jan 5 23:59:59 2024 GMT
Subject: serialNumber=287bfd00ee5191dea319d25383b6ed5427dc82a4858cc1fd121678abbe2d26ed, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cd:ea:5f:7e:18:8f:4d:38:ea:97:6a:cb:23:
ae:0c:c0:16:fe:83:73:7f:6e:e4:76:e7:72:0f:c6:
54:86:6d:b6:5d:3d:bc:37:05:c8:59:b8:0b:9b:68:
ca:ac:44:e3:3a:23:f3:a5:d6:92:8b:4a:4f:17:e7:
25:e2:7c:31:d6:d9:64:d8:fe:3f:ab:fd:31:57:a7:
8c:b4:bd:7f:82:be:77:88:9a:0d:56:4e:48:56:2d:
20:fb:61:c4:a1:be:06:21:db:c5:e0:46:26:34:11:
03:6c:c9:af:ab:9f:d2:14:9d:c9:60:0d:cc:db:3e:
8b:4a:9a:d0:cf:16:7b:43:04:25:92:75:48:d9:0c:
ab:bc:5e:86:cf:b5:80:10:38:7e:fe:36:2d:4d:18:
62:8c:04:2d:84:32:7c:67:e1:05:f6:93:f6:a8:dc:
e5:53:9f:3e:ef:bd:e4:06:79:1e:78:25:3a:9f:1f:
ed:f0:fd:00:23:3e:b5:8a:fe:48:80:58:b2:b1:c8:
75:20:8a:51:93:de:17:d1:f7:8a:ce:d4:b7:b8:b6:
29:49:62:85:59:6d:c1:23:d8:36:a0:6e:39:e0:62:
b0:7f:43:ff:50:3f:61:ee:f9:d7:8f:4f:51:1b:e0:
da:a1:a2:d3:90:df:45:17:b9:c9:3e:46:74:3e:72:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AB:CE:85:44:C0:85:FB:0C:B9:BC:2A:54:F7:65:5A:5A:32:12:EF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b44a4ae3-9253-4f74-9dc4-c63a5ac33246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f3:95:73:ab:c8:ca:07:35:39:d6:5a:b0:70:5b:c3:e7:e8:
c9:ff:e2:4d:11:40:cf:f4:a8:a9:d8:ce:9c:f0:e6:6f:8e:98:
bb:89:34:7a:1b:74:b1:3e:72:ea:2e:e8:14:0a:40:16:2a:88:
54:b8:55:d6:86:41:28:e1:1c:52:6d:8b:91:f2:a5:63:d5:61:
e9:b0:74:89:54:09:09:48:87:42:9d:17:df:19:e5:c6:fe:a3:
4f:69:bd:21:e6:f0:a5:9b:e5:10:4e:c1:d6:8e:75:98:cb:2a:
31:aa:ad:af:25:dc:d6:62:0d:c1:2a:ba:99:99:18:79:f7:b0:
c9:bb:6b:8c:9c:2d:8a:3a:d0:3c:36:a5:aa:93:2a:88:37:fb:
f9:b8:09:58:0e:18:2d:7d:09:d5:0c:c6:7e:f6:5f:c7:98:7e:
e3:a1:7f:2b:61:8b:54:dc:68:a1:59:66:ae:90:6f:70:c7:d4:
62:cf:09:05:f6:47:fa:fa:66:29:43:ee:56:2c:bd:1c:0d:c1:
8e:8a:29:af:9b:bf:f2:93:e6:f5:72:32:36:56:dc:0a:f8:8a:
4e:23:f7:cc:c8:a4:ed:7f:76:68:55:b3:50:a8:51:63:6a:9d:
bc:10:99:36:5c:9d:c0:11:39:2c:55:47:44:68:60:74:d8:d4:
34:4e:00:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:37:17 2025 by rpki-client