Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b451e371-7d71-4e0c-b30d-b3b915373c1d.roa
File: b451e371-7d71-4e0c-b30d-b3b915373c1d.roa (raw, json)
Hash identifier: 7eOpa5XTBVZPYoBAFaxP54Jwl6o5TK0iBxClYmbJ8/0=
Subject key identifier: 51:A3:FF:2C:9C:D2:C7:61:E5:E5:C6:A6:68:82:AC:44:6E:6C:2E:E1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 033B6822C9D67E5AC89C60124725C719210B0260
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b451e371-7d71-4e0c-b30d-b3b915373c1d.roa
Signing time: Sat 29 Jul 2023 00:00:00 +0000
ROA not before: Sat 29 Jul 2023 00:00:00 +0000
ROA not after: Sat 02 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:3b:68:22:c9:d6:7e:5a:c8:9c:60:12:47:25:c7:19:21:0b:02:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 29 00:00:00 2023 GMT
Not After : Sep 2 23:59:59 2023 GMT
Subject: serialNumber=936760fe2356a7e0ec08b10f4e5967365effbd2e1d8a51a19e40aa6cbfc2a04e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:e6:66:ac:69:69:1e:b5:b0:c6:e2:53:84:
c0:3a:5d:d7:53:af:7b:aa:7f:e9:82:22:7c:67:5b:
7a:89:37:c0:eb:b2:c1:e3:f8:54:38:03:25:f2:0f:
85:b1:4e:06:32:2e:db:53:7d:60:ba:cb:39:1d:4d:
c8:e1:df:c0:90:00:2e:ac:2d:d0:21:4c:ea:1b:1a:
51:42:4e:a0:aa:35:6b:54:92:12:ec:07:e3:e8:34:
1b:ea:78:9f:ef:51:6f:ac:09:18:8b:25:9a:b3:d2:
ab:2f:1d:79:af:0c:17:54:e1:10:14:ed:7c:b7:62:
58:99:19:cf:fc:ca:b2:80:25:1b:a4:12:03:c9:bd:
9f:7a:dc:2e:39:f8:d8:c5:6d:49:f6:36:2f:5a:b0:
e8:8d:ed:e2:10:f0:86:f8:06:a3:bc:b1:99:1a:c3:
76:7c:ba:ad:47:cb:28:bd:45:62:92:05:e0:4d:39:
32:62:f0:cc:a6:e2:a2:67:2d:8f:34:fa:50:42:d2:
9f:4b:72:f8:9a:a8:8c:1d:9a:65:ef:44:a2:30:f2:
15:f9:98:ed:de:a3:66:23:c6:14:72:b5:44:7a:1d:
55:cc:a4:2c:01:20:3a:73:a7:e3:0f:a6:2a:e8:67:
f8:41:44:12:1b:fe:de:19:5a:30:af:18:1a:16:65:
0e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A3:FF:2C:9C:D2:C7:61:E5:E5:C6:A6:68:82:AC:44:6E:6C:2E:E1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b451e371-7d71-4e0c-b30d-b3b915373c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:89:f0:df:20:f9:08:ca:5a:37:10:d0:68:04:f8:ec:0e:f7:
54:e1:0f:e2:32:36:44:00:e7:e5:01:a5:95:03:64:f8:4c:03:
8b:19:8d:4f:4d:bf:e8:e9:a4:8b:fb:41:75:16:89:6b:ff:be:
37:17:a2:3c:04:2c:26:3b:f6:34:02:3e:13:e2:a3:55:e7:23:
e2:7b:da:ae:74:83:dc:ce:19:fd:90:84:d6:f3:51:78:0d:6a:
15:b8:15:e6:7d:67:83:2a:93:4b:8f:18:08:96:ef:5b:39:64:
a4:dc:f3:d3:43:ec:d0:8a:e3:4a:7e:a1:8b:29:53:76:03:80:
dd:da:96:c4:a5:1d:33:91:f1:40:3b:11:0e:ae:8b:74:7d:51:
ad:58:6d:ff:54:fe:aa:2d:64:a3:dc:a7:ef:06:ce:85:98:0a:
53:d2:41:cf:20:b1:7c:56:08:57:4a:61:05:76:30:3e:53:34:
5b:d0:e0:eb:51:7e:c8:2d:d1:35:f9:b5:fc:5b:f7:a7:6b:a2:
29:d3:7d:f9:e7:0a:ba:30:a7:d9:e1:9e:a2:34:58:dd:38:d5:
df:e0:1d:bf:8f:1c:e3:22:5a:6d:e8:dd:cc:27:37:2a:e8:6c:
25:17:99:cb:14:30:32:ee:99:ae:0a:5e:2a:02:5c:1d:eb:57:
12:71:e7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:11:28 2025 by rpki-client