Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b4cdc7e9-918a-445d-95f9-525247badbe6.roa
File: b4cdc7e9-918a-445d-95f9-525247badbe6.roa (raw, json)
Hash identifier: Nx9Zn0DKs4G8gcUkt6LIoQt6ODRGfCXGUWxBi1rmfRQ=
Subject key identifier: 0D:3C:89:EF:11:D1:DE:0E:58:78:3D:6F:C9:E3:FD:C7:FE:8E:07:6D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5D88B393FAA3673429802970A5398853C412C662
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b4cdc7e9-918a-445d-95f9-525247badbe6.roa
Signing time: Fri 24 Nov 2023 00:00:00 +0000
ROA not before: Fri 24 Nov 2023 00:00:00 +0000
ROA not after: Fri 29 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:88:b3:93:fa:a3:67:34:29:80:29:70:a5:39:88:53:c4:12:c6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 24 00:00:00 2023 GMT
Not After : Dec 29 23:59:59 2023 GMT
Subject: serialNumber=6e909e80a776a8d181b6134dd980737c47c258aad0f612f3a7740a241ee0abee, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:93:c3:30:2f:c9:d5:ab:82:e3:1a:41:08:ca:
8a:1f:4a:a5:68:28:9d:a4:d4:38:23:33:4a:f7:25:
79:9b:42:2a:05:c1:f7:3c:4d:53:f4:9c:6c:3f:2b:
b2:7e:96:51:b8:b0:b7:0b:9a:64:33:7c:e8:70:e9:
bc:9d:22:55:b4:38:e6:e8:f6:b6:93:65:e0:b9:c3:
70:75:9e:5a:7d:d8:e5:80:21:bf:f0:46:ce:0b:3d:
38:ca:9e:b1:bf:b1:bc:1e:c6:94:bc:aa:63:bb:a0:
ac:96:90:90:42:23:68:a5:7c:48:2e:4d:42:b4:43:
ae:37:05:e6:66:f8:53:14:a9:ac:d5:b0:82:b3:aa:
ff:4b:3f:e9:a2:2f:5f:e7:98:a5:d5:2c:d1:ab:2d:
68:57:8d:26:40:37:48:c7:cd:9e:a0:0a:c0:af:6d:
8f:95:a5:cd:35:45:29:d0:3e:25:95:88:f1:d4:3c:
0e:e5:fb:ca:63:a1:24:7e:be:ea:f4:ae:d3:33:cb:
3c:08:f1:63:ec:a4:c2:cb:e5:96:1a:0a:84:6c:2d:
fb:14:6b:6d:49:de:90:92:4a:38:51:ab:85:ea:46:
57:df:b5:9d:d7:60:b9:ff:7f:5d:c6:df:ff:b0:1b:
91:4a:62:14:25:24:f9:63:b7:59:bd:66:59:41:02:
4f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3C:89:EF:11:D1:DE:0E:58:78:3D:6F:C9:E3:FD:C7:FE:8E:07:6D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b4cdc7e9-918a-445d-95f9-525247badbe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
78:38:1c:81:78:f6:d2:b8:c2:80:27:f4:6d:bf:32:fe:8b:15:
bf:8c:c0:b3:38:a1:87:86:11:b5:44:b5:68:c8:ab:25:bf:7b:
3b:05:d1:a7:77:41:5e:4a:41:0d:c9:44:85:84:7d:80:80:28:
74:3c:4b:47:db:c2:8d:f3:54:25:9b:2a:03:cb:bb:d9:b2:f1:
2d:aa:7b:64:ca:fc:3c:21:5a:a7:d6:b1:f3:1d:47:ad:91:4e:
1b:1e:c3:7e:2e:d5:a1:7a:34:03:36:ab:4f:d4:ce:bf:b2:2b:
ca:74:49:46:71:05:7b:c1:a6:87:27:ea:cf:40:7c:07:aa:01:
73:10:4b:11:0c:4f:e1:ea:fa:a0:c3:80:95:10:98:ec:5a:e0:
01:9f:c1:95:e9:b0:16:0f:2b:ff:1c:f4:2d:bf:a9:5a:8d:94:
79:18:f1:5c:a4:cd:c5:71:08:32:7a:23:f0:84:2f:4e:71:76:
db:12:d6:9c:4e:a1:6e:36:56:ce:0a:bc:01:04:93:cc:65:53:
dc:b3:59:8c:80:a2:f3:16:9e:08:65:ea:a6:db:85:2d:81:41:
0a:9c:64:6d:78:42:a0:0a:b5:67:f6:32:b5:1d:33:ca:ee:3b:
2d:ec:1f:f6:70:bd:bf:d9:31:56:02:56:95:1e:82:d2:e8:71:
05:88:bb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:22:58 2025 by rpki-client