Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bae03408-1b61-45c6-b00d-29abe1ad703f.roa
File: bae03408-1b61-45c6-b00d-29abe1ad703f.roa (raw, json)
Hash identifier: blHXax+55TB9ymEZ57PRGvpLFDgQYq9yAL00aUlpfY0=
Subject key identifier: FB:AE:D5:B8:01:23:18:46:20:39:7C:7A:07:09:21:8F:97:6B:8A:50
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 52A65242135C5A1C21A9E948D68A8678B87F5F89
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bae03408-1b61-45c6-b00d-29abe1ad703f.roa
Signing time: Sat 04 Nov 2023 00:00:00 +0000
ROA not before: Sat 04 Nov 2023 00:00:00 +0000
ROA not after: Sat 09 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a6:52:42:13:5c:5a:1c:21:a9:e9:48:d6:8a:86:78:b8:7f:5f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 4 00:00:00 2023 GMT
Not After : Dec 9 23:59:59 2023 GMT
Subject: serialNumber=f510ccab1afd64058307ba8effe2b010f6f3a85dd2af15c72f055dd2027728e0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f5:30:b7:99:29:b0:76:91:16:ee:cb:6e:31:
ba:7f:01:8d:d6:02:90:ef:3c:8c:20:c5:4a:cb:a3:
4a:89:8a:ea:80:52:a3:e2:8e:92:e0:a8:b5:68:84:
72:5c:aa:69:24:05:e0:0f:1a:2f:d8:6f:ff:0f:bb:
94:76:ac:15:ed:38:46:89:d5:af:b5:1c:13:f6:a5:
4b:7a:92:d3:30:a8:5d:b2:e6:ef:e3:ad:7e:ca:2b:
b4:57:3f:a1:66:2d:4d:a2:9c:25:f6:2b:b3:30:3a:
7c:13:2b:1c:2a:ef:12:20:fe:fb:8f:0d:47:3c:7d:
2e:2b:55:19:bc:c6:2e:7e:60:bd:26:d7:bb:aa:ec:
4f:7f:83:00:15:f4:23:ba:e4:3c:f7:ca:ad:c1:df:
c2:cb:29:15:1e:ae:35:61:89:69:dc:0b:9a:85:07:
21:7c:65:76:6d:b4:db:1f:3e:3d:b6:71:33:c6:98:
cd:e0:12:9b:38:2a:cb:3e:71:6c:91:74:2d:6d:76:
a9:57:da:ff:aa:0e:ec:30:29:4e:40:03:9b:89:c3:
25:e5:09:13:fb:37:44:89:47:b1:14:fa:7a:27:b4:
78:40:64:90:d3:48:c0:44:2b:68:6c:b1:74:5f:fb:
5a:8a:1e:43:c9:cd:13:de:50:c3:33:de:57:0a:56:
b2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AE:D5:B8:01:23:18:46:20:39:7C:7A:07:09:21:8F:97:6B:8A:50
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bae03408-1b61-45c6-b00d-29abe1ad703f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ff:33:aa:fe:f2:3c:40:85:64:ae:f4:6a:e8:da:ed:07:7e:
c9:36:7c:33:82:18:ff:62:02:93:22:c6:a7:e3:87:ae:f4:ed:
a0:bc:25:27:16:71:de:bc:c8:c9:ff:77:c8:4b:36:34:3b:58:
54:41:73:cb:43:97:63:fc:5a:49:ff:74:33:cd:d2:9c:95:80:
fa:e1:75:1b:3b:80:c2:ed:9a:88:6b:d7:73:13:e9:dd:90:c0:
5d:b5:ca:d6:ec:99:6f:b3:7d:ff:06:7e:6e:41:0b:cb:e8:9e:
a7:5a:35:84:a7:26:33:46:34:0c:55:7a:20:8b:0c:36:5c:09:
33:37:1d:aa:83:ae:18:02:b5:56:fa:3e:ca:81:a0:2b:9b:fd:
b9:8c:c4:d9:99:62:5d:a7:f4:32:29:ff:74:14:63:05:a6:15:
a6:7c:59:bf:7c:d2:5e:23:b4:af:33:f0:82:8a:80:df:20:4b:
a7:e3:0c:6b:3e:8a:de:75:de:c1:6d:9f:06:61:65:2b:25:e0:
9e:ee:4f:28:0c:4e:30:a1:77:54:86:f2:79:31:49:99:cd:54:
9a:6d:75:8c:c7:dc:12:a2:be:ea:8a:6a:c3:77:f8:ac:b4:7d:
42:98:ce:f0:85:04:85:9c:95:68:b0:90:1d:4d:3e:d6:74:78:
ad:ac:af:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:17:05 2025 by rpki-client