Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bb2cfcf0-a946-4b0b-8093-9b38a7624ef3.roa
File: bb2cfcf0-a946-4b0b-8093-9b38a7624ef3.roa (raw, json)
Hash identifier: 8I66wF7CSWMs+zUJOtn+MRupYMPXRQaZ2Us+nzT1Buw=
Subject key identifier: A7:2A:6B:19:BC:76:CC:1B:61:21:C0:27:00:EF:F7:40:33:8F:81:9E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 571357078EDA081B4556D63A24021C9D75D951B1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bb2cfcf0-a946-4b0b-8093-9b38a7624ef3.roa
Signing time: Thu 16 Nov 2023 00:00:00 +0000
ROA not before: Thu 16 Nov 2023 00:00:00 +0000
ROA not after: Thu 21 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:13:57:07:8e:da:08:1b:45:56:d6:3a:24:02:1c:9d:75:d9:51:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 16 00:00:00 2023 GMT
Not After : Dec 21 23:59:59 2023 GMT
Subject: serialNumber=3615e5c95aeb588fa39158bc8cc68fae68cc13e1cee4a5c8c559c1535c99d808, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a4:16:cd:58:16:0f:18:8c:28:48:1f:d8:29:
86:91:f6:7a:13:bc:5a:04:69:e5:fb:da:42:fc:24:
9c:27:a1:6b:9e:c0:31:72:b4:11:9f:1a:49:49:2f:
61:53:aa:47:c6:14:8d:8b:6c:eb:bd:c2:02:4b:37:
16:d3:fb:4a:5a:10:c3:16:bf:7b:61:85:ca:9f:90:
c3:6d:14:48:5c:ce:96:2d:8f:58:9d:91:27:62:d1:
23:3a:2c:e5:b9:15:da:45:7c:56:f1:46:e8:a0:98:
ef:11:30:19:e0:ea:61:bf:a2:1b:e7:e0:a1:05:a0:
9c:10:e7:45:dd:7b:e1:24:9a:6c:f7:5b:26:50:6d:
10:36:bb:2b:30:6d:a2:82:4a:66:68:0c:ee:f5:d9:
d5:86:c4:77:18:86:5c:54:9d:9b:df:01:e0:42:54:
47:93:a6:11:62:96:89:dc:28:f8:88:73:77:4c:09:
01:df:9b:66:c9:6f:b0:40:13:80:91:c4:4f:a7:a3:
42:bf:cb:a2:f9:df:17:dc:ae:8e:c3:8d:b7:73:5f:
3a:82:02:e2:59:b7:15:7c:5a:2b:08:29:74:09:0e:
06:cd:8e:16:39:93:ce:be:83:87:3a:d1:8f:85:dc:
ee:0f:ee:70:63:f3:66:02:3b:50:63:a2:51:68:b2:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2A:6B:19:BC:76:CC:1B:61:21:C0:27:00:EF:F7:40:33:8F:81:9E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bb2cfcf0-a946-4b0b-8093-9b38a7624ef3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a1:28:73:e9:38:0f:ab:93:da:75:37:0a:69:4b:ea:de:9f:
da:8b:80:ad:95:98:55:b1:29:ca:ef:78:1a:59:bb:b0:8f:80:
c1:e0:58:e9:51:69:70:21:dd:2d:d5:be:2c:23:48:36:6a:f3:
7b:2a:1e:f7:73:fa:48:af:6c:e3:1b:a7:76:30:08:8b:bc:eb:
64:32:a9:82:6b:e7:af:56:e4:fc:d7:22:30:be:5e:c7:82:05:
a1:5a:3a:20:a4:63:1b:26:f1:18:cd:20:2b:67:5f:cf:36:c9:
88:98:f1:b6:68:61:b8:49:7f:0c:fe:41:0b:7a:5d:42:f7:f0:
88:4f:9f:d9:b5:d1:68:d2:b6:c7:27:48:a3:d0:e8:a6:c0:df:
b1:c6:a9:44:89:c4:b5:64:83:f9:dd:d8:9f:94:60:21:de:91:
73:28:11:28:05:25:8a:ca:c1:06:0a:d5:14:58:b4:6b:44:55:
57:61:d6:f3:58:1e:af:98:9c:3d:b9:5d:6e:22:b3:b1:e3:4e:
09:86:eb:49:d3:72:69:14:57:9f:ee:d8:86:79:c6:84:09:65:
e8:92:db:34:a8:a5:b1:17:b2:fd:9e:6c:6d:4c:40:8a:35:49:
55:9b:09:c6:39:39:ff:cf:24:de:5b:8e:dd:15:93:40:c7:9e:
9e:4f:cb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:03:06 2025 by rpki-client