Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bde81b82-c1c0-47e2-80d6-57667b2131e3.roa
File: bde81b82-c1c0-47e2-80d6-57667b2131e3.roa (raw, json)
Hash identifier: N5uCimp4GTsHTa7DmgRG4StkYz1ivFwwQZOX5LeXNvk=
Subject key identifier: 46:D3:45:66:10:7A:58:54:04:68:AE:CD:FB:5D:54:DF:38:09:48:DC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5DDD03C76D137199B868CDD1ADD708AC6185701B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bde81b82-c1c0-47e2-80d6-57667b2131e3.roa
Signing time: Mon 07 Aug 2023 00:00:00 +0000
ROA not before: Mon 07 Aug 2023 00:00:00 +0000
ROA not after: Mon 11 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:dd:03:c7:6d:13:71:99:b8:68:cd:d1:ad:d7:08:ac:61:85:70:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 7 00:00:00 2023 GMT
Not After : Sep 11 23:59:59 2023 GMT
Subject: serialNumber=2331f776b87c1672cda7e5d19ba072889bc65f88f8515514bc220585097050e8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:45:4b:57:c0:f9:78:89:ad:3d:8d:4e:a0:a1:
2d:f4:af:b2:e1:9c:37:f9:41:59:d4:38:d2:96:c5:
7c:c0:57:dc:e8:26:57:e1:74:ac:50:12:f8:4d:0a:
15:54:b0:3e:99:d1:81:18:ce:3a:94:2e:14:ed:4b:
ed:a4:93:d5:8e:a6:ce:ef:3b:a6:86:70:c6:bb:2b:
8a:34:a0:14:6d:48:fb:05:f3:03:54:a4:d8:57:4b:
5f:97:01:e5:3c:06:88:76:c3:94:96:ac:d4:12:89:
b3:25:13:a7:21:23:ff:44:5a:47:b1:d8:8d:f0:45:
48:30:9d:63:09:6e:8f:f9:8c:ce:4f:66:38:fd:72:
96:fe:cf:f8:65:5f:04:62:47:ba:b0:4c:06:eb:4b:
e7:0d:fd:bc:aa:5d:1f:2a:28:57:55:46:50:7e:96:
c6:49:ac:4d:5b:ed:cb:70:f7:31:f7:4d:cc:6b:99:
fe:6b:c2:a1:95:76:8d:17:fa:d0:94:8e:a3:67:be:
e0:72:4d:9c:b0:f1:be:fb:85:c9:97:3a:cb:d1:37:
de:1c:46:27:c7:ed:a7:b7:5e:e5:1a:79:fe:7b:87:
13:50:a4:70:3b:59:32:8b:34:38:a0:38:bb:08:0b:
57:61:70:9c:ed:df:93:52:7b:f9:66:73:2a:7c:96:
ee:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D3:45:66:10:7A:58:54:04:68:AE:CD:FB:5D:54:DF:38:09:48:DC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bde81b82-c1c0-47e2-80d6-57667b2131e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
35:52:33:e5:b8:47:d2:5b:f0:6a:97:18:99:28:c6:e5:95:2c:
cf:09:6d:8c:87:1b:62:6b:f9:cc:a5:23:dd:1d:76:92:f2:1a:
c1:12:53:6d:d2:a3:66:99:57:4f:47:70:50:03:8e:01:64:71:
8a:9c:cd:4c:2a:73:8f:c9:89:a8:28:f7:35:8b:b2:7e:e0:15:
1a:09:51:7f:8d:d3:7a:25:af:0e:a0:92:84:73:33:79:7c:c0:
c2:ac:67:1d:81:00:34:02:4d:d7:39:3d:fa:dd:05:a1:0d:a1:
fb:e8:0c:0c:27:fd:72:76:45:ca:c1:36:e3:a3:c2:13:ff:8c:
43:b0:a4:6c:db:9e:fa:a5:6b:6c:36:76:03:10:55:a0:fc:4f:
c6:72:51:ad:36:d0:21:df:d7:8d:80:2f:cd:f2:e2:0b:ad:c8:
2f:79:0f:99:8f:f1:e8:be:1b:67:60:15:55:7f:6a:ad:6f:f5:
13:2f:2d:84:c6:4a:1a:ff:9d:62:8f:94:4d:1c:49:fd:9c:8d:
43:73:39:fe:b9:bd:3e:40:e9:4f:62:3e:06:95:98:e3:e3:6b:
ea:19:53:a1:84:6b:83:51:a3:1b:40:bc:6f:2e:54:92:41:49:
0a:8f:45:e0:07:5b:a1:10:32:22:1b:67:76:aa:6e:d5:2e:46:
53:7d:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:00:09 2025 by rpki-client