Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bf3a85ba-cc9b-4412-b222-5800ecbfb099.roa
File: bf3a85ba-cc9b-4412-b222-5800ecbfb099.roa (raw, json)
Hash identifier: MYpVU5wF+XdirL5KV1zNrisH7Mei0ik9UqacK3qjb+k=
Subject key identifier: B3:D9:FE:25:50:40:3E:12:5F:57:FE:8B:06:12:C2:1F:FF:FD:B2:07
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4F63082C7BD8E06DD21D38A6C2A74AEB3F212E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bf3a85ba-cc9b-4412-b222-5800ecbfb099.roa
Signing time: Thu 30 Nov 2023 00:00:00 +0000
ROA not before: Thu 30 Nov 2023 00:00:00 +0000
ROA not after: Thu 04 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:63:08:2c:7b:d8:e0:6d:d2:1d:38:a6:c2:a7:4a:eb:3f:21:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 30 00:00:00 2023 GMT
Not After : Jan 4 23:59:59 2024 GMT
Subject: serialNumber=5584ee0fac3d41d5f60326f3c56fbf6c62a58b72e6639ffa12baaf268ad4f42e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:02:77:df:62:eb:22:b6:38:f6:21:f5:63:
c9:7d:a4:6a:79:25:2a:6d:e1:52:8b:c7:47:a1:59:
d1:7b:dd:cc:66:ed:9a:b3:12:fd:85:2f:14:c4:df:
5a:d0:3c:7c:fe:90:9d:a6:09:ba:db:5a:8e:32:01:
46:d0:a1:cc:5b:70:90:b8:8b:5b:2c:ef:96:f8:2d:
5d:16:14:64:cd:83:38:bf:5b:e1:5b:ae:44:d7:fa:
88:8c:2c:b9:c8:af:4f:1a:12:75:ac:75:11:26:ec:
66:61:2f:da:e4:d5:5a:ca:6a:b2:53:09:c4:e7:ba:
2b:42:ad:aa:41:fc:0b:39:c9:65:18:2e:fa:87:fd:
6a:e1:58:33:2d:71:f8:ce:23:a9:28:2a:18:35:86:
e8:92:f4:3e:44:81:20:25:4e:16:28:1c:30:cd:85:
db:7d:76:67:0e:ba:8b:f5:bc:06:a0:fa:a7:bf:70:
ab:07:96:ea:11:a0:aa:82:22:0f:9c:d9:8c:6e:d8:
98:2a:82:68:e5:92:1f:1e:fc:be:9e:88:dd:5b:35:
d2:12:67:a4:29:b7:df:ae:cb:c4:81:cd:ab:bb:08:
a9:0f:da:cb:33:ab:d9:c2:04:62:d3:b7:65:ba:4c:
8d:f9:01:cd:5f:00:eb:c4:3e:2b:93:04:1e:70:c6:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D9:FE:25:50:40:3E:12:5F:57:FE:8B:06:12:C2:1F:FF:FD:B2:07
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bf3a85ba-cc9b-4412-b222-5800ecbfb099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:b7:9a:cd:74:36:0a:3c:9e:a5:b3:5f:56:b8:e3:62:8e:8b:
ea:97:73:4a:24:7e:a7:d5:45:eb:34:95:7a:3e:ce:b7:bb:6f:
67:8e:27:a9:8a:43:e6:14:bb:e3:29:ef:3c:f2:5d:86:d2:32:
58:d7:27:ff:a5:2b:b4:4b:be:25:94:5c:7c:93:be:6a:b7:bb:
e8:f2:c1:05:2b:81:77:2f:0d:e1:83:6a:64:9c:9b:48:79:d5:
c8:0e:d5:a4:d9:88:87:30:5e:47:62:e5:bb:73:2c:7d:4a:25:
1b:c0:3f:fe:6a:ab:5e:c8:7f:1b:75:cd:af:8e:56:e6:ea:47:
a5:02:77:d1:af:5c:fb:4c:1f:d1:7a:bd:ad:d1:38:d2:d6:13:
f5:aa:86:7f:76:0a:ad:c2:02:27:b1:f0:07:52:61:fc:22:e2:
58:52:b3:d4:d6:a7:41:72:b7:54:c5:f4:7c:46:06:ec:a7:74:
6d:99:d8:a1:dd:98:96:f3:f5:09:ad:b4:58:01:48:5e:6c:51:
c5:02:f0:70:0d:01:90:42:d2:6c:30:ef:51:4c:b1:8a:b8:23:
af:83:48:1f:81:18:5d:bb:d1:e0:80:30:6c:2a:e8:8e:78:ab:
2f:be:c5:0c:e1:45:ae:a6:44:ef:3c:25:ec:02:49:25:9a:e8:
9b:4a:8f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:09 2025 by rpki-client