Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c471251f-420c-4d6d-8568-99e09e5f05a4.roa
File: c471251f-420c-4d6d-8568-99e09e5f05a4.roa (raw, json)
Hash identifier: v0BdCCtSlaeu8G57o5DRkBWTsNqSsGLTWSxLF4zG8c8=
Subject key identifier: FD:96:43:A9:0E:C2:D0:88:77:CC:66:8D:4E:94:40:CE:C7:17:5C:66
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3FBC464D875276C959FF1A695A0D8BA257A31B2E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c471251f-420c-4d6d-8568-99e09e5f05a4.roa
Signing time: Mon 20 Nov 2023 00:00:00 +0000
ROA not before: Mon 20 Nov 2023 00:00:00 +0000
ROA not after: Mon 25 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:bc:46:4d:87:52:76:c9:59:ff:1a:69:5a:0d:8b:a2:57:a3:1b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 20 00:00:00 2023 GMT
Not After : Dec 25 23:59:59 2023 GMT
Subject: serialNumber=25bd8332cd108c9b9ee5edf10b8207cc466f8acca2836807cb00b63f7e6c0a4e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:a8:93:ff:b5:98:bb:2b:20:7c:03:e2:9d:
8f:5c:9c:34:c9:66:a3:07:cb:7f:af:6f:48:a9:4f:
19:58:7a:56:08:2f:86:c4:fc:c1:87:0c:6a:b9:9b:
09:ee:0f:d3:08:9c:0e:e5:04:c1:e1:bd:fd:95:1c:
5d:ab:03:51:c8:27:77:7d:11:dd:4a:a0:88:70:0f:
ad:20:0c:96:84:50:6e:83:9f:63:01:ad:14:5a:9c:
1f:70:4f:3d:b8:5a:34:62:06:db:e2:79:c2:64:de:
f2:6f:18:cf:74:71:33:6e:35:93:32:df:57:4b:82:
82:25:38:d8:03:2e:c7:ce:90:c6:e0:8c:c4:55:4c:
9e:89:1c:d5:ea:35:95:82:85:ce:ac:18:5e:27:9b:
0d:d6:b5:64:89:39:f7:92:cc:f7:ce:e5:bf:54:82:
53:ad:69:0e:55:71:16:ab:f7:93:dd:8f:e1:75:d7:
a3:76:11:53:8f:5f:40:dc:59:ff:1a:e2:c0:70:11:
23:4b:fa:27:1d:ec:65:00:2a:ff:83:c9:15:76:9d:
be:18:f7:c4:41:76:30:e1:66:94:bc:fe:a5:20:2e:
ce:b0:59:3a:96:c4:fb:4b:49:9d:fc:12:be:c5:11:
eb:04:a2:01:95:3d:8b:ad:ae:4f:8e:1f:08:af:fc:
4a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:96:43:A9:0E:C2:D0:88:77:CC:66:8D:4E:94:40:CE:C7:17:5C:66
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c471251f-420c-4d6d-8568-99e09e5f05a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:e1:e3:a5:f8:26:b8:64:15:aa:0b:ea:e7:0d:a6:7a:9e:78:
ef:3b:8b:4c:1e:7e:33:93:d5:c2:8c:a6:70:e1:bd:1f:29:b5:
f1:e8:f3:87:6f:fc:48:ad:6f:9d:70:1d:fe:96:d7:8c:45:4b:
a1:06:6a:2a:06:4a:94:0e:30:af:ee:fa:31:d8:d4:6a:8c:92:
49:2c:73:93:0d:12:11:d2:3e:15:c6:c8:11:a2:a3:34:72:7c:
9e:8f:c3:f3:79:38:4c:15:3f:d3:96:bb:3a:2b:ce:8d:8e:73:
f5:83:47:8f:48:d4:ad:56:24:83:43:ad:fe:16:62:29:8b:59:
ee:0f:71:69:ce:4e:69:6d:1c:1c:21:cb:f8:4b:63:e2:d7:99:
0d:b4:0f:5d:c1:70:62:ee:20:b6:a9:fd:d5:d1:1c:ee:e0:43:
96:cf:18:df:00:2f:cc:fd:52:fa:dd:e7:79:e8:dd:33:82:de:
9b:f2:19:05:4b:f2:ea:00:34:95:a5:29:28:95:e4:2e:6a:c3:
13:ef:8c:8c:32:ac:bd:68:87:4e:e1:c7:99:8c:8d:d9:f1:10:
1f:50:dd:f3:b0:7a:9c:8f:f6:ad:c3:63:59:9b:24:63:84:76:
58:dc:8b:2e:17:21:e9:be:0d:b1:bc:aa:46:e4:ad:e0:73:70:
0b:bb:35:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:52:25 2025 by rpki-client