Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c6d8f93f-3dc4-4447-9524-617a06c0f7dd.roa
File: c6d8f93f-3dc4-4447-9524-617a06c0f7dd.roa (raw, json)
Hash identifier: hGEZq+4Wb60PQGO0dBH+o+cvcowcJWdUQ/MGQw6lUOs=
Subject key identifier: C7:DA:66:3D:DF:FA:A6:02:BC:6E:E3:3E:61:75:F5:9A:FA:45:4A:EE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6284DBFBB8BD30249E42D4EA5A6453FE7596AC40
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c6d8f93f-3dc4-4447-9524-617a06c0f7dd.roa
Signing time: Sat 09 Sep 2023 00:00:00 +0000
ROA not before: Sat 09 Sep 2023 00:00:00 +0000
ROA not after: Sat 14 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:84:db:fb:b8:bd:30:24:9e:42:d4:ea:5a:64:53:fe:75:96:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 9 00:00:00 2023 GMT
Not After : Oct 14 23:59:59 2023 GMT
Subject: serialNumber=fbb654aee0c2fae1eac096d3409e1d1f90d38bc11c298889e80720f4baf8a489, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:59:9c:51:e4:61:01:ce:b8:37:96:b0:0d:
e7:a0:3e:09:12:74:2d:c7:15:8c:0d:57:c3:1e:1e:
b3:2d:42:ab:cf:8f:7b:c0:4e:8b:d0:0d:56:2f:b8:
c4:d7:ae:a7:6b:95:06:79:2e:65:57:51:61:85:65:
b1:38:8a:33:32:8b:a1:eb:f3:b9:d3:92:82:32:36:
9b:b7:50:8d:5b:d3:38:ad:ac:73:04:e0:f0:61:22:
f6:ae:02:8c:b4:c2:72:d4:5c:e8:3a:bd:fc:96:a2:
fc:07:c7:89:6a:b2:28:34:e4:12:bc:31:83:bf:fc:
bc:4c:9f:7f:58:13:59:ec:68:70:d5:4a:af:08:18:
9f:c4:d1:d8:f8:87:61:3f:75:0b:75:ff:54:47:58:
b6:1a:e9:8f:11:84:76:39:f8:86:42:cd:fc:b0:77:
55:58:db:49:49:ac:e6:41:a3:6d:71:3a:76:3c:4e:
94:8e:50:7d:c4:03:a1:65:6b:8a:7b:22:dc:a2:6c:
c0:c8:1b:b9:92:26:48:dc:ca:ca:34:4c:f8:10:f7:
18:75:5f:01:2d:f6:94:8c:59:ad:8d:d3:7b:dc:ed:
de:bc:52:94:10:f4:31:09:27:18:b5:e7:1f:5e:9a:
00:54:d9:e2:21:77:70:36:1b:71:5a:47:81:96:d7:
13:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:66:3D:DF:FA:A6:02:BC:6E:E3:3E:61:75:F5:9A:FA:45:4A:EE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c6d8f93f-3dc4-4447-9524-617a06c0f7dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
41:2b:50:ad:46:54:89:fe:87:c1:03:8a:68:e3:d1:ca:d7:6a:
86:00:c9:bb:7f:8d:43:dc:43:97:20:b4:a2:11:69:7a:dd:a6:
25:f2:d4:78:94:80:2e:3f:b2:01:a3:4b:93:9a:64:b0:36:43:
d4:d0:29:cf:34:41:3a:fc:7a:ce:30:c6:0c:a0:b5:f2:92:e8:
7b:f2:54:de:8b:a0:e5:79:da:56:14:57:91:26:14:f8:cb:f8:
5a:c1:75:0c:da:c7:45:41:c3:ab:b9:fe:8a:b7:ae:c4:70:a4:
b8:d5:b7:74:d0:58:f8:33:d8:8e:75:21:f3:3c:ea:d3:e2:97:
d0:de:19:63:61:98:98:56:ce:ac:e1:57:61:49:06:1b:ff:0c:
a0:af:c2:6d:b1:0b:0f:4d:90:90:61:40:52:2e:89:d4:c1:12:
d9:cb:65:41:ab:58:6d:a7:48:ac:81:9a:e2:a5:53:b7:3b:7e:
c4:f4:af:21:08:2d:1f:eb:de:a9:0c:7a:d8:a5:c7:f5:6f:60:
6e:ab:0c:5f:ba:c3:8d:e2:95:8d:c1:f1:98:a8:ed:30:57:6c:
2a:74:e4:04:13:b9:a5:f3:6c:02:0b:cd:64:ce:a6:dc:3f:89:
60:08:d6:0a:d8:2e:b4:da:d4:c5:88:0b:3f:31:45:84:90:4b:
46:fd:d7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:47 2025 by rpki-client