Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c71f9368-caf0-4605-bd3c-a5ec43a9f66d.roa
File: c71f9368-caf0-4605-bd3c-a5ec43a9f66d.roa (raw, json)
Hash identifier: h/Zg7vuntdSziE1RjAQdHTs8Vq4isgszXXT/u0SrSw8=
Subject key identifier: 8D:14:53:60:4E:B7:DC:D3:80:C8:ED:70:F2:1F:45:77:91:1E:F1:1C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4544276BB8F2FE3E104C62492E4034BDD7E7EF07
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c71f9368-caf0-4605-bd3c-a5ec43a9f66d.roa
Signing time: Tue 31 Oct 2023 00:00:00 +0000
ROA not before: Tue 31 Oct 2023 00:00:00 +0000
ROA not after: Tue 05 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:44:27:6b:b8:f2:fe:3e:10:4c:62:49:2e:40:34:bd:d7:e7:ef:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 31 00:00:00 2023 GMT
Not After : Dec 5 23:59:59 2023 GMT
Subject: serialNumber=d6b6af779c3bdb029a630f08ad7b3048bf76071cf82898cb68651683a3f28ea1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:3c:64:0b:b8:71:5f:a9:f1:25:11:9f:d0:
25:50:b6:44:49:83:65:41:d8:92:53:35:b2:c2:48:
45:29:48:1b:ae:ce:b3:fd:ad:e8:4a:05:f7:93:3f:
c1:6e:5c:0b:7f:a7:60:b7:72:c3:9a:e1:78:47:d6:
cd:00:91:46:2c:cc:74:da:2b:d3:81:2a:c1:41:0f:
f6:70:ea:03:a2:d9:1e:15:b2:59:a8:88:de:1f:8d:
2a:ee:a3:cb:0d:29:12:24:10:c6:26:78:b6:38:f1:
18:0f:40:d5:8e:6e:57:00:a9:df:3e:79:bf:ec:4f:
68:a8:1d:eb:da:3d:88:f6:62:60:df:ff:82:bf:a5:
b6:f9:6f:3f:ce:3a:d6:fa:29:ce:49:fe:8a:e4:d5:
aa:be:52:29:c4:98:87:fd:14:b7:c0:b2:5b:e6:aa:
5b:05:2e:21:20:f7:74:bf:f1:62:01:60:29:96:7d:
a9:4d:f8:37:1c:58:b3:1d:6c:be:78:ca:0a:b4:02:
c3:5a:a2:db:cb:c0:bf:36:b3:db:5e:9b:43:86:60:
dd:38:b6:fe:d1:e0:7d:70:c7:46:95:ef:40:d7:f6:
98:66:af:c7:7f:ad:23:b0:bf:f7:e4:25:11:8d:f5:
d2:d8:d6:8b:03:4f:92:b0:ce:f1:2c:16:b9:33:68:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:14:53:60:4E:B7:DC:D3:80:C8:ED:70:F2:1F:45:77:91:1E:F1:1C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c71f9368-caf0-4605-bd3c-a5ec43a9f66d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9a:e1:af:fe:24:13:ac:24:93:20:40:bf:b8:cb:e5:84:f6:
b8:f6:e3:a1:3a:13:8c:de:45:86:54:3f:e1:52:f0:7f:e4:19:
98:1a:5a:e8:c9:54:d9:e9:33:8a:f0:93:aa:e8:c7:b3:7f:5f:
f3:11:33:f8:cd:76:db:9b:2e:ac:98:9a:89:81:53:ae:f3:13:
03:fa:59:06:8a:54:b7:57:69:9a:6f:c4:c0:0d:bd:75:02:12:
43:43:a5:f3:71:a9:19:12:7a:8d:e7:86:cb:53:3b:de:24:cb:
84:47:b3:57:07:3a:8b:ce:e4:46:3b:6a:c2:d3:98:e1:d4:05:
cf:7e:cc:33:03:7e:91:64:0a:85:80:c1:fd:ec:40:b0:48:79:
86:57:f8:39:3a:c3:ac:42:18:79:c9:e7:fc:b6:9e:0f:dd:99:
49:c9:3e:aa:1a:82:6f:b0:c8:00:ca:e4:6b:69:9d:9c:77:b5:
21:fa:b4:b7:3f:0a:ff:b9:38:59:cb:04:37:f1:9f:5e:ea:66:
79:d4:07:59:e8:57:aa:02:68:e7:84:53:24:06:66:10:fb:44:
2a:5f:aa:5e:42:54:e8:cb:10:77:39:6e:5b:30:7c:2a:94:5f:
8b:28:64:a0:7c:34:1b:19:7b:a8:ae:90:66:d5:ec:79:9c:87:
63:3b:48:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:32:14 2025 by rpki-client