Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cb3506e3-585e-48b6-a8d6-9d77ca7d1cf0.roa
File: cb3506e3-585e-48b6-a8d6-9d77ca7d1cf0.roa (raw, json)
Hash identifier: A7Q6ybtkdKOpNlYotayezk/BSaX+2ZufKpqdLhk0pHQ=
Subject key identifier: 5F:B2:D0:E7:44:0F:36:BB:C9:1B:76:8F:1C:EA:DB:EF:7B:19:91:5D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 65008CBEFC156A7F40D3051A0CA9B2B448FDC73B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cb3506e3-585e-48b6-a8d6-9d77ca7d1cf0.roa
Signing time: Mon 19 Jun 2023 00:00:00 +0000
ROA not before: Mon 19 Jun 2023 00:00:00 +0000
ROA not after: Mon 24 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:00:8c:be:fc:15:6a:7f:40:d3:05:1a:0c:a9:b2:b4:48:fd:c7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 19 00:00:00 2023 GMT
Not After : Jul 24 23:59:59 2023 GMT
Subject: serialNumber=1f8a8873d86c528ead7ee8f9cd9d4529f4ba606088920bc7a400d4f28af6fd43, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:23:92:58:88:ed:9e:5d:e2:84:81:cf:3e:
33:48:2d:d6:a4:37:49:35:a0:e9:70:c8:9d:ea:d9:
1c:21:17:7a:52:e7:f7:aa:ef:5b:2f:32:79:16:93:
58:f9:b3:02:ea:14:a4:25:63:5f:19:f7:5f:f2:1e:
5f:b9:f8:db:38:89:ad:bd:fe:b6:db:36:4d:ef:5c:
c6:4e:e4:a5:34:a3:70:dd:91:77:1f:1a:a7:d5:b8:
5c:37:0e:be:48:98:10:28:41:79:fa:d5:ea:2d:e1:
09:33:6d:5b:ec:8a:c1:56:e9:7b:f6:b6:3d:59:01:
42:e2:14:5f:83:63:1b:12:c4:da:22:04:97:88:53:
14:2b:20:fc:69:71:85:eb:78:ec:da:37:cc:9c:da:
ef:7c:cf:a6:0f:3d:bd:01:0b:c1:b1:9c:75:45:0f:
8b:22:58:f3:c7:33:63:28:9e:bf:05:b1:eb:b9:f6:
f8:f4:3a:85:21:b2:28:c8:96:e8:57:87:45:76:e5:
f9:4e:24:db:35:31:0a:d0:da:10:fe:fd:7a:e0:4b:
92:19:e8:b3:63:72:9a:0b:b5:94:f8:c9:00:e8:f1:
33:9f:af:49:4d:e9:82:67:9a:a8:10:2e:48:8e:69:
8a:4f:e4:b2:9d:b0:21:cb:58:21:e7:ad:8e:8e:a4:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B2:D0:E7:44:0F:36:BB:C9:1B:76:8F:1C:EA:DB:EF:7B:19:91:5D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cb3506e3-585e-48b6-a8d6-9d77ca7d1cf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
27:37:0e:d4:24:de:6f:95:2b:3b:f7:8f:69:34:14:1c:6c:cd:
26:ad:15:3c:2a:4d:25:c9:bb:98:34:e0:f1:37:0c:87:f8:f2:
af:f7:b2:94:61:4f:5e:2b:98:61:65:b5:57:35:a3:43:d9:9c:
2b:ef:fd:7c:5f:c2:06:01:32:dc:fe:eb:35:7c:f1:82:c3:c5:
03:4a:16:5b:24:54:fe:c8:6b:b1:2d:a3:c2:fb:b4:29:0a:ea:
cd:b5:b6:72:9f:96:fa:2f:0b:95:16:b2:d9:ad:52:e1:e6:af:
8d:88:9b:1d:ce:a6:5a:b9:3e:32:a5:69:d0:7c:32:09:b2:db:
66:15:64:ed:54:82:70:9d:82:75:d0:e7:d6:24:f9:ac:5f:e3:
4e:1f:46:89:28:eb:0e:b9:ea:94:1f:93:36:6f:18:02:8b:6a:
ad:ef:01:0e:e6:14:31:5f:7d:56:68:c9:59:49:e0:25:cd:39:
51:56:6b:ec:35:de:15:90:cf:af:9a:77:be:42:78:2e:e8:a7:
c7:30:4b:17:9a:32:4c:1d:b9:b3:ba:47:b8:b7:53:db:4e:5f:
26:3f:97:b7:1b:9b:74:a4:d9:1f:73:fa:42:d4:d8:f2:af:46:
40:a9:69:82:c5:25:ea:f2:b7:0d:48:c4:01:32:93:8a:8a:d2:
19:55:94:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:51:15 2025 by rpki-client