Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf9aea9b-6871-4e76-a83d-ad5c76fff9b1.roa
File: cf9aea9b-6871-4e76-a83d-ad5c76fff9b1.roa (raw, json)
Hash identifier: +7tkt7uZPXYysRQsPwwKA5DSCZrow7OyQkng6jA2Djs=
Subject key identifier: 95:FE:E2:B9:9E:72:8C:3A:D5:63:EC:46:7E:08:B3:D1:46:12:82:37
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5F5B338F5687F04A024A76AC27FFCC92AD33B005
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf9aea9b-6871-4e76-a83d-ad5c76fff9b1.roa
Signing time: Tue 05 Dec 2023 00:00:00 +0000
ROA not before: Tue 05 Dec 2023 00:00:00 +0000
ROA not after: Tue 09 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:5b:33:8f:56:87:f0:4a:02:4a:76:ac:27:ff:cc:92:ad:33:b0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 5 00:00:00 2023 GMT
Not After : Jan 9 23:59:59 2024 GMT
Subject: serialNumber=ff868a5d0db9297fe1cee9980094d53833090a94c43b02c1b443b04191f606b0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:91:e7:98:ec:b8:35:36:71:5a:41:fd:dd:
fa:31:08:b6:6c:2e:fb:16:bf:90:a8:2d:c1:b7:5f:
3c:3e:b8:dd:0d:4c:29:d3:7a:91:4e:19:c7:84:dc:
1f:2d:c8:ec:b9:91:ac:dc:e8:6a:be:3f:cf:c3:a8:
4a:eb:9c:15:67:30:79:8e:94:0d:11:e1:5d:8e:3d:
6d:8b:cf:ec:31:57:be:10:c7:fb:31:b9:0d:b0:c0:
e4:1a:ce:c9:39:7e:ba:f9:cb:bc:eb:e1:53:c6:12:
43:dc:fc:db:34:20:52:80:dd:ba:17:d2:6e:67:71:
74:a5:22:9f:64:2e:69:34:48:bc:99:ab:4d:b8:0e:
96:58:e1:8f:31:cf:f6:9a:d1:5c:41:72:72:a6:ca:
a2:76:8f:90:f8:8b:79:cd:48:aa:38:c5:25:22:19:
32:43:e7:ee:f6:55:d0:b5:38:8d:9d:63:5f:a3:d4:
44:a4:67:18:6f:39:02:14:69:2c:cd:f5:5e:9d:db:
97:02:17:4a:cb:29:4a:cd:1d:0c:d7:bf:56:50:17:
03:2f:55:23:f7:6f:b1:e6:86:87:9e:b0:c9:6d:2b:
fb:8f:7b:13:55:a4:ed:ca:2e:2b:1f:a1:91:a4:90:
90:64:f4:81:4e:3f:73:09:5a:48:94:59:b5:6b:bc:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FE:E2:B9:9E:72:8C:3A:D5:63:EC:46:7E:08:B3:D1:46:12:82:37
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf9aea9b-6871-4e76-a83d-ad5c76fff9b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
af:16:b9:29:8b:3e:2b:b8:e8:2e:f1:7a:36:74:2f:a7:f9:b8:
d8:c3:e5:db:3f:9c:56:82:e3:33:59:ed:6c:b2:c8:7a:40:29:
c0:c2:83:8f:ac:0e:28:c9:a5:04:e0:2b:74:b2:ce:16:b3:48:
84:10:36:3a:a1:63:ea:f7:be:9b:c2:01:cc:95:8d:dd:18:52:
bc:95:d2:bf:fd:b3:49:b4:a5:e4:13:3b:b6:e4:e7:68:f6:db:
06:ea:15:e8:20:af:bd:1f:d3:43:43:79:84:5f:11:f5:33:fe:
33:8a:17:87:c7:c8:ca:a2:1d:b3:ac:e4:dd:40:e1:21:ec:6a:
a8:0e:47:08:3f:af:66:83:47:86:69:ef:92:df:52:df:72:14:
81:d6:88:8c:75:ca:a1:06:61:14:7c:50:f0:5e:a1:90:10:57:
bc:13:78:33:2f:b5:48:dd:62:ad:6d:ee:6e:ac:25:cf:8d:ec:
c1:8a:18:b3:6d:e1:98:1e:a9:cb:20:38:85:46:6e:7b:f4:ce:
b4:c9:2c:9a:fe:39:e6:7a:8e:fb:6e:79:9c:f1:3d:4f:05:fd:
2b:8e:71:85:01:57:3d:99:2f:69:b4:c5:9e:12:7c:c2:32:17:
91:1e:49:d1:94:a9:72:bd:60:a1:14:bc:c7:e5:1c:c3:59:03:
66:1e:48:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:39:32 2025 by rpki-client