Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d0a5e955-3cfe-4de2-8f7f-343598a0c68b.roa
File: d0a5e955-3cfe-4de2-8f7f-343598a0c68b.roa (raw, json)
Hash identifier: I1NVE4kh1WLa4Hx7wcplJJzyOrABfNETFGubAJkoVNM=
Subject key identifier: B8:A0:CF:9A:30:E2:C5:88:5A:50:A2:4D:FF:00:FB:6B:37:12:E6:EB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 681D1C1AA22D9E40BCB25C97F3BFBD2CEB73FA75
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d0a5e955-3cfe-4de2-8f7f-343598a0c68b.roa
Signing time: Sun 30 Jul 2023 00:00:00 +0000
ROA not before: Sun 30 Jul 2023 00:00:00 +0000
ROA not after: Sun 03 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1d:1c:1a:a2:2d:9e:40:bc:b2:5c:97:f3:bf:bd:2c:eb:73:fa:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 30 00:00:00 2023 GMT
Not After : Sep 3 23:59:59 2023 GMT
Subject: serialNumber=9129a2c017071bc50669e8092a8ab3be09d302a9721023e30c6fd7a0ed37aee2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:a6:d5:cf:7b:31:6e:cc:04:17:21:70:ef:
d1:e5:e6:f8:7c:94:8f:5b:35:d1:52:ec:01:f6:81:
0e:f3:49:a4:2c:05:ff:43:45:5d:41:66:a2:51:16:
0d:a9:87:e2:e1:66:90:d0:73:b1:b1:9e:ad:bd:93:
89:dd:05:5b:78:9d:a1:72:b6:00:90:52:32:60:5b:
dd:e2:9d:ee:38:c7:cc:d5:4f:84:40:90:05:0b:ce:
1d:c3:58:9d:c1:d2:7a:78:a8:18:4f:73:48:fc:53:
20:58:ff:e9:4b:6e:06:50:19:e7:df:e2:17:7b:71:
28:1c:a1:d2:24:c3:02:f4:bd:6b:10:77:3c:8f:1d:
3c:1f:a0:fa:ad:a6:79:61:67:ae:f7:44:26:90:2d:
d7:2b:93:89:c8:f3:bb:73:38:47:19:e4:b0:0f:d2:
f8:1e:49:12:35:87:44:9e:20:ed:9c:85:40:cf:58:
d5:6c:90:63:07:c7:0e:1b:09:45:a9:ee:99:34:9d:
2c:18:01:ce:47:3a:78:ee:92:96:66:b1:b7:1d:fd:
78:95:cb:57:d0:79:42:80:7b:a6:57:ad:e2:30:63:
82:38:df:99:7f:e6:18:cb:22:6f:07:46:46:22:40:
5a:4d:3e:b7:6a:cf:a1:3d:52:59:7f:3e:7a:bb:ae:
cb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A0:CF:9A:30:E2:C5:88:5A:50:A2:4D:FF:00:FB:6B:37:12:E6:EB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d0a5e955-3cfe-4de2-8f7f-343598a0c68b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
54:1f:44:61:c6:13:0f:72:82:82:86:5a:ba:dc:cb:ac:74:ad:
bb:39:d8:c4:1b:e3:e8:82:03:44:91:ac:19:4b:dd:6c:76:d7:
6a:56:a3:a4:ce:14:82:c3:a0:93:a8:52:17:90:eb:bd:83:6e:
48:1b:08:27:dc:00:40:64:ec:f3:7e:37:32:5d:5e:13:ef:98:
42:bc:67:ed:26:d0:6a:38:7d:6d:83:39:4d:9d:cf:dc:55:45:
e2:b5:56:46:00:54:c9:5c:37:c6:e5:93:15:3d:e2:e9:ff:06:
8a:65:61:38:7f:cc:d7:34:8e:ea:77:21:83:56:e0:39:79:52:
76:e2:01:03:13:33:9a:7c:e8:e9:d6:c8:27:a2:fc:0c:1b:4d:
36:bc:4d:36:93:2c:d9:7c:fc:61:09:22:b7:1a:cc:e3:7b:6a:
32:e4:e8:02:00:5d:64:25:63:ec:af:9b:41:b4:be:31:f2:8a:
49:e6:1a:76:5d:21:d6:d7:c8:c5:34:d2:5b:34:fc:7b:02:27:
3f:a5:26:df:ea:d5:9b:13:4a:c7:89:63:41:6e:e3:24:86:83:
ec:cb:95:65:58:3a:59:91:36:7b:e3:a2:9b:6c:34:90:9b:fc:
85:30:61:c2:2c:64:e6:e3:55:56:63:2d:87:4e:e4:ad:ff:3c:
4d:fe:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:20:12 2025 by rpki-client