Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d87faf5b-fd97-4aec-ac21-5cd6aa0ce190.roa
File: d87faf5b-fd97-4aec-ac21-5cd6aa0ce190.roa (raw, json)
Hash identifier: EtiQgUlqVMTvWPWSMEebIAlWQPPzFp3o81uuaO05Sn4=
Subject key identifier: B8:C1:7A:05:45:A3:2A:2C:E3:3B:6F:DF:55:1B:E9:02:86:74:3A:59
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6233787CC4B5112C6C08B4F2F3FB3DE08D25551E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d87faf5b-fd97-4aec-ac21-5cd6aa0ce190.roa
Signing time: Thu 12 Oct 2023 00:00:00 +0000
ROA not before: Thu 12 Oct 2023 00:00:00 +0000
ROA not after: Thu 16 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:33:78:7c:c4:b5:11:2c:6c:08:b4:f2:f3:fb:3d:e0:8d:25:55:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 12 00:00:00 2023 GMT
Not After : Nov 16 23:59:59 2023 GMT
Subject: serialNumber=51040fb7334c08e01a097f0fd5b8dccec9ca1d494901830e5350aeb4be56626b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:c2:ba:27:68:1e:8f:a0:c6:5e:a7:70:5b:
2f:77:ac:69:d8:18:03:5e:f8:65:e0:3d:7b:e2:d6:
bd:f1:89:68:aa:94:e7:3c:2c:63:4a:d6:79:0c:03:
23:2f:6e:d6:4f:b5:09:c9:fc:72:47:d3:f2:36:55:
00:31:95:5a:62:78:51:b6:71:8d:dd:8c:d0:2f:0f:
10:86:fd:26:39:12:22:e8:b0:75:44:e6:78:c4:f4:
eb:f0:98:52:c6:4a:b7:20:1d:3e:6f:3e:c4:bc:bc:
4b:6b:7c:c9:8a:14:fc:6b:13:6d:73:21:23:56:60:
d7:c7:b8:76:3e:1d:da:79:79:d4:c9:df:7f:44:7f:
cf:2b:49:3c:67:26:5a:0c:78:06:29:8f:01:10:97:
c6:4c:38:9a:6c:4f:b5:ee:f2:cf:56:32:ea:28:a0:
6a:e8:97:58:6f:af:28:ba:dc:27:bf:49:09:94:13:
74:49:ec:ab:be:2b:68:df:28:36:09:e3:41:67:f0:
23:3e:72:2d:77:ed:11:33:cb:10:1f:bc:c2:33:0c:
36:2a:8d:c0:6c:a0:32:f6:5b:42:61:22:fa:b0:69:
e0:ee:f8:4f:bc:20:c8:07:34:d2:03:f8:77:bb:f0:
60:af:3b:7b:c6:49:ef:c0:1b:66:09:c9:06:ee:60:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C1:7A:05:45:A3:2A:2C:E3:3B:6F:DF:55:1B:E9:02:86:74:3A:59
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d87faf5b-fd97-4aec-ac21-5cd6aa0ce190.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:5c:ab:e2:59:a6:9e:60:29:bb:75:3f:42:c6:c0:01:f0:50:
e7:2b:0b:7d:67:d1:05:94:0b:30:c1:1f:6c:a9:bf:02:c5:be:
8b:ef:b6:fd:78:72:01:31:ef:2e:71:40:eb:03:d0:74:62:dd:
8e:f5:cc:d1:2a:78:43:7e:87:28:3b:0b:4f:5f:59:d0:24:ae:
d8:60:35:86:5f:6f:47:0b:18:49:36:7b:4c:d7:1c:92:cd:4a:
38:a5:a3:7e:86:42:c3:6a:59:ec:c0:9f:8f:88:0f:cd:05:65:
c6:b5:30:65:9b:6d:f9:eb:ea:00:0b:41:29:fe:70:46:60:29:
dd:ad:7e:a8:20:33:73:8b:66:55:fe:8f:68:37:1c:b4:2b:ce:
a5:1b:6c:f4:46:d7:90:c4:39:fb:c8:81:ee:cc:b2:db:a9:8f:
0c:47:df:68:9a:d0:ac:c0:8d:2f:c2:90:a8:e0:02:df:04:44:
44:2a:93:5f:2f:67:13:2f:69:85:c3:08:f5:91:19:23:05:6b:
e9:0c:cf:9c:57:40:6a:6b:e7:44:16:65:9b:f3:46:c3:dd:97:
22:11:1e:aa:7a:9b:42:06:99:8f:85:29:de:13:71:11:16:d1:
17:05:3b:b4:e0:2d:8f:42:1c:fd:73:1a:95:19:80:bc:b4:c7:
fd:a9:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:23:46 2025 by rpki-client