Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d90a33d2-ff04-43f9-a769-f529060d6b6f.roa
File: d90a33d2-ff04-43f9-a769-f529060d6b6f.roa (raw, json)
Hash identifier: +dYTX4s5pguZcOqMtxnvuaQESXBF1sneRDiYz+XROEU=
Subject key identifier: 37:6B:5D:14:46:F5:42:48:BA:35:0F:0E:4C:95:56:4A:D1:7E:F8:08
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 172C3B005E778253027AE184A9ADE22ED95CFB75
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d90a33d2-ff04-43f9-a769-f529060d6b6f.roa
Signing time: Sun 18 Jun 2023 00:00:00 +0000
ROA not before: Sun 18 Jun 2023 00:00:00 +0000
ROA not after: Sun 23 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:2c:3b:00:5e:77:82:53:02:7a:e1:84:a9:ad:e2:2e:d9:5c:fb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 18 00:00:00 2023 GMT
Not After : Jul 23 23:59:59 2023 GMT
Subject: serialNumber=c80b8303db5afc5a23d9e7631b7494981ad986b323d9a9fea96822b5c35917ff, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:4c:e2:7d:5f:76:c8:78:25:53:73:5d:9c:
87:10:1b:d9:c6:6b:45:49:bd:63:8b:86:39:07:bc:
3a:41:eb:6f:79:cc:9d:d4:29:1a:70:02:00:2c:a8:
33:9f:f9:39:13:c1:aa:5b:04:f6:59:92:36:ad:ca:
78:a2:14:f1:6e:a4:66:62:4a:3a:0d:4d:68:db:8b:
fd:4f:3a:83:e2:26:a3:98:e5:3a:c7:f6:ae:5f:23:
be:e5:e2:3f:b1:7d:9e:96:f8:93:02:36:b4:2c:98:
3b:92:c2:34:27:fd:e2:d8:82:15:46:47:c9:fc:f6:
01:26:8e:5f:c5:77:7a:c7:b5:52:53:20:d3:3c:d8:
dd:38:0d:d6:50:bf:fb:54:98:c9:4a:99:d2:d6:ac:
fa:01:75:41:e8:ce:06:a3:98:57:30:95:2b:e7:ba:
9a:87:22:56:7a:b5:64:f5:4b:9c:12:16:e0:8f:76:
2d:1a:c6:68:cf:bb:70:52:48:2c:06:01:f4:87:fb:
39:f7:51:7c:fa:34:f3:14:e4:dd:c2:1c:b9:9c:68:
e2:d8:4e:a6:b4:d1:8a:39:59:81:4b:83:72:d2:3b:
a8:0d:4f:81:fd:47:f5:c4:d7:69:d0:e0:71:f9:db:
71:a1:9f:54:36:55:fc:b8:ee:6a:6b:6e:ca:8b:7c:
89:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6B:5D:14:46:F5:42:48:BA:35:0F:0E:4C:95:56:4A:D1:7E:F8:08
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d90a33d2-ff04-43f9-a769-f529060d6b6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
04:87:8c:fc:f2:a1:3f:30:76:81:1b:32:1e:63:be:e5:5c:c1:
c2:b8:cc:3a:60:01:fe:bc:4e:2a:c7:9d:78:03:70:0e:1b:70:
03:ef:55:f8:87:dd:5d:31:9e:99:2c:0f:a9:77:f7:75:29:8f:
6d:a0:cc:01:5f:23:37:da:d2:2e:22:30:ec:19:b3:1f:6d:41:
93:d4:47:88:cd:93:6d:53:60:52:c9:43:0f:8d:19:12:f2:ac:
c9:b0:25:50:93:5f:99:b9:69:25:da:b0:b0:ac:f0:93:19:fe:
54:1c:29:a8:e6:c6:74:a7:5b:00:e8:cd:b7:c8:0c:0a:04:d4:
14:f5:cd:13:bb:15:9b:e6:ad:6d:d5:ad:48:e8:fb:89:12:45:
c0:8e:26:bb:79:d1:21:d4:53:35:69:3e:2d:f5:87:83:27:4f:
cb:7a:50:f8:40:bc:fc:12:ef:d3:91:34:e4:64:bc:06:b0:b5:
f2:b0:13:57:63:52:cc:2e:27:28:af:5e:52:9c:83:56:cb:aa:
64:1e:6b:30:06:bc:8b:f0:2b:57:0d:bf:e3:9f:b9:9a:d2:35:
b7:63:3b:df:4b:57:83:2a:71:b6:ca:39:b6:f3:7f:cc:ba:b8:
cd:57:bd:d0:74:7f:7a:c0:9f:dd:b7:8a:09:96:fe:33:36:a9:
43:c1:2d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:28 2025 by rpki-client