Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dd3f4b6e-67e9-447f-a5a0-f58b2eee1040.roa
File: dd3f4b6e-67e9-447f-a5a0-f58b2eee1040.roa (raw, json)
Hash identifier: AtfrZEHzdJJycamgPoitVw/GC0xp/PZKggiUf9EqXZQ=
Subject key identifier: 51:08:55:C7:53:A3:83:D3:7B:F8:D9:D7:1F:38:33:6E:12:D8:54:6A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 688451976C9E76C8D9F37EED405397AEE3041463
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dd3f4b6e-67e9-447f-a5a0-f58b2eee1040.roa
Signing time: Thu 10 Aug 2023 00:00:00 +0000
ROA not before: Thu 10 Aug 2023 00:00:00 +0000
ROA not after: Thu 14 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:84:51:97:6c:9e:76:c8:d9:f3:7e:ed:40:53:97:ae:e3:04:14:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 10 00:00:00 2023 GMT
Not After : Sep 14 23:59:59 2023 GMT
Subject: serialNumber=f5088adfd066688e6e42aba6a61378f8051baa2e52161446418d16208d97d44b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:1c:86:a7:e5:6e:2e:73:d2:0a:6c:53:74:
55:13:9a:f3:39:4e:f2:15:39:88:e4:20:59:76:75:
f5:f0:9c:6a:7a:31:e6:3a:c5:e8:ff:16:c4:2b:b4:
e0:bb:b3:52:69:1a:e5:f6:11:82:ce:00:63:ff:08:
cc:2b:27:0a:d5:4a:34:1f:f8:33:c7:61:00:fa:84:
12:52:ae:bb:7c:90:c7:b4:c8:c4:69:41:b9:2d:2b:
f9:82:ed:c8:f8:9f:00:d3:0c:30:2f:28:70:ec:fc:
c2:94:cd:05:03:0d:66:b8:25:98:c5:47:3c:0d:45:
79:b4:56:96:98:65:94:cf:94:2b:06:ba:f3:f3:50:
eb:c5:a2:48:db:3b:e8:c7:b0:1a:32:af:44:8f:7d:
4a:65:54:1b:6d:55:a2:6d:f6:72:68:77:30:87:2a:
fa:20:23:20:72:2b:fc:d2:01:93:bb:58:5e:59:51:
c6:05:82:6c:57:91:a6:60:e1:f0:39:a7:f2:02:1c:
e1:7a:2e:62:a2:15:64:0a:a1:a5:1e:e6:b0:a7:d8:
c8:8d:01:55:47:bb:07:8c:24:6b:8a:a2:26:1a:98:
9d:18:9c:51:63:1a:55:b5:df:d5:53:c8:1a:ff:8f:
86:3e:2c:63:2f:0b:9f:0b:38:83:5b:d9:da:e3:01:
0a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:08:55:C7:53:A3:83:D3:7B:F8:D9:D7:1F:38:33:6E:12:D8:54:6A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dd3f4b6e-67e9-447f-a5a0-f58b2eee1040.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:48:39:a0:e0:a4:cb:5a:6d:97:0a:54:ef:7c:db:51:62:c1:
63:0f:e5:76:fe:c6:0e:f4:c4:f6:e1:5e:b7:fd:04:58:0d:ff:
bd:2d:59:b8:d5:87:ab:8b:21:19:95:0f:de:7f:0e:53:e6:9a:
fc:69:76:38:43:07:f5:30:65:75:c5:c9:c0:f5:ae:0b:ae:e7:
07:0d:fa:57:e6:b8:af:49:42:43:23:d2:17:ee:67:d4:ea:f4:
cd:44:19:38:33:6b:97:1b:20:2c:83:b0:1d:23:04:f9:d0:66:
7b:65:51:8b:b5:3d:dd:85:5d:80:8b:df:fb:f8:83:01:5a:52:
7b:3d:a5:09:5f:dd:b5:26:56:be:76:55:3b:f1:7a:bc:27:53:
d5:06:e9:a7:ac:10:5d:94:0e:63:c0:81:bb:5c:a6:c8:2e:d6:
be:c0:17:c6:b3:3b:36:30:97:db:c1:b1:9b:ed:52:81:36:28:
56:2c:1b:35:ae:b7:52:be:76:17:6f:f9:a2:1e:6f:c4:cb:3f:
99:25:f4:df:fe:08:d8:65:fb:dc:b9:c6:af:e2:47:e0:d1:66:
d6:23:10:c1:9c:67:84:2f:f8:c7:89:20:ef:60:39:b4:f1:3b:
8a:ba:36:1a:b0:7b:14:59:8c:5b:c6:2d:f7:48:2a:a3:28:e4:
a8:8f:a0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:40:07 2025 by rpki-client