Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/debb3d13-6bd1-4df5-a167-fb31118932a5.roa
File: debb3d13-6bd1-4df5-a167-fb31118932a5.roa (raw, json)
Hash identifier: XRtFtnHzgH6NiARhleaWCwzrUoNVPigKme7MnY3QZO4=
Subject key identifier: 87:69:2B:6F:6A:FE:1E:44:0C:6B:52:EE:0D:A2:6D:4B:8E:74:29:B5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7EA384B46181D6E2A7E2D168EE7505F5C1407B61
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/debb3d13-6bd1-4df5-a167-fb31118932a5.roa
Signing time: Sun 27 Aug 2023 00:00:00 +0000
ROA not before: Sun 27 Aug 2023 00:00:00 +0000
ROA not after: Sun 01 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a3:84:b4:61:81:d6:e2:a7:e2:d1:68:ee:75:05:f5:c1:40:7b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 27 00:00:00 2023 GMT
Not After : Oct 1 23:59:59 2023 GMT
Subject: serialNumber=659a73d425963e78eccbfcdd745ef84b824ab5816f7c4eb95bc7917c7a94df2c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:11:15:65:19:d4:ad:e7:87:0f:ee:cb:8f:
59:94:25:ce:09:9e:f8:72:95:37:b6:5a:c8:ec:83:
77:eb:6b:95:9e:2c:02:99:34:b1:35:ab:5e:8b:55:
4b:87:95:ce:1c:3a:c9:b7:b6:09:c6:b5:20:3d:8f:
0c:9d:1a:a9:b9:58:73:94:18:23:5a:95:d8:d9:02:
97:31:ec:c2:b5:d1:57:f0:0a:30:2e:12:6d:42:e6:
88:8a:4c:26:8d:1d:e1:84:a3:36:d1:09:0c:29:05:
97:aa:a6:58:cf:2c:54:c2:33:48:f0:1b:7a:80:11:
97:b1:3b:db:7a:c6:cb:e5:af:bb:39:60:5a:4d:21:
cc:54:3c:5a:45:9d:d1:e0:75:c6:7b:8a:68:a8:45:
f2:b1:03:4e:dd:66:1b:d6:b0:94:f4:88:2a:a9:62:
6e:a7:7f:51:94:72:9f:a0:c5:3f:67:b8:ea:10:e2:
9e:51:5a:e5:5a:d3:0e:ff:1a:96:89:e9:c1:66:12:
46:00:b8:e5:2b:0b:0b:07:2a:0d:96:18:7e:2f:80:
65:ab:db:ce:e3:61:87:2a:1d:28:53:24:3f:47:67:
ce:41:7b:35:50:97:c5:19:a1:70:fb:fb:ef:3b:68:
86:bf:8d:21:3a:97:6d:aa:de:3f:f5:bd:17:7f:0a:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:69:2B:6F:6A:FE:1E:44:0C:6B:52:EE:0D:A2:6D:4B:8E:74:29:B5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/debb3d13-6bd1-4df5-a167-fb31118932a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b9:77:5c:ca:38:e0:84:50:22:ba:6e:0d:e1:50:f3:f3:07:
d3:ae:67:eb:3e:e3:f3:8f:56:d0:a6:ca:91:f9:c0:2f:f0:4a:
17:0e:b6:9b:18:d1:cd:b9:08:04:ef:29:e1:b8:8b:6a:12:52:
fe:ec:2d:fb:2d:9c:38:c8:f3:11:88:3f:66:a5:9d:b7:a3:ff:
c3:ae:05:d6:54:c5:cb:af:e3:06:7c:81:c4:23:d9:e8:b9:9b:
3a:a4:19:2c:01:bd:59:53:a0:3a:59:60:05:fb:25:7c:9c:dc:
04:5e:85:71:bc:65:b2:ec:09:80:d3:bf:05:d5:c3:17:53:4c:
bd:9a:2d:03:6d:ce:93:62:33:68:18:26:e6:f8:c9:56:56:32:
7a:27:df:fe:99:e7:60:0b:0d:24:80:5f:a3:8e:77:a9:d1:23:
ba:58:1a:6a:02:9e:df:67:58:bb:56:41:83:d4:c7:b2:46:03:
8c:10:59:7c:30:3e:63:7c:c2:14:c0:8b:c3:5a:c4:d6:22:65:
c4:46:bd:f3:f6:e7:0b:b5:bc:05:df:cf:79:6f:3b:d8:59:de:
2e:b0:92:9b:4a:47:a0:6e:83:29:40:ac:aa:4f:84:ac:b6:4c:
1d:37:f5:4b:e4:63:cd:1a:8b:88:4e:04:c6:ef:01:d8:0f:c9:
ab:24:e7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:11 2025 by rpki-client