Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e2c1379f-ecb6-424b-8f41-860f6d2f1f96.roa
File: e2c1379f-ecb6-424b-8f41-860f6d2f1f96.roa (raw, json)
Hash identifier: vrSrh4PaRX6JgAlRd2EEYqSS7V7wXC/h1TphjW15TzU=
Subject key identifier: 19:F7:7C:55:15:5D:C3:B6:45:3E:26:81:C2:E1:E6:FF:D9:39:95:EC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 22781E4D1519CD07702F767EFA8B1A5A84BEE4A2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e2c1379f-ecb6-424b-8f41-860f6d2f1f96.roa
Signing time: Tue 31 Oct 2023 00:00:00 +0000
ROA not before: Tue 31 Oct 2023 00:00:00 +0000
ROA not after: Tue 05 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:78:1e:4d:15:19:cd:07:70:2f:76:7e:fa:8b:1a:5a:84:be:e4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 31 00:00:00 2023 GMT
Not After : Dec 5 23:59:59 2023 GMT
Subject: serialNumber=04b80b5882310964226d56e683f1409ae82206f23173b997ff902ee20d017a33, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a9:d7:f1:c1:26:84:54:f0:56:ea:8e:12:20:
13:e0:5e:f5:a7:fb:9f:e2:18:c8:7f:86:2a:4a:06:
e2:ff:0e:8d:28:3b:e7:03:94:3c:a5:78:c7:3a:0b:
5a:c3:93:08:f4:47:13:13:01:2e:2a:8b:d8:e9:34:
80:3a:83:aa:4f:cf:23:4c:3f:4d:90:9d:21:fb:20:
1b:ec:e5:40:9c:28:e3:6a:08:27:58:42:a4:03:8b:
3d:7c:da:3b:11:d5:65:2e:bb:7a:6b:22:0a:fb:0e:
dc:5a:aa:39:1c:89:ba:ab:de:57:44:6b:b1:ff:75:
a1:0c:50:2c:1f:9e:c9:84:11:ee:52:38:8b:f1:a0:
44:9b:cc:7f:0e:25:df:a5:a3:c8:68:0d:b1:4c:fe:
17:60:4e:96:0c:60:90:18:78:94:49:3f:06:33:30:
c4:e3:f3:51:56:63:c2:ee:8a:cd:ae:40:12:72:fb:
b2:c2:0a:28:78:ff:7a:0f:56:06:bd:6e:54:dc:5d:
e4:dc:3e:e8:d7:74:50:0d:11:eb:32:11:28:2c:f6:
73:18:eb:d4:8c:4c:ce:84:b7:b3:e7:c4:13:e8:d1:
32:4b:02:e8:99:4b:e9:96:e7:40:67:e3:da:82:2b:
b8:d6:28:d8:a2:39:ed:ce:b2:bb:d3:c3:74:db:9a:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:7C:55:15:5D:C3:B6:45:3E:26:81:C2:E1:E6:FF:D9:39:95:EC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e2c1379f-ecb6-424b-8f41-860f6d2f1f96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
96:03:93:3c:ab:27:fb:c9:d8:8b:8e:c7:95:96:fe:4f:6d:3c:
79:27:f9:36:c1:7e:5b:07:fe:41:e9:79:54:72:03:89:f1:75:
f5:30:3c:a0:2a:c2:8e:53:68:8e:e7:d8:dc:79:97:81:25:20:
33:3d:ee:70:f2:45:cc:a7:61:fe:65:25:b4:a9:64:ad:46:1e:
b2:d6:ab:41:e6:7b:26:d6:00:a3:2b:e3:ee:f3:72:36:ea:c9:
8f:10:9f:64:73:82:42:46:b9:c2:e2:15:e3:d3:9e:6e:22:ab:
4b:9b:7a:66:52:fb:76:6f:70:73:b0:8b:08:9e:da:cc:3e:34:
27:5c:0d:7c:94:43:57:d5:10:da:1a:3b:ef:2c:0c:12:e4:c9:
7d:bc:10:0e:fc:2d:dd:5f:3d:da:6d:a4:2f:05:48:09:b4:38:
45:e9:a5:84:b6:a7:e7:70:31:ae:8a:65:98:e8:bf:22:03:39:
e9:a7:ca:fd:78:48:07:c7:c4:ac:45:07:1c:8f:c0:89:a9:10:
60:ce:3d:3f:7c:ad:06:2c:41:1b:f2:3b:9c:98:15:e1:66:ad:
02:d4:71:3a:38:59:ea:f7:9a:b2:45:6c:1b:22:22:6e:e8:9d:
1f:25:5a:f2:d4:03:e5:f3:f3:84:cb:95:65:21:2d:c7:dc:69:
88:79:89:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:07:05 2025 by rpki-client