Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e461ee5f-4d46-4820-a673-a0ac0fced834.roa
File: e461ee5f-4d46-4820-a673-a0ac0fced834.roa (raw, json)
Hash identifier: tDQBbTGF9V8HhJ3OuOTYsGUpEqqlv3fxKojUOzEg32A=
Subject key identifier: 72:D4:DF:24:B0:45:34:F1:34:4D:3D:56:80:E2:1D:AA:59:D4:C1:B5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4D1E033C2433F7CA895016C4E5D6972C6913FBF9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e461ee5f-4d46-4820-a673-a0ac0fced834.roa
Signing time: Mon 14 Aug 2023 00:00:00 +0000
ROA not before: Mon 14 Aug 2023 00:00:00 +0000
ROA not after: Mon 18 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1e:03:3c:24:33:f7:ca:89:50:16:c4:e5:d6:97:2c:69:13:fb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 14 00:00:00 2023 GMT
Not After : Sep 18 23:59:59 2023 GMT
Subject: serialNumber=2328ddf73bef6edccc0bc14d884f57b2827c419a6f56daba933ec1b25ad308fd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:15:48:4c:7d:2c:5c:e7:dd:59:07:a3:41:94:
b6:36:3a:d9:b7:a2:12:f4:2e:b8:9a:f2:46:bc:a2:
1d:40:4c:5d:07:12:89:af:2b:d5:29:48:d3:83:b7:
8f:e8:05:a1:d2:aa:d3:8c:f0:ee:71:a8:fc:a5:52:
93:85:08:fe:87:09:df:a4:c4:f5:53:85:ae:f7:b5:
dd:bd:b5:e5:fc:80:61:48:ac:19:c5:f9:3e:d3:72:
37:8f:15:30:19:df:78:76:99:3d:91:bf:48:88:52:
6f:04:ef:68:dc:16:e5:16:28:ce:24:bd:fe:21:e8:
1c:5f:84:da:b9:5f:f5:97:98:81:58:d6:c6:43:90:
49:68:75:68:5e:0d:89:a2:eb:d1:bf:86:6d:79:cb:
b1:73:24:fd:66:ea:3f:52:00:67:42:c0:61:08:4e:
84:d6:59:c3:97:c6:bf:b9:86:7d:a3:c7:f5:2c:2c:
2c:28:8e:50:37:d2:34:d5:89:8c:1d:05:67:61:92:
35:59:91:e9:8e:a6:59:6e:2a:57:eb:52:98:e7:9d:
fe:67:5e:7a:4f:77:11:4d:f0:3c:ad:01:27:27:c0:
b0:8a:4f:69:fe:1c:f2:6e:74:12:21:19:02:13:dc:
00:2f:96:2e:86:53:9b:b7:5e:1a:86:35:50:7d:d7:
a9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D4:DF:24:B0:45:34:F1:34:4D:3D:56:80:E2:1D:AA:59:D4:C1:B5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e461ee5f-4d46-4820-a673-a0ac0fced834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e0:b6:b7:03:0d:f6:9c:b2:8d:13:78:96:f3:9e:b7:9d:ee:
33:65:54:4b:51:2c:98:5f:3e:fb:36:89:f5:7f:1e:e2:0b:f5:
ba:49:c4:16:70:b2:ed:28:65:3b:66:0e:15:c9:ba:03:aa:0c:
e3:cd:1f:b9:bb:07:6f:dc:8b:42:fa:b5:f5:06:1c:80:7e:67:
c4:ab:e7:f7:83:5f:c1:a3:7f:bf:30:9c:12:31:20:6d:ab:fa:
14:7f:f2:bb:d6:21:2d:0c:a6:5f:e6:3c:43:16:a2:3d:09:af:
d4:da:c1:a0:cb:0e:6f:1a:f7:e7:c9:61:9f:7f:a9:00:99:c3:
e6:58:30:8b:3e:f1:f4:7a:ee:77:b4:ce:6f:60:a4:6c:9f:b1:
b2:38:c7:8d:de:e8:7d:a7:5c:6d:0b:9a:b7:f1:ac:e8:1d:b0:
ae:50:85:a1:93:96:f2:9e:99:4d:0e:f0:e1:cb:3a:22:88:a3:
38:6c:77:40:78:b2:30:61:26:13:34:1b:08:f4:32:9e:04:ca:
c4:d9:a7:81:30:a3:3a:ff:84:ea:1f:eb:68:30:36:8e:68:2c:
03:c1:ee:a7:15:9a:b6:8c:fc:7d:e2:39:8f:61:6d:1a:0a:b5:
24:62:d8:96:03:c5:28:52:a1:a1:73:b5:75:88:59:4a:c9:0b:
cc:59:c4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:00:40 2025 by rpki-client