Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e4a6ae30-a589-440c-bd74-5e237926feea.roa
File: e4a6ae30-a589-440c-bd74-5e237926feea.roa (raw, json)
Hash identifier: O8I6VyHzBih4W0Grop5bVABBXgFi3uWgsTPoW1obHn8=
Subject key identifier: 2C:CF:83:E1:9D:53:F5:39:B7:F9:1F:58:C2:52:32:38:12:C3:13:AA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 687022E2533820C3CCFDD8D580F3758FAC166B9E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e4a6ae30-a589-440c-bd74-5e237926feea.roa
Signing time: Thu 02 Nov 2023 00:00:00 +0000
ROA not before: Thu 02 Nov 2023 00:00:00 +0000
ROA not after: Thu 07 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:70:22:e2:53:38:20:c3:cc:fd:d8:d5:80:f3:75:8f:ac:16:6b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 2 00:00:00 2023 GMT
Not After : Dec 7 23:59:59 2023 GMT
Subject: serialNumber=c1784af87d42482c68d30d46599bd1c519a89ca315ee6a96ef956a22b469de58, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:51:f3:fa:71:2e:27:58:86:31:7f:df:aa:
70:83:18:1b:fa:45:47:f8:03:1c:01:24:b6:93:d3:
1e:1b:31:bb:7f:d8:d9:84:29:ee:c7:75:9e:f4:ca:
15:4e:36:c4:6e:a8:6e:be:86:7b:d5:7f:2f:66:8f:
29:c8:3b:c2:80:b0:b5:8d:bd:e0:3c:b9:40:7a:be:
91:d2:c2:e5:be:01:5b:0e:73:93:22:87:47:cc:cb:
2d:a9:31:cd:b3:b5:5b:4d:4d:7c:f5:3b:f2:cc:99:
bf:a8:f2:ef:c4:fc:21:ae:ed:9f:12:ad:62:4a:39:
01:84:c5:1f:58:2a:e3:d7:db:97:1c:3b:38:9c:0d:
1c:9d:82:c7:2a:0d:b5:3d:37:6a:ec:5d:4d:32:ea:
04:5b:64:ce:28:4b:d9:65:33:b7:5f:02:d1:75:22:
29:1c:43:65:d4:d4:89:ea:6a:57:2b:ab:13:87:9f:
62:b5:ac:78:16:41:56:7c:d4:49:07:f7:e8:48:b2:
8c:38:4c:df:75:29:c5:32:c0:b8:10:18:7b:46:5d:
ac:9d:d1:fb:92:86:df:91:00:80:d3:a9:d9:63:fe:
eb:f3:42:69:6b:0d:a3:9f:51:fe:70:f3:ed:eb:16:
ec:95:e4:b8:ea:61:64:9a:f8:ec:85:8c:b6:8c:2c:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CF:83:E1:9D:53:F5:39:B7:F9:1F:58:C2:52:32:38:12:C3:13:AA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e4a6ae30-a589-440c-bd74-5e237926feea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:34:cf:af:37:58:04:83:19:c2:6e:1b:8c:16:66:58:2f:d9:
cd:f5:7b:ce:1f:83:1c:08:07:8f:a7:c3:24:50:db:f7:e8:f0:
98:c9:2b:b9:9b:73:66:e3:43:de:61:d6:75:fd:de:53:21:f8:
6e:d3:8a:39:85:81:4c:cb:11:3c:08:bc:65:12:40:8d:6b:11:
2f:a4:63:f3:09:b6:37:b9:e2:8c:27:b2:af:2a:9f:dd:5e:00:
a7:c4:45:ac:cb:fc:7e:4d:14:bf:2e:2b:fa:f4:b6:85:37:68:
19:75:6c:83:71:0a:26:97:fa:23:d2:c6:99:68:50:a4:60:0b:
f8:92:69:51:4d:53:db:24:e6:b9:36:d4:6c:3f:dd:7d:9a:0b:
6c:7f:3a:6a:8c:97:f3:33:a4:52:9f:84:4f:f9:8d:da:7c:49:
1d:40:47:6e:db:a0:8d:58:b0:3a:86:10:b0:98:85:d5:4b:cd:
f9:c1:f6:22:d2:7a:ac:77:74:9f:69:f3:b5:0f:fe:b1:f1:bc:
05:d2:67:e9:78:76:12:95:12:b7:21:60:f8:2c:ef:7a:71:e1:
62:53:bd:3c:f4:f2:2a:d9:34:84:12:d6:40:9e:e8:a0:81:e7:
9c:a3:5a:6c:d1:e7:ab:2c:07:1b:8e:a6:90:e6:2c:af:8b:e9:
00:4c:2d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:22:11 2025 by rpki-client