Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e6dbbdf6-83b8-4549-a7d2-d3afe2138dfd.roa
File: e6dbbdf6-83b8-4549-a7d2-d3afe2138dfd.roa (raw, json)
Hash identifier: nzM2b7buBVuuNQmIiTFVHjFePNAYLM3Md2gOfSj3BrE=
Subject key identifier: F6:9F:44:EC:C2:D7:55:09:E5:BF:47:42:BA:FA:92:D8:CE:1B:0B:5B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6A73996352C75751D14E5961AC53389788E94B96
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e6dbbdf6-83b8-4549-a7d2-d3afe2138dfd.roa
Signing time: Sun 07 Jan 2024 00:00:00 +0000
ROA not before: Sun 07 Jan 2024 00:00:00 +0000
ROA not after: Sun 11 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:73:99:63:52:c7:57:51:d1:4e:59:61:ac:53:38:97:88:e9:4b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 7 00:00:00 2024 GMT
Not After : Feb 11 23:59:59 2024 GMT
Subject: serialNumber=dddb71bbd1d3db38d0ea6adc0f7591e5e1331faf2c2dff71bd4939910fa3368e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:65:46:e7:2a:b7:66:18:bc:7f:20:52:d3:
f3:ed:83:3c:b1:30:8d:36:21:4c:49:28:16:45:18:
25:83:35:7b:98:96:ec:02:f2:9b:31:b6:4b:d4:10:
86:b6:49:14:b3:58:cf:f1:6a:bd:91:40:b9:00:35:
53:61:8b:92:6f:80:7d:98:d2:eb:14:1c:fc:66:60:
dc:63:2f:97:a8:1f:97:2d:ee:ac:b9:a5:2f:fa:35:
93:55:e6:2f:56:5c:57:8c:78:03:87:4a:d7:bc:99:
98:96:11:00:36:4b:89:e9:77:76:03:55:9e:03:0f:
cf:c5:69:a3:4f:75:7b:33:c1:90:0f:f1:b3:73:5f:
e9:6d:6b:e5:1c:2e:b3:1c:45:02:0d:84:dc:0a:76:
61:9e:dd:e0:34:a8:ed:df:4d:10:ae:8e:48:91:ee:
cf:cb:b6:9b:11:7b:7e:cb:74:47:98:99:5d:bc:36:
ae:b0:45:32:19:99:da:78:12:90:5a:6f:6d:05:99:
f5:6e:6b:f7:01:8a:64:96:b0:2b:e9:92:02:3f:03:
e5:cf:b7:6b:66:07:1a:ec:7e:05:2c:bc:1e:3f:63:
ba:7a:26:65:cd:5e:93:aa:b9:51:56:d0:dc:7c:a7:
57:47:6d:14:a9:17:33:5c:2b:34:40:2b:14:85:f2:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9F:44:EC:C2:D7:55:09:E5:BF:47:42:BA:FA:92:D8:CE:1B:0B:5B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e6dbbdf6-83b8-4549-a7d2-d3afe2138dfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3f:fc:4f:ad:c7:23:d3:02:32:2f:21:a4:bf:e9:02:78:c6:
44:40:df:2c:8b:c1:3a:37:8d:29:e0:ce:a6:f4:21:42:3f:d4:
eb:8e:24:e8:fe:fa:62:52:4c:1f:15:2a:bc:4e:68:29:be:94:
eb:ee:ca:57:39:1c:36:14:ba:12:3d:25:19:e1:9f:e6:eb:1e:
20:f1:0f:1d:ad:3b:59:ca:26:38:83:1b:b1:74:45:ca:27:7f:
8b:2c:1c:a4:db:96:6e:4c:67:e7:58:a8:05:7f:f1:e6:f3:e2:
44:55:e1:ed:d3:5e:cd:28:cf:24:c8:5b:11:8a:90:7c:32:9d:
d7:ff:8c:db:4e:6f:5e:53:d9:35:62:93:84:16:5e:c8:38:4b:
9f:fd:4c:ea:41:23:c5:e5:ed:fb:a9:1e:77:f4:ce:bc:44:82:
ee:68:93:c3:d8:fc:a1:2d:3f:98:6f:d4:eb:70:ca:e6:b2:5a:
86:23:0f:7b:eb:51:e8:94:37:39:ea:e5:41:a3:4f:48:3c:5f:
c1:c5:00:fe:4d:8f:dd:66:bd:7a:a3:ad:01:c1:ac:f3:87:f9:
50:40:34:3f:8e:a1:2a:ed:a6:dc:74:a9:4a:d7:95:d1:c3:e1:
40:21:0c:28:b3:d9:88:9e:fb:74:03:f4:b0:37:94:c8:fa:8e:
bf:63:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:47 2025 by rpki-client