Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e6ffef1d-4851-488f-904a-a135054e50a1.roa
File: e6ffef1d-4851-488f-904a-a135054e50a1.roa (raw, json)
Hash identifier: YxojwTXCoFL+CGg7yJ76XqQPnH3Jlr1KjsKa2pK4d48=
Subject key identifier: A9:C1:E0:35:D3:A7:62:30:3D:2F:C5:17:AD:59:5C:28:E3:4C:C0:93
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 281A659F9E797EFF0B58E51576B9ADD8ED352020
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e6ffef1d-4851-488f-904a-a135054e50a1.roa
Signing time: Mon 04 Dec 2023 00:00:00 +0000
ROA not before: Mon 04 Dec 2023 00:00:00 +0000
ROA not after: Mon 08 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:1a:65:9f:9e:79:7e:ff:0b:58:e5:15:76:b9:ad:d8:ed:35:20:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 4 00:00:00 2023 GMT
Not After : Jan 8 23:59:59 2024 GMT
Subject: serialNumber=bc0ada87033dd98dd0ec54243fecb91f563622e39fa010412a0236cc7e7655fe, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:3c:89:31:f7:6a:7d:70:cf:a7:7b:61:23:
81:8f:3d:28:1c:ec:4a:bc:d2:43:fe:5c:c4:1d:a1:
5d:c5:92:e4:cf:6f:8a:78:08:0b:e0:f2:3c:4e:51:
74:c6:40:10:be:a5:07:ab:7f:22:8a:28:71:55:48:
d7:75:18:97:35:39:f0:13:74:28:1c:56:a1:ea:bd:
15:89:85:a6:8c:0d:d1:5e:4a:53:b0:a7:01:3f:bd:
90:27:da:64:14:3a:0e:0f:30:f4:fb:05:2a:37:12:
21:c9:a0:0c:18:b5:05:99:5e:47:83:69:eb:47:c1:
fb:27:b7:37:7c:3a:c3:f6:90:ef:7e:7e:10:ba:3a:
a5:1c:55:77:d8:8d:27:b2:75:ed:0f:f8:ab:99:04:
a7:06:47:5f:c3:a2:72:82:c9:39:c4:59:df:ec:24:
5a:6f:cf:0b:24:29:7f:92:fb:e8:41:90:74:64:fb:
0d:b1:bf:fd:7e:4c:88:94:e8:6f:46:1f:c1:3a:b8:
b7:32:6a:25:52:9a:73:66:c7:b2:f6:04:65:98:30:
28:14:15:56:1a:14:89:92:14:e3:84:a0:65:48:28:
17:1e:e5:da:04:da:20:ea:da:4b:f0:b9:44:7e:11:
bc:bf:de:04:26:13:ea:a9:bf:cf:93:de:33:f5:2c:
3d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C1:E0:35:D3:A7:62:30:3D:2F:C5:17:AD:59:5C:28:E3:4C:C0:93
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e6ffef1d-4851-488f-904a-a135054e50a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:68:43:80:46:48:cf:80:24:7b:8e:7e:34:3e:33:1e:b7:85:
98:13:ab:cc:2b:77:a5:3d:9f:a4:e1:c7:39:07:74:33:65:74:
eb:52:ed:49:b1:d6:3f:6f:9d:1b:10:30:32:aa:4f:55:4c:b9:
b8:c7:a3:a5:c7:60:9d:05:02:ab:98:f0:d9:bc:6d:88:8f:ea:
14:a5:67:8a:2a:6d:f4:87:40:5d:27:08:5b:1c:7d:7a:43:b9:
f5:8e:7a:3a:96:48:aa:b2:15:87:65:1b:ce:f0:7b:b4:83:58:
2d:7e:2b:16:d7:78:d0:3f:a6:1e:5a:53:1b:5d:d3:21:e8:2f:
93:aa:d1:9a:ef:7c:c0:b1:64:1e:31:d5:ab:b2:63:b2:e7:4d:
9b:2b:b4:56:9d:84:4b:0b:22:59:22:31:a4:50:c4:7a:c0:bf:
75:be:bc:e5:13:f9:fb:43:34:03:79:3a:e7:eb:2c:75:e1:08:
28:42:f5:0d:96:8b:5a:ba:5a:91:4b:07:41:fe:0b:17:ee:ab:
3f:15:e3:f9:cf:b4:e4:60:c0:93:51:ca:11:2f:00:5c:62:fe:
7f:ec:82:6e:d4:42:6c:45:b2:55:36:1e:46:0e:88:aa:13:3d:
51:ea:3e:58:d6:1c:16:fc:8c:62:6e:f5:fc:28:8c:76:9a:06:
20:34:8d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:09:11 2025 by rpki-client