Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8aae47d-c4c0-48f5-9dfb-5ac8b5634bb1.roa
File: e8aae47d-c4c0-48f5-9dfb-5ac8b5634bb1.roa (raw, json)
Hash identifier: wazBq/UqcRdQhb1cWOZMzR3PdCr27fPUcFpCug693q0=
Subject key identifier: 92:B9:38:E5:4D:0A:EF:17:34:9D:5F:82:7B:99:26:98:0E:BD:E4:AC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6E2B5E408F629DE07818DA972B21D48BE52C3D02
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8aae47d-c4c0-48f5-9dfb-5ac8b5634bb1.roa
Signing time: Tue 17 Oct 2023 00:00:00 +0000
ROA not before: Tue 17 Oct 2023 00:00:00 +0000
ROA not after: Tue 21 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:2b:5e:40:8f:62:9d:e0:78:18:da:97:2b:21:d4:8b:e5:2c:3d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 17 00:00:00 2023 GMT
Not After : Nov 21 23:59:59 2023 GMT
Subject: serialNumber=b9fdf7d3e5c8848810c79e09b19216f66161e4ee4d75137f9d80b078be35258f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:80:4f:15:cf:42:cd:9a:22:ab:fa:fc:ef:
14:13:ef:b9:1a:fc:6e:de:99:e1:17:91:10:22:bb:
47:be:b2:d4:d6:27:95:f4:58:80:93:e8:43:51:ff:
f3:9e:7c:17:99:f5:0a:0e:91:9c:2f:5b:25:88:0b:
0a:bc:6c:f1:e0:a9:64:0c:b3:b7:53:23:7f:ea:16:
02:3f:63:bf:c1:7d:78:bf:5e:f3:28:c9:4d:a7:34:
ec:c4:fb:eb:01:c4:44:64:e0:84:f4:ae:2b:a1:f6:
fc:b6:17:27:a2:57:71:8e:2a:5d:4f:ff:c4:b6:f3:
fc:7b:c2:d4:cb:03:a3:5e:ed:4f:07:dc:f8:1c:b2:
2c:f9:81:8a:23:df:90:74:1a:23:00:d8:87:3f:14:
58:a2:bd:ac:7b:e8:a4:95:4a:4f:b4:63:fb:0d:03:
f8:73:ce:fc:43:99:63:ab:90:fc:bc:f3:73:b1:94:
64:dc:bf:52:8a:5c:fc:c2:a1:41:82:8f:b1:a9:3b:
3e:33:f2:ac:96:d2:9a:d7:f3:cd:93:3f:5f:3c:4a:
e5:be:33:96:e3:c2:de:65:df:d5:7d:be:5c:02:cc:
55:2e:38:64:32:ad:56:05:fc:cb:c1:4f:b3:44:3a:
90:52:ee:6a:2c:44:28:8e:dc:f7:f4:35:03:e4:07:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B9:38:E5:4D:0A:EF:17:34:9D:5F:82:7B:99:26:98:0E:BD:E4:AC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8aae47d-c4c0-48f5-9dfb-5ac8b5634bb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1d:7f:d3:8f:75:b7:a5:ac:da:e2:20:71:65:4b:aa:54:c7:
dc:38:f9:c3:a1:4a:73:67:8e:ad:2e:53:56:9d:cb:0d:78:4e:
77:a9:de:dd:8a:e8:74:f1:93:a5:ee:50:da:d5:aa:5c:e2:e7:
e0:64:c7:ab:15:84:78:06:f2:d7:3b:80:48:e2:35:b6:67:6f:
1d:ed:b7:8a:56:15:fd:d1:1a:e5:9e:45:26:c3:49:7e:cf:45:
09:70:c6:e1:ed:fc:f6:90:05:13:62:39:f1:0c:00:b4:e4:ca:
c2:68:b3:88:06:65:68:83:aa:8f:17:53:e7:ac:cc:21:7a:2f:
8f:3e:51:41:4b:01:0f:e2:55:e2:ab:cb:4f:c1:c6:f0:74:24:
04:2a:31:27:f6:30:05:23:20:22:7f:02:63:5c:19:65:ed:32:
aa:cc:32:f6:de:ce:10:a6:05:20:8b:bd:dc:b7:ed:22:3a:b9:
b1:a6:d7:bf:24:9c:f1:67:8c:19:c9:9e:64:a0:ce:20:a8:78:
23:d1:37:a6:d8:7b:47:66:db:f8:0f:fd:f0:e1:42:c6:a9:7d:
f4:fb:e5:9d:8d:cd:60:1b:18:74:05:69:a5:0f:0d:32:ca:74:
57:02:b0:8d:6c:39:e3:ec:1c:9f:82:b6:f6:79:94:e9:75:22:
49:6f:f0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:57:57 2025 by rpki-client