Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec56d909-48b2-4763-8e7c-449527f9d71b.roa
File: ec56d909-48b2-4763-8e7c-449527f9d71b.roa (raw, json)
Hash identifier: EK3nuij80fnZx7aJxFlbzLGlcIsb7u7lBYSG5Ghgua4=
Subject key identifier: CD:4F:22:97:99:4C:8F:A3:65:E3:8F:96:B8:3C:E2:2D:65:70:D6:23
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 50A5C49A9FC25C20738BD53F1010E05CED324F02
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec56d909-48b2-4763-8e7c-449527f9d71b.roa
Signing time: Sat 16 Dec 2023 00:00:00 +0000
ROA not before: Sat 16 Dec 2023 00:00:00 +0000
ROA not after: Sat 20 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a5:c4:9a:9f:c2:5c:20:73:8b:d5:3f:10:10:e0:5c:ed:32:4f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 16 00:00:00 2023 GMT
Not After : Jan 20 23:59:59 2024 GMT
Subject: serialNumber=a94f0e36eb661d916ac3c95eb891a5b364c9b593de8a8bb820cb25ea8f4dcea7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c9:4d:d3:e4:e6:38:e1:d4:3e:4e:02:c6:46:
bc:4c:03:c6:0d:da:95:ed:6f:b2:f2:a8:a3:70:e9:
d0:5a:78:b9:00:5d:7c:61:a2:06:50:a4:8a:ab:98:
a0:af:77:c2:35:39:71:bb:2c:4c:dd:ce:ab:0f:d1:
e1:76:0e:0d:e7:b6:8c:ab:b5:8a:4c:7a:71:f5:f9:
b0:f5:f9:5c:d4:61:2a:39:7b:0b:47:42:3a:33:ef:
fa:d0:a7:96:3a:5d:c1:c1:91:d3:db:3f:37:36:7c:
ef:52:86:2e:40:79:97:d6:09:cc:37:c6:bc:27:da:
45:e6:27:4a:a3:b1:f3:8c:42:94:09:61:5b:52:64:
8e:20:13:55:0a:25:8a:e6:8b:e3:a9:64:2c:3f:a9:
59:7f:2e:0a:06:98:af:22:ef:44:d3:7d:7a:7a:51:
d1:9e:24:39:94:c5:b1:0c:20:8f:0a:71:8a:33:50:
6e:49:92:98:2f:93:73:b1:cb:b9:85:78:a0:ab:d6:
18:86:a2:eb:be:63:b5:0b:1c:d0:77:4c:25:a5:6c:
56:b6:15:a9:c9:8a:83:42:07:bb:db:f2:04:4f:cc:
1e:91:4f:4c:27:13:44:ed:53:8f:e0:db:c6:5c:67:
c4:4d:eb:56:84:6a:58:80:7b:ab:24:a7:1d:fd:d7:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4F:22:97:99:4C:8F:A3:65:E3:8F:96:B8:3C:E2:2D:65:70:D6:23
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec56d909-48b2-4763-8e7c-449527f9d71b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3d:b9:64:88:1e:7e:75:b2:c7:b7:a9:d7:97:39:b4:90:34:
6a:d2:f6:1e:de:2a:23:77:9d:0e:62:94:81:d4:af:5e:38:7f:
26:e6:b2:fb:ed:6e:60:5d:be:5d:8c:11:78:e9:e1:8f:be:be:
25:61:a2:cc:fa:d4:02:4c:87:da:f5:01:8d:f1:35:f7:0b:b1:
9d:b2:9a:bc:7f:4d:04:a3:f2:46:26:61:6d:7e:71:09:7c:64:
95:ad:57:1f:48:97:88:79:c2:fa:89:6f:28:be:2c:00:93:48:
b4:8d:8b:1d:5c:52:37:5c:77:e3:2e:da:e6:f6:52:08:ba:13:
03:d3:39:c2:73:cb:62:31:42:0c:a9:63:77:0d:c3:38:32:a3:
6b:81:e4:86:b7:0a:8f:05:26:4c:61:1d:b4:3e:d5:c9:c7:f9:
8e:d1:7c:dc:ce:0a:42:c8:5c:46:bd:af:56:5a:7f:25:4f:1e:
8c:ac:92:c9:0c:c1:52:cd:c1:83:20:10:de:f2:55:53:72:30:
c4:ea:75:7b:63:d5:ea:c8:66:81:1f:7f:2b:88:fe:9f:69:de:
4e:a6:0b:2e:1b:34:05:04:c8:b7:35:d5:20:d1:d0:0f:88:4c:
96:bb:34:fe:ea:20:f8:40:53:7a:6e:29:58:e5:85:af:ec:70:
a9:87:33:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:13:16 2025 by rpki-client