Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f17f5617-d1c7-4156-b770-dfc2b48163e7.roa
File: f17f5617-d1c7-4156-b770-dfc2b48163e7.roa (raw, json)
Hash identifier: f9zX5pvDUg6J0xPhBhnLz5EzuCDfFrHr4q8fEs+JrV8=
Subject key identifier: D3:A8:14:7F:82:61:D4:A7:EF:66:3D:10:78:59:72:B7:8D:AB:8B:06
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 25BAF02923E2EDCC2A458D29F9901E4D72C6FD2B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f17f5617-d1c7-4156-b770-dfc2b48163e7.roa
Signing time: Wed 10 Jan 2024 00:00:00 +0000
ROA not before: Wed 10 Jan 2024 00:00:00 +0000
ROA not after: Wed 14 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ba:f0:29:23:e2:ed:cc:2a:45:8d:29:f9:90:1e:4d:72:c6:fd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 10 00:00:00 2024 GMT
Not After : Feb 14 23:59:59 2024 GMT
Subject: serialNumber=ba27427c5a6dd509b2b1c1c0f3bfb6015b01ed0fa66c0dfc2a5c91900759888e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:30:35:7d:c2:3d:2f:de:60:f1:37:d0:44:
c5:33:b7:d6:3d:8b:d2:a1:32:10:64:41:3e:63:71:
54:43:d7:5c:c5:58:88:3a:17:0a:b9:33:74:dc:ce:
b2:3e:f2:64:54:ff:ea:23:86:70:5d:18:6c:6d:2d:
98:65:0c:54:74:85:25:1c:a2:23:00:1b:c1:34:0d:
8a:c9:f2:49:3f:a2:aa:18:90:6e:2e:2e:44:27:c3:
e7:cf:c5:9c:45:5b:91:ac:d1:35:de:3e:1b:7d:92:
0d:77:38:1d:2d:7a:8e:46:b8:f2:ac:1a:ab:cd:e1:
1a:9e:5a:60:8e:94:60:a3:7b:6d:e8:c7:de:b4:51:
74:97:7e:95:57:c4:34:0b:cf:59:f7:d1:c7:96:ec:
8d:70:8e:06:82:7b:f0:bd:30:e8:84:c4:08:7d:46:
b4:ea:32:70:95:04:75:56:46:4f:12:ef:f3:13:88:
3c:54:57:f7:5c:25:76:9e:04:3b:67:02:ed:1e:3e:
7c:be:38:ea:89:ca:96:74:24:e5:43:36:73:53:b1:
e1:65:a7:8e:8c:8c:90:ee:35:f0:41:ae:09:fd:42:
c5:6a:21:24:8d:d4:7e:e0:49:04:2a:05:f5:7b:a8:
fd:06:ec:98:a7:5a:7b:eb:0a:ce:f9:a8:c3:08:f7:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A8:14:7F:82:61:D4:A7:EF:66:3D:10:78:59:72:B7:8D:AB:8B:06
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f17f5617-d1c7-4156-b770-dfc2b48163e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a5:81:7f:dc:b4:c4:8a:49:4d:4f:08:e1:45:d3:03:0f:ce:
0e:56:a0:32:fd:2d:4a:2e:40:78:da:21:76:b1:7b:1c:68:eb:
3a:f5:a9:a6:08:9d:52:d7:10:df:17:0a:d7:90:71:f4:4c:c9:
34:28:10:5a:b5:de:88:e5:35:5e:5f:b1:74:44:40:a3:a4:d0:
f0:a8:93:c8:59:bc:6c:55:3f:08:98:00:cb:e6:0c:cc:c8:ac:
c6:41:eb:c5:23:da:e6:e8:95:4b:02:15:5a:03:bb:0c:09:5b:
2f:b6:b0:c1:f9:f5:ec:be:b8:2e:08:e9:3d:63:3b:44:11:74:
2e:a2:6a:94:be:b3:96:ed:50:36:81:5f:4e:55:66:78:26:86:
f8:18:b3:3e:f5:29:3b:b1:75:cd:aa:e4:d5:c4:0f:13:29:ce:
09:f4:2e:33:c6:16:20:26:94:0b:ec:13:54:0a:66:c0:d8:4b:
d0:bc:aa:db:17:d7:a4:ea:1c:5d:20:1b:4b:68:58:b2:15:28:
84:4d:2c:d2:86:5b:f4:88:06:1d:9c:90:e8:7c:07:82:82:73:
aa:9f:3e:95:d3:fc:9f:2a:91:29:1f:a2:d9:27:ac:4c:d1:e2:
61:21:13:db:0e:3d:80:d6:28:cd:f6:d6:17:d2:63:f6:fa:de:
2e:ea:3d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:35:20 2025 by rpki-client