Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f22413c4-dfda-4b7a-b99b-327109c599e9.roa
File: f22413c4-dfda-4b7a-b99b-327109c599e9.roa (raw, json)
Hash identifier: pIeKzGw6cDdJicSuvWt+MsntYJ6pmvvX0F0tZZePmNs=
Subject key identifier: 99:20:6E:19:16:D1:18:5F:05:F5:A4:11:88:2A:28:83:9E:59:FE:15
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 726B8756E988970479F8241377E7D9D3F63B1C52
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f22413c4-dfda-4b7a-b99b-327109c599e9.roa
Signing time: Sat 15 Jul 2023 00:00:00 +0000
ROA not before: Sat 15 Jul 2023 00:00:00 +0000
ROA not after: Sat 19 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:6b:87:56:e9:88:97:04:79:f8:24:13:77:e7:d9:d3:f6:3b:1c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 15 00:00:00 2023 GMT
Not After : Aug 19 23:59:59 2023 GMT
Subject: serialNumber=6f46b44ac34b04f8295028fe929f6e73483cff37ed51e685ad8adb25b7167c93, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:fb:35:ce:eb:11:4e:d1:fc:59:c3:f8:69:
c6:d2:89:f9:33:88:c5:59:3b:ab:ca:25:e2:86:61:
67:a2:94:36:09:44:d9:4a:0d:54:99:de:98:2f:a1:
93:93:41:19:47:35:2b:0b:37:2b:80:82:3d:57:79:
26:51:9d:b4:c7:69:0e:26:cc:1a:ad:d6:31:cd:ce:
4a:ad:5d:9e:15:df:87:f3:1b:d7:f5:ea:ad:a2:6a:
15:b0:bc:8a:c7:54:d3:c1:13:9a:f1:e3:4a:74:e9:
f4:16:c2:2f:00:38:a3:cd:7b:0a:89:fb:3c:39:9e:
35:c2:e8:6d:4e:a0:2f:35:8d:21:8e:bd:23:bf:25:
89:c3:c1:19:ed:f6:51:02:47:ad:e8:1b:34:0c:12:
11:0b:48:fa:b9:19:9b:79:1e:b1:45:ba:30:8d:7a:
34:3a:ee:2b:eb:a3:89:34:d3:c9:f4:bf:b1:56:6f:
1c:9c:6b:78:84:64:5d:d8:bd:e3:a9:9b:a2:86:65:
da:3c:71:fa:03:9d:71:d9:b3:69:5f:5b:4c:0c:03:
53:1a:bc:fe:67:cd:33:5e:78:52:91:84:bf:7b:3f:
7e:00:33:38:d7:7b:bb:5b:82:32:4f:c1:95:b9:41:
21:e5:e6:ea:91:6b:92:40:23:c6:af:c2:5b:e8:bf:
43:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:20:6E:19:16:D1:18:5F:05:F5:A4:11:88:2A:28:83:9E:59:FE:15
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f22413c4-dfda-4b7a-b99b-327109c599e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:da:79:1a:71:a6:8b:0d:ab:a2:09:3c:c8:78:c9:8d:ea:31:
f8:bd:f4:bd:db:d4:0b:32:a5:aa:1f:67:af:f3:74:5f:14:3b:
c5:4e:c5:d7:20:57:6e:1b:71:5d:5a:36:b6:86:ae:87:24:6f:
5c:f0:a3:66:ef:52:97:82:99:5f:c5:88:3f:0b:97:99:b1:ad:
3b:b8:cd:40:48:cb:29:d9:2f:ca:a3:0e:39:ea:21:da:4c:8b:
59:09:02:6e:e1:06:e3:7c:7f:49:32:2d:9f:05:fa:b7:5e:da:
6e:0b:b2:40:a6:9c:5f:ff:58:3a:bb:23:c1:6c:8e:ad:84:ba:
8a:9c:ea:de:08:40:5d:52:57:8b:98:67:c0:f1:5d:7e:1e:5b:
5b:1c:66:05:3e:4c:62:54:35:cf:dc:c0:20:cc:68:1b:10:89:
05:d8:2d:d2:fe:f9:ee:56:de:4f:97:c2:f5:1f:ff:54:35:6b:
7b:cf:30:98:68:8f:18:34:f6:60:e6:3d:34:c6:0f:e5:ad:2e:
e5:5f:d4:60:5e:cf:d5:89:75:31:d5:3e:97:f6:7a:e0:66:4c:
e0:33:d9:93:bf:8b:c3:ce:14:85:41:f6:78:45:31:62:8d:b5:
f0:13:d3:56:28:8e:e0:9f:ee:15:6f:ba:56:85:e2:be:af:20:
7d:6c:91:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:10:47 2025 by rpki-client