Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f2cb32a1-9d9e-4226-85d5-0c61af192597.roa
File: f2cb32a1-9d9e-4226-85d5-0c61af192597.roa (raw, json)
Hash identifier: VrHjsWt1MlyAyhlCKBOVi80m6EV00OQabb7+0FVwNz8=
Subject key identifier: 0B:21:6C:C4:80:B4:DA:60:C8:7E:67:61:AE:7A:56:DF:03:38:FC:F4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0AE8CBECFD4665D2D6F0B435ED41CBF1443584FA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f2cb32a1-9d9e-4226-85d5-0c61af192597.roa
Signing time: Wed 16 Aug 2023 00:00:00 +0000
ROA not before: Wed 16 Aug 2023 00:00:00 +0000
ROA not after: Wed 20 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e8:cb:ec:fd:46:65:d2:d6:f0:b4:35:ed:41:cb:f1:44:35:84:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 16 00:00:00 2023 GMT
Not After : Sep 20 23:59:59 2023 GMT
Subject: serialNumber=2bfa48fbbb708adfe2fce3eb27e65475bde2a0a32e181278b2c14c8b885412aa, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:72:f2:c2:6c:3a:63:1a:9b:78:e7:bb:c4:
c4:e3:a6:04:a0:c6:12:1c:ca:94:df:0b:df:7a:b2:
ad:5c:ff:bc:3b:ec:8b:61:e9:aa:e1:e4:52:26:54:
94:75:1a:55:e4:75:78:7e:80:c9:d1:57:18:8c:52:
2f:58:41:a4:66:68:57:86:26:b7:da:d6:cb:3d:b9:
83:df:95:ba:c5:04:d1:d2:60:e7:fb:a1:8e:21:6f:
f6:40:81:01:37:c8:22:08:44:b8:8d:09:b2:d2:81:
7c:31:51:e6:29:75:16:c5:27:8b:f6:09:07:18:12:
9c:c5:94:8c:fa:df:d3:e2:1a:97:7e:83:b8:1f:52:
a6:05:44:12:cc:62:a1:ae:fc:a7:01:66:e2:43:76:
04:c6:3e:a3:b8:52:f6:49:ad:16:d3:11:5c:7e:8b:
03:0a:4e:78:39:02:8d:7b:62:34:4c:15:ac:03:e7:
bd:b7:b6:1a:60:6f:54:54:15:95:3b:de:bf:fd:f3:
14:2f:30:a1:06:f6:9e:77:58:82:1f:53:1a:48:13:
52:34:d7:6d:6a:59:c7:98:47:d0:57:a3:18:ab:0a:
24:84:c4:5c:4f:97:91:d2:d0:45:ce:6b:da:f6:5e:
a8:43:03:ba:04:cc:ee:c7:c6:fe:3f:84:48:86:e5:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:21:6C:C4:80:B4:DA:60:C8:7E:67:61:AE:7A:56:DF:03:38:FC:F4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f2cb32a1-9d9e-4226-85d5-0c61af192597.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
78:fa:98:19:03:4e:a0:50:bf:55:3f:f3:2b:dd:f5:8c:69:44:
ec:0f:0b:b0:0d:87:f9:e8:4c:e0:d9:4d:7b:38:c1:4c:af:cb:
c7:f1:ec:dc:d2:fd:96:ea:2d:86:9d:7b:c2:2e:7a:53:a8:d9:
ac:1d:07:b9:3c:02:a4:b7:27:82:28:13:e5:aa:eb:48:14:a7:
55:ea:92:9e:5c:6e:e1:79:ff:27:80:d9:91:c2:e8:40:16:a4:
35:23:70:e1:b7:dc:a8:d8:99:42:f8:22:4b:b5:61:1c:bc:72:
4c:a7:42:6f:c7:ae:b8:79:21:59:71:91:86:e3:9b:b8:91:6a:
25:94:f6:a9:7b:df:d5:69:b0:b2:4c:ea:9e:5e:d3:c2:f9:c2:
57:5b:1b:3b:8d:97:70:65:99:ae:8a:ed:4a:7d:c0:4c:d2:92:
58:84:2c:a4:22:8c:c8:0d:ec:07:c2:b4:34:df:27:9b:85:81:
59:a7:de:34:37:bd:10:e1:33:c3:c5:98:6d:41:c3:78:38:1a:
87:af:ad:e3:36:23:7c:16:f7:7a:bb:7c:04:ea:bd:6e:92:7f:
75:89:00:4f:5a:5b:bb:33:05:79:ba:fd:77:75:00:51:84:15:
0d:26:29:40:c7:fd:97:00:6b:5b:1b:22:88:6a:2c:d6:a8:97:
41:1f:12:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:03:11 2025 by rpki-client