Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f329ff7a-54eb-42e8-80d9-6b0ec38cb369.roa
File: f329ff7a-54eb-42e8-80d9-6b0ec38cb369.roa (raw, json)
Hash identifier: D6/sWGwBhSq4M8BWQ451j94RRYvOkSD3N5QeYLdiXSQ=
Subject key identifier: 21:0B:A6:1F:59:E6:AC:24:AF:65:D4:90:60:B2:FD:61:01:08:39:AC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0253C52528AE8B34AE516666B346D0E27813C027
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f329ff7a-54eb-42e8-80d9-6b0ec38cb369.roa
Signing time: Wed 06 Dec 2023 00:00:00 +0000
ROA not before: Wed 06 Dec 2023 00:00:00 +0000
ROA not after: Wed 10 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:53:c5:25:28:ae:8b:34:ae:51:66:66:b3:46:d0:e2:78:13:c0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 6 00:00:00 2023 GMT
Not After : Jan 10 23:59:59 2024 GMT
Subject: serialNumber=58cda5814b477d7b2f989dbcb81abc7f147f3e945a3deec50e42644c460ceb70, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:da:e5:60:eb:cd:1b:c0:54:a2:f7:d3:75:96:
40:3f:5e:ad:84:1b:02:07:e7:b7:c4:95:72:84:07:
e7:60:02:4c:53:69:a9:32:bc:22:de:eb:8e:00:18:
1b:c1:f4:7e:11:6e:84:a1:15:36:ce:76:50:74:69:
05:31:65:c6:af:56:3b:96:f1:9b:e8:d2:2c:ba:69:
a6:00:cc:23:cd:e2:bb:78:50:ae:05:f1:e6:48:32:
1f:cf:a7:fd:f5:8e:e9:da:36:8e:ec:a9:36:72:b2:
69:e3:96:c9:3c:36:72:1e:21:9a:5f:09:d1:89:51:
26:ac:b3:48:c9:7e:5c:fc:5c:b8:93:c2:33:2e:21:
2e:40:a4:8c:f7:d9:1e:92:eb:da:6d:77:70:2b:42:
d9:b9:31:db:d6:ae:0c:e0:b4:08:b1:5a:a2:a2:e9:
45:78:3d:23:c4:ec:0e:3d:64:13:31:bf:7e:1e:8b:
83:6a:7e:87:7f:7b:9e:2b:d6:56:bb:57:b0:d8:22:
44:26:9d:6e:eb:b1:60:82:d0:6c:f0:08:8d:3d:e3:
45:11:52:12:c1:43:16:3b:04:33:11:8c:8a:a5:3f:
4b:f3:c2:00:8b:81:b0:55:a9:5c:96:d0:ca:34:ff:
fd:d1:35:17:89:2c:83:6c:0b:74:0b:0a:5b:3d:cb:
40:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0B:A6:1F:59:E6:AC:24:AF:65:D4:90:60:B2:FD:61:01:08:39:AC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f329ff7a-54eb-42e8-80d9-6b0ec38cb369.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1f:f0:d1:45:4f:f0:bd:96:63:fc:6d:b2:09:50:fd:47:fe:
b1:b7:8e:10:33:79:f4:90:1b:d7:4d:40:51:ef:61:f6:a2:d5:
76:4d:1b:f9:95:ba:2d:48:6b:ac:f1:56:ce:fe:bd:b2:ad:40:
ed:e7:c1:46:ad:0a:e6:48:49:06:ce:c4:f7:a0:17:17:a7:81:
fa:19:42:58:ae:a2:2d:a2:30:ae:b9:53:74:65:88:8c:67:d5:
22:31:0b:86:89:1b:ec:f6:0b:88:0b:07:e1:7c:3d:50:7f:a9:
e7:c8:9c:19:eb:48:00:d0:71:51:36:1b:9f:b7:f4:bf:ba:10:
b9:1c:1f:7b:c3:67:66:cc:01:df:f5:ff:45:ac:fa:bd:44:54:
44:b1:4e:9f:18:70:b0:4f:00:90:7c:ad:a0:26:06:26:7b:00:
0d:71:06:f6:da:6f:f5:91:97:d7:68:64:e8:28:87:e7:9d:24:
a1:20:e4:47:92:3b:88:e5:98:85:8d:f3:ab:49:f3:3e:4a:81:
7d:8e:66:af:79:4f:a3:95:2d:ed:b6:c0:05:3e:94:2f:ff:90:
a3:ff:fd:2b:ca:6b:9a:53:fc:5e:2e:01:71:e0:bb:13:e4:6c:
ba:dd:a2:41:a4:9b:df:d4:18:70:6d:64:91:17:02:d8:0f:fd:
a2:27:4c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:21:25 2025 by rpki-client