Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f9eb3042-33d5-464b-8c03-87f28fd3d39e.roa
File: f9eb3042-33d5-464b-8c03-87f28fd3d39e.roa (raw, json)
Hash identifier: MgZ2npCQMYG5EDiRH6QOEYObiCoMRg7M/jqRUS9bneQ=
Subject key identifier: 9D:B2:2C:2D:EF:AB:77:44:52:30:FA:94:4C:8D:19:88:3A:F7:A8:AF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1C7C83B2E1ACCBF0E0BF47ED0444CBE10DCC776C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f9eb3042-33d5-464b-8c03-87f28fd3d39e.roa
Signing time: Mon 13 Nov 2023 00:00:00 +0000
ROA not before: Mon 13 Nov 2023 00:00:00 +0000
ROA not after: Mon 18 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7c:83:b2:e1:ac:cb:f0:e0:bf:47:ed:04:44:cb:e1:0d:cc:77:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 13 00:00:00 2023 GMT
Not After : Dec 18 23:59:59 2023 GMT
Subject: serialNumber=088024875206628e68547abde7cfedd4df58c98376793c7924a0d886475ecb52, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:25:19:93:b6:45:fc:f3:fb:19:b2:53:1b:
09:55:0c:1a:21:d4:98:9c:88:b6:01:b2:a4:10:2a:
80:8e:d5:ca:40:01:9b:e6:43:b9:07:6c:f6:bf:34:
66:9c:e3:0f:6a:e4:03:f8:de:2f:d7:da:0c:da:49:
cf:17:c1:4c:83:3e:33:cb:28:75:f5:ae:68:90:c2:
43:82:ea:cf:75:bd:3d:3b:d0:e4:75:de:96:66:af:
60:d2:e2:65:28:2a:b1:86:de:c6:ee:59:4f:91:8f:
11:58:c0:1b:04:5f:2b:f0:d6:b6:b8:1e:bb:f2:db:
22:f9:08:ea:63:c8:97:f2:db:49:a6:8c:be:7a:4e:
5d:a9:bb:b4:65:8a:2e:d4:4a:01:78:a5:f5:95:09:
38:2c:eb:a9:54:70:e2:66:fc:cf:ed:d8:76:ea:2d:
aa:04:9b:75:b2:88:52:47:1c:8a:e5:08:86:d3:da:
5d:48:24:73:3a:99:c0:32:a3:86:c6:79:6e:09:0b:
3d:e4:ad:7a:e5:b5:32:c3:1e:bd:2d:c4:b9:ec:a1:
35:bf:5d:35:8d:01:d9:56:2c:42:dd:cc:45:96:4f:
85:85:3e:32:a7:3a:5f:c3:a5:f0:e8:e8:f2:31:34:
66:19:81:c6:3b:46:85:7c:60:fa:08:ae:14:e6:c7:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B2:2C:2D:EF:AB:77:44:52:30:FA:94:4C:8D:19:88:3A:F7:A8:AF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f9eb3042-33d5-464b-8c03-87f28fd3d39e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
01:4a:a9:a5:eb:66:10:68:df:cd:13:20:84:47:84:38:c4:68:
dc:13:9f:c1:84:5d:a3:16:a5:59:37:92:ae:ca:52:be:62:0a:
bc:6f:f0:8f:b3:83:4a:87:8c:77:49:75:7d:27:ab:02:aa:b6:
8f:cd:f5:e7:01:65:1d:ad:6c:82:21:d9:f5:90:6a:f2:7d:4a:
ed:ee:1c:03:08:4a:6f:8d:3d:f1:8a:c5:90:a9:2f:d9:59:1f:
ce:04:8d:a1:7f:5d:a4:60:b5:a6:0c:d2:f8:c1:82:e0:06:31:
35:57:f4:7a:ce:0e:e9:e6:a3:1c:bc:65:3a:af:ac:8a:bb:77:
28:a5:d5:3e:90:fa:99:53:c0:83:ea:e1:c5:4c:aa:a1:77:ae:
96:e2:f8:ed:f6:61:05:92:4c:15:e4:02:98:31:3e:97:70:36:
ca:68:6d:68:4f:5f:10:13:29:e1:80:7e:ce:92:2d:cc:24:aa:
88:b7:60:9e:3b:bd:5b:91:10:fe:ad:e2:5e:47:ab:70:bc:ff:
51:9a:77:bc:a8:60:84:69:3b:f4:3f:4e:a4:09:86:8f:eb:21:
a7:d8:5a:56:e3:81:11:36:ee:e2:82:a2:29:96:17:bc:03:02:
d8:cf:69:73:fc:1a:38:57:69:40:13:02:09:f0:cb:fc:8b:9a:
88:4b:d2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:59:50 2025 by rpki-client