Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fa521020-04e2-486f-9696-12b223de27fb.roa
File: fa521020-04e2-486f-9696-12b223de27fb.roa (raw, json)
Hash identifier: U1YZAnF+C2L1VGS2OMqkY8yqxAjh7EKeYHxNWU9qsL8=
Subject key identifier: 9D:D0:3F:9D:CE:9F:70:1A:C4:E5:8B:6D:43:74:D2:6B:D8:71:5B:E7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 06A49F86F60381A215EB5C8F046D1FFE6D07ED55
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fa521020-04e2-486f-9696-12b223de27fb.roa
Signing time: Tue 25 Jul 2023 00:00:00 +0000
ROA not before: Tue 25 Jul 2023 00:00:00 +0000
ROA not after: Tue 29 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a4:9f:86:f6:03:81:a2:15:eb:5c:8f:04:6d:1f:fe:6d:07:ed:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 25 00:00:00 2023 GMT
Not After : Aug 29 23:59:59 2023 GMT
Subject: serialNumber=2e46fbf974d2a7af104bb4f80954c22f13242100836e10910b2a83596dbdc0f1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7f:9f:61:24:a9:da:5e:27:61:04:31:b8:d0:
4e:05:ac:c7:15:63:af:70:9d:18:5c:63:d9:fe:b5:
8e:79:57:9d:8c:e7:85:a0:02:a4:c1:f0:09:93:34:
28:7e:6c:ef:6d:3d:a8:03:40:03:fb:03:e9:2c:83:
cc:36:e8:78:65:a3:69:ac:c0:83:e0:45:c6:26:66:
0d:07:42:22:d7:99:b6:22:2c:3e:37:41:25:4e:20:
44:23:ca:db:79:96:e6:d4:41:ff:58:3a:b8:3c:bc:
0a:ec:12:d8:46:da:6e:72:58:1b:c8:e3:31:d3:6a:
11:16:11:8e:df:df:0a:bf:a0:70:b6:a5:0a:fd:c2:
2e:7d:76:68:5b:ce:58:e0:88:19:f4:cc:69:98:63:
1f:8a:03:7d:8c:8d:89:ba:eb:d7:84:0f:84:96:68:
ae:f0:f1:98:99:c8:b4:35:db:ee:42:a1:e8:51:b8:
be:4d:33:af:04:65:bb:9d:dc:31:e0:2d:2f:f8:a0:
eb:cb:6c:e4:06:f4:17:cc:63:dc:08:36:98:c8:fa:
8a:65:a9:b6:56:7a:71:74:3e:10:a9:77:35:57:5b:
2e:6a:31:32:82:67:05:6b:53:d2:fd:b3:80:b3:c5:
b2:cd:0f:c3:e3:42:9c:4f:e5:df:dc:6c:65:c4:39:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D0:3F:9D:CE:9F:70:1A:C4:E5:8B:6D:43:74:D2:6B:D8:71:5B:E7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fa521020-04e2-486f-9696-12b223de27fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
85:4a:ba:ac:39:56:fd:34:43:41:2c:5f:ca:50:3a:8b:87:a5:
54:7d:99:02:fc:8b:32:fe:ec:86:d4:c5:46:c3:7c:ee:55:46:
ae:d8:45:33:73:2d:f5:1a:ed:41:34:bf:67:e0:c1:68:d3:f5:
16:5a:38:4b:1e:26:03:60:b4:38:30:2e:29:88:fc:04:84:66:
56:05:4f:92:b8:1e:b1:95:97:0a:24:8c:ad:e6:55:71:33:df:
21:6f:d3:cd:3a:06:23:b2:f0:a3:3f:b5:95:4e:d1:9d:44:c8:
ca:b6:48:08:67:54:fa:42:46:92:74:a0:04:55:24:e0:b0:52:
f6:df:fd:67:a5:c5:64:20:52:ba:0d:0e:64:e2:b3:8d:f9:54:
63:dc:ca:97:85:4e:2e:f9:a5:80:30:22:09:f7:0f:80:e1:77:
54:24:c6:78:06:7e:6f:bb:44:3b:71:f7:15:4a:08:70:34:f8:
79:2b:45:fc:7d:77:82:a6:fd:e3:b1:94:7d:cb:40:26:e1:16:
4c:a4:63:f3:1b:69:db:c1:52:f7:ad:66:fb:03:fe:af:1e:94:
cc:12:6d:13:03:2d:c0:88:a8:57:8c:40:e9:fc:56:61:4c:c1:
ac:3d:81:a0:60:49:65:a4:2c:47:f6:4d:0c:cd:54:f3:64:16:
f5:8c:dc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:27:06 2025 by rpki-client