Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fc3b9c90-cb71-4862-b038-507eca4d1293.roa
File: fc3b9c90-cb71-4862-b038-507eca4d1293.roa (raw, json)
Hash identifier: wVH34gInya6L5P2hN93rXvI7g7Yb+ePPYgviJyGe3cA=
Subject key identifier: 93:79:30:65:BD:12:8E:3A:F8:19:3C:E3:EC:B8:EA:30:3D:10:10:3A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 694213C808DB4E9075ADBD474F5A1A0625C5625A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fc3b9c90-cb71-4862-b038-507eca4d1293.roa
Signing time: Mon 20 Nov 2023 00:00:00 +0000
ROA not before: Mon 20 Nov 2023 00:00:00 +0000
ROA not after: Mon 25 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:42:13:c8:08:db:4e:90:75:ad:bd:47:4f:5a:1a:06:25:c5:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 20 00:00:00 2023 GMT
Not After : Dec 25 23:59:59 2023 GMT
Subject: serialNumber=aed67c8ad418d9002944275db3f7d67d65fa5048fa8385cce2413d0f0195a8f7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:0a:86:50:2f:20:7d:d1:32:53:f0:06:a0:
2c:3b:94:56:59:7e:d9:36:99:9a:92:32:90:7b:8f:
82:f3:bd:23:2e:ef:55:0c:2f:62:72:ef:14:43:db:
92:81:e7:56:a7:1b:40:c3:e4:28:db:0d:d0:a1:82:
0f:e1:94:75:ed:74:c0:e0:ed:3c:a1:56:35:6c:13:
85:39:6e:fb:a2:ce:4d:78:3c:e6:5a:eb:2f:58:4e:
74:08:03:f0:9a:85:41:b7:71:1e:f8:b2:66:cc:f1:
5a:99:b2:ac:30:49:2c:44:83:73:08:4d:50:cd:a3:
7c:1f:e6:18:b8:b2:4a:62:53:4e:51:c2:d9:59:68:
6a:ce:d1:f9:63:73:fd:d4:04:1c:0c:e0:57:8d:af:
f8:13:51:9c:5b:a0:32:32:20:75:89:ec:ff:d3:22:
e4:b6:86:30:8e:af:f9:08:a2:47:0a:ac:23:27:00:
6e:ec:f0:66:c1:10:5d:a0:16:21:24:f7:2f:2f:f8:
00:10:7b:e5:52:29:dd:34:14:e0:33:b7:af:25:ff:
a5:31:9b:58:12:6e:22:6b:c7:ff:ca:46:ad:89:f4:
98:41:b6:13:0b:b0:c9:79:56:b5:09:d7:f2:d5:7c:
c5:6d:c9:6a:39:7e:5f:2b:0e:eb:00:41:2a:05:d3:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:79:30:65:BD:12:8E:3A:F8:19:3C:E3:EC:B8:EA:30:3D:10:10:3A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fc3b9c90-cb71-4862-b038-507eca4d1293.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d7:17:30:1a:ea:3d:3b:ee:ea:87:3a:ff:49:3c:09:fc:ea:
5f:6d:80:9e:23:ce:4f:bc:48:fa:29:f9:bb:cf:fe:f3:37:12:
e2:60:e6:c9:a1:53:f8:e4:be:13:2b:11:f7:98:86:3a:5a:4b:
a7:8d:4c:e9:b3:d4:6e:ba:69:7e:bc:1b:b9:80:78:4f:0b:ee:
e5:a2:cb:df:46:d6:a0:37:89:71:71:67:09:f7:44:a0:ea:56:
d0:20:50:0e:2d:ce:2f:a1:4c:a7:21:cd:f4:54:7d:34:6b:e0:
7c:84:c2:75:ff:d8:a3:83:06:0f:89:45:2f:9c:d1:19:7c:b8:
2a:4f:e7:bb:ba:26:60:2d:f2:9f:fe:94:e4:94:75:f6:74:7f:
c1:09:eb:8e:84:ef:42:56:6c:8b:ab:f7:d5:65:5e:43:de:c7:
3d:aa:d1:53:e3:0d:50:52:c3:a9:92:a9:b7:6b:aa:e5:fa:fe:
81:70:e5:88:c7:37:b9:03:e3:68:12:96:17:15:0c:b8:93:1c:
f9:84:33:f0:8b:76:ae:85:6e:5b:b1:b1:8b:47:6f:78:d8:68:
af:8c:c7:9e:8d:09:06:cc:f8:e9:e3:2f:ce:65:a0:f4:b2:04:
31:95:f0:38:90:f6:fd:af:a9:f5:1e:1c:d1:4a:0d:1c:5c:e2:
d9:5d:73:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:25:39 2025 by rpki-client