Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd0d3a2e-936b-48cd-b994-3cfc1e7f3af5.roa
File: fd0d3a2e-936b-48cd-b994-3cfc1e7f3af5.roa (raw, json)
Hash identifier: PRPxUeB0WSLi8IVw9a4NLR/XLwced7sSTc/oQ48PzZE=
Subject key identifier: 95:23:3A:A3:24:39:71:7B:6C:34:BC:0B:CA:18:6B:41:FC:27:CE:64
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5EE415092EC7B4F0AB543516A8A92104388F0165
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd0d3a2e-936b-48cd-b994-3cfc1e7f3af5.roa
Signing time: Tue 17 Oct 2023 00:00:00 +0000
ROA not before: Tue 17 Oct 2023 00:00:00 +0000
ROA not after: Tue 21 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e4:15:09:2e:c7:b4:f0:ab:54:35:16:a8:a9:21:04:38:8f:01:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 17 00:00:00 2023 GMT
Not After : Nov 21 23:59:59 2023 GMT
Subject: serialNumber=9361c3562e177f379f869aee80e4c68f9d5d67f69d662c992c4b2d8ebeaf4bf0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:ad:a0:fa:1b:e0:c1:b8:ec:82:bc:83:49:
99:e7:21:62:4e:90:6d:ca:2c:ee:82:cc:d0:72:a7:
e7:37:df:ab:d3:21:e6:ce:be:c5:27:92:f7:b8:96:
5c:1e:95:8d:e0:d8:1d:99:51:67:09:1c:6b:68:15:
1e:41:20:16:8f:29:9f:c4:17:4e:c2:a4:18:ed:89:
60:09:c7:93:cf:3c:62:0b:5d:5c:84:8c:fa:c4:71:
76:d8:13:b0:5a:5d:fd:7f:1d:07:6a:9b:75:37:15:
be:93:19:1f:e1:90:b3:51:7b:c7:44:5c:13:fe:83:
63:b5:32:01:a5:17:bd:22:bc:27:01:15:61:fe:82:
75:79:e6:ef:7c:ba:60:45:dc:de:7c:cc:8b:28:01:
33:00:92:5c:2a:47:68:ca:42:be:f2:f4:5a:ce:96:
08:51:22:84:2b:e4:a3:f6:07:a6:50:c5:62:24:11:
de:9d:48:49:aa:f1:21:e8:49:ca:bc:40:88:ac:2c:
a3:54:1b:dc:67:4c:db:1d:4f:e4:01:ca:74:32:78:
9f:5f:61:2a:8e:3a:c4:0e:ac:45:bb:29:c7:c6:a6:
b2:17:98:fc:4f:29:29:e4:77:32:6d:66:cd:9f:46:
e5:6c:04:15:97:35:fb:a6:9b:ec:19:79:3f:7b:8e:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:23:3A:A3:24:39:71:7B:6C:34:BC:0B:CA:18:6B:41:FC:27:CE:64
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd0d3a2e-936b-48cd-b994-3cfc1e7f3af5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
90:6c:25:3a:d4:61:4f:6a:1e:75:89:d7:a3:81:26:7d:30:47:
1e:e5:91:3c:a7:cd:ad:e9:70:b6:a2:b4:1c:2b:8b:34:c3:78:
fc:b0:13:75:e4:f1:63:69:d4:c4:6f:7d:cf:85:2e:b3:f7:aa:
2d:c5:d4:54:93:91:02:6a:6b:02:64:95:af:5f:57:5b:8f:37:
8d:4d:3f:00:8c:c8:da:d4:b9:80:b6:21:2a:a0:e5:62:5f:d0:
c1:79:dd:58:18:cd:45:3d:26:88:1a:04:98:85:12:1e:32:49:
60:e2:d7:cd:3c:a5:71:cf:78:ed:d0:1a:5e:b3:92:61:74:95:
0e:46:7d:c8:e2:e3:cc:93:69:2b:91:f1:50:84:40:4d:59:a4:
93:f6:c8:a1:69:ec:c6:05:30:c7:63:0d:2f:c8:39:2e:df:f7:
0b:6f:b9:95:f6:57:e1:6c:da:fa:37:5e:d5:ef:ee:da:c9:31:
5e:c2:a4:b0:70:ff:92:98:97:c1:65:52:91:66:48:5a:c3:15:
d5:27:5b:38:20:61:b3:a4:bd:e3:a6:bd:f8:c8:36:c1:4a:e6:
0b:d9:40:fc:6a:b9:a6:b8:c0:bd:6a:de:35:42:ad:81:2d:93:
83:e8:3d:a3:fe:66:7d:65:1d:b4:eb:ed:25:04:2e:79:e1:6b:
02:64:4b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:57:36 2025 by rpki-client