Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fdaf29be-8282-49fb-8048-2b70f63ce40e.roa
File: fdaf29be-8282-49fb-8048-2b70f63ce40e.roa (raw, json)
Hash identifier: EzClcVbmbzpfoKahjhgJopu4DNMbMjiybWhlMcwQz80=
Subject key identifier: 34:FA:CB:7F:C9:BA:FA:CF:2D:00:B1:41:63:02:D0:09:3F:4E:27:22
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 54A2AC1A65AC18417EA5784106027B90C1FB2F5D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fdaf29be-8282-49fb-8048-2b70f63ce40e.roa
Signing time: Wed 22 Nov 2023 00:00:00 +0000
ROA not before: Wed 22 Nov 2023 00:00:00 +0000
ROA not after: Wed 27 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a2:ac:1a:65:ac:18:41:7e:a5:78:41:06:02:7b:90:c1:fb:2f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 22 00:00:00 2023 GMT
Not After : Dec 27 23:59:59 2023 GMT
Subject: serialNumber=ad184e75cb1f44f0ccc3a0152687b3cd3526f7d2355bad99f850ebb9ddbd28b4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:be:0c:a6:a3:7d:9f:61:f7:fb:0c:ee:64:
de:4b:7b:8e:4d:81:61:a7:18:bc:e7:a2:c9:d5:f0:
d6:86:ee:ff:b3:a2:5e:35:56:2d:ab:e2:c9:39:07:
35:9d:a4:bd:07:ed:9b:01:de:bc:23:cb:fe:6d:02:
bc:e0:04:fd:53:a6:50:fd:dd:fc:b4:9c:77:e1:54:
92:98:2d:2f:3c:e2:1f:b2:43:4d:1b:c7:5d:f8:a1:
de:2b:bf:0e:90:be:88:f1:4e:d6:74:7d:d4:2d:e3:
26:e7:b9:b1:f9:cb:01:ce:0a:8e:2c:51:bd:4a:72:
22:b3:20:5c:e3:cd:5e:76:be:fb:7e:02:86:7c:68:
38:22:50:1b:ea:79:c1:c2:63:b6:77:64:0d:7f:a9:
bf:3f:c7:a6:7c:75:4d:d8:37:f0:a4:f5:b3:c1:55:
4d:86:0a:c0:12:c2:02:14:45:48:53:34:75:a0:86:
2c:80:aa:9d:0e:74:c1:da:68:23:e7:98:f4:82:f4:
aa:2e:c4:d9:b8:8f:78:3a:6f:51:07:c7:78:b6:4f:
a5:ac:2b:52:40:a5:d8:0a:67:57:82:d4:14:0b:23:
4d:4c:c5:30:b7:b0:f1:03:c9:cf:76:44:15:68:ec:
85:42:d0:4e:87:3f:5d:f3:39:a9:19:21:2f:b1:39:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FA:CB:7F:C9:BA:FA:CF:2D:00:B1:41:63:02:D0:09:3F:4E:27:22
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fdaf29be-8282-49fb-8048-2b70f63ce40e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:84:6b:ac:8a:55:e9:4a:1c:f9:4b:5f:fc:28:6d:2d:a7:a2:
4c:7e:67:33:c5:d6:b5:d8:9a:24:69:0a:74:68:ba:03:8c:ab:
3a:b4:5f:b0:52:39:86:0a:3c:7a:c6:5e:22:7a:be:d6:71:5c:
e2:18:cd:a5:0d:59:17:25:6f:18:8b:f0:82:30:02:5a:7e:af:
00:42:a1:74:e5:15:70:d6:61:4b:1f:b4:0d:48:7a:03:44:02:
2c:26:af:e7:af:9f:c8:85:98:4c:82:b5:47:14:f3:60:84:0e:
0f:a0:75:66:d5:08:9a:46:da:35:9d:fe:9d:e9:dd:1a:46:4c:
a7:25:61:5d:6d:99:2a:e6:90:ee:44:a7:48:54:06:90:c7:a0:
d6:0d:ff:2f:1e:08:9b:af:04:3d:fa:d3:8d:0a:cf:02:89:9c:
1f:e2:82:a4:d3:80:3c:36:92:64:8d:66:53:e1:5a:65:c8:90:
dd:c5:af:18:0b:47:55:59:48:cf:3e:b6:29:cf:fd:4d:0b:0a:
0f:5a:b1:a6:6e:fa:6e:18:5e:43:0c:79:08:da:81:80:5b:9a:
0b:1f:5c:98:b5:3f:8d:a8:fc:8f:41:94:1e:c8:a5:42:18:c2:
80:90:4c:ba:aa:a3:03:30:90:d0:ce:ed:bc:72:cd:b9:41:a3:
bd:b7:86:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:35:22 2025 by rpki-client