Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0384fc23-cf39-480f-b4a2-324fc9c29a74.roa
File: 0384fc23-cf39-480f-b4a2-324fc9c29a74.roa (raw, json)
Hash identifier: UTvnjrDDJVnq+xLDQq8tPRopeXFgdyvax3LU0bvvB0s=
Subject key identifier: E2:4E:FF:2C:83:24:A5:DF:98:E2:81:08:1F:C3:7C:45:B8:BD:EA:88
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0760CA9B04388199EE18E0E366B1003FEBC05BCB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0384fc23-cf39-480f-b4a2-324fc9c29a74.roa
Signing time: Sun 20 Aug 2023 00:00:00 +0000
ROA not before: Sun 20 Aug 2023 00:00:00 +0000
ROA not after: Sun 24 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:60:ca:9b:04:38:81:99:ee:18:e0:e3:66:b1:00:3f:eb:c0:5b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 20 00:00:00 2023 GMT
Not After : Sep 24 23:59:59 2023 GMT
Subject: serialNumber=223f75568a4da84b3b47fe15a9e62a31ac8f28c1d267c1310fc19ebd42c1cf15, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:e7:c7:67:29:22:f9:c2:8f:dd:56:00:6d:
84:49:83:2e:e2:59:1f:cf:f0:20:6a:3e:b0:4f:87:
7d:71:78:85:f7:98:a7:d2:89:8f:eb:41:de:b1:60:
fe:9d:2b:b1:f8:39:28:73:f9:bb:db:c7:ea:e6:bf:
90:ff:c8:7b:a2:35:2c:29:0c:df:f3:44:4d:f2:4a:
75:51:34:c0:b6:17:5d:14:65:33:f7:69:4e:83:e9:
09:9b:42:6a:a4:7d:d2:bb:98:cb:56:13:db:77:4a:
3b:ac:5c:f8:53:d0:72:41:b0:b4:bf:b4:f6:b1:75:
4e:53:d8:e9:a4:b6:ad:f0:68:99:ec:f0:41:28:b8:
48:89:55:02:20:9a:d8:b1:3e:cc:ea:bf:9a:3f:37:
09:80:e6:f0:28:fb:9e:fe:93:2a:a2:6c:6d:67:7e:
7c:90:65:a2:b0:bc:1c:54:ae:78:ac:9d:db:0f:6a:
3f:6b:8c:15:9f:16:a0:7d:d9:f9:a4:8d:a7:b3:65:
e5:cf:fd:b6:57:d5:70:10:ec:93:b1:54:d8:10:e6:
6e:4c:bb:d7:0d:f9:8f:a2:ce:cd:51:34:74:f5:e7:
02:37:33:2c:f2:f1:cf:7e:3d:5c:82:3b:bc:21:ea:
41:8b:9c:d2:61:7d:13:39:da:9f:ec:c6:c5:df:37:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4E:FF:2C:83:24:A5:DF:98:E2:81:08:1F:C3:7C:45:B8:BD:EA:88
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0384fc23-cf39-480f-b4a2-324fc9c29a74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:aa:74:9a:dc:eb:45:02:9d:7f:df:41:c9:5b:f6:a8:43:9b:
b1:98:76:61:6c:0d:e5:42:80:f8:22:9e:6e:e2:83:29:f1:d7:
26:35:67:10:3b:6b:d7:b1:f5:4c:51:e3:21:fa:5a:8f:a5:28:
b9:5c:13:57:95:42:fb:23:91:3a:ac:d8:0c:ed:16:b5:d8:55:
23:4c:9a:88:a0:cf:f4:85:3f:33:78:c5:5e:a1:d9:df:ab:9d:
02:a4:61:a2:ca:96:85:10:af:94:9f:2a:5d:ce:ab:b1:62:eb:
89:b6:0b:3d:8d:8c:39:87:3a:fa:0e:af:d8:c9:03:21:cd:0d:
08:c4:ae:6b:f0:07:90:dd:9c:b6:8c:68:32:cf:cb:77:b4:76:
ed:12:43:2e:4b:46:37:b7:59:9d:28:e3:af:b5:db:f1:17:ee:
e2:8c:5a:89:f1:ae:43:89:33:7a:88:f4:a9:9b:dd:38:71:ca:
c7:0e:a7:41:26:75:74:0a:b9:33:49:3a:db:69:ec:f6:0d:0b:
96:c8:55:48:4c:dd:1f:8c:17:40:2a:7b:29:c1:4e:53:dc:f1:
4a:f7:16:ef:30:ec:e5:a6:ab:e6:2d:4a:78:45:db:78:78:9b:
c5:79:20:f4:c5:f9:f4:26:d9:f0:d8:7d:8b:0f:b0:4f:d6:62:
36:bc:94:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:53:36 2025 by rpki-client