Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0660764c-bae3-4a2e-ab81-afe71f37745d.roa
File: 0660764c-bae3-4a2e-ab81-afe71f37745d.roa (raw, json)
Hash identifier: TInhwjCIXKGKZZOMqsxMPz/Auxuwh2DJNGxIv3lLgZ4=
Subject key identifier: BA:E7:8C:FE:98:73:8C:3F:D8:61:E5:4A:65:49:AE:9E:A3:CA:00:D9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 37FCA79BC3CCB550794AF4A25AAD80718AF9DCA6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0660764c-bae3-4a2e-ab81-afe71f37745d.roa
Signing time: Tue 04 Jul 2023 00:00:00 +0000
ROA not before: Tue 04 Jul 2023 00:00:00 +0000
ROA not after: Tue 08 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:fc:a7:9b:c3:cc:b5:50:79:4a:f4:a2:5a:ad:80:71:8a:f9:dc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 4 00:00:00 2023 GMT
Not After : Aug 8 23:59:59 2023 GMT
Subject: serialNumber=5d53e29681d2a0d5213f2ead30fb3a0cb5f7dbd3be8ff25b6ae1b87ce577b861, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:21:94:6a:4e:93:62:38:5c:e3:db:c5:94:
c1:0c:62:5c:db:4d:d2:74:c6:41:0a:f1:f0:af:bd:
0b:31:89:77:8e:44:0e:ab:93:17:04:39:6f:4d:48:
17:58:89:29:1b:42:ed:57:37:df:b6:0b:53:bb:61:
a7:c9:0e:b8:60:8e:94:b1:57:8c:a5:72:5a:cc:30:
b6:56:de:f9:1c:64:01:98:7d:19:ba:8b:63:41:9d:
1a:74:ca:20:10:34:64:9f:ee:e1:ad:10:52:42:8c:
90:4b:8f:65:95:3a:bd:bb:89:7e:b4:e1:54:1c:da:
ad:89:fe:10:c8:0c:9f:86:b3:86:35:81:f6:18:a8:
b6:55:21:de:2f:dc:ad:8b:24:00:c5:a9:b4:0e:6a:
b9:78:32:83:3b:4c:39:05:3c:a6:92:2e:b1:2e:18:
64:f1:fb:63:57:c1:42:31:3d:46:70:32:f1:4f:14:
bb:32:6d:c1:5f:5e:64:6e:16:c3:37:d7:c2:da:20:
f5:2c:1b:8c:4b:e3:a1:56:d7:b2:95:63:8a:87:a9:
14:16:59:31:ca:6e:1a:df:ae:c9:34:89:45:9d:ab:
8c:9d:66:92:a5:b6:96:40:9b:a8:58:c7:37:84:7c:
06:1f:b9:49:ac:bf:ee:7a:98:93:70:75:e4:61:2f:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E7:8C:FE:98:73:8C:3F:D8:61:E5:4A:65:49:AE:9E:A3:CA:00:D9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0660764c-bae3-4a2e-ab81-afe71f37745d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a5:7e:23:6c:c5:9c:62:cc:7b:12:dd:7f:dd:00:aa:0f:c7:
b7:72:25:da:ac:40:5b:00:b8:84:38:5a:91:92:f9:72:5e:84:
dd:47:40:8d:08:29:4c:ce:24:8e:27:51:ce:a5:2b:13:0d:06:
41:b8:8a:ad:b9:b0:07:f2:ca:f3:58:d6:ad:66:ae:cc:c6:ad:
29:1f:96:8c:1a:bc:46:d1:d4:1a:d0:81:5f:79:9d:9b:5f:43:
af:6c:00:35:d8:e7:96:f4:d3:63:e4:21:d1:ed:b6:6c:24:1f:
2a:01:88:e7:37:c8:df:70:fe:d3:a5:ae:52:8d:29:83:67:4d:
ab:c0:7d:7e:7a:7c:37:ef:77:a2:d8:37:d8:30:4f:e8:a1:fe:
4a:fa:b4:2a:89:3d:3d:9a:cc:45:48:1c:21:31:48:14:ce:c3:
e0:3d:5e:98:ea:61:85:9f:dd:ef:fe:76:08:d1:08:d4:c5:fc:
50:b4:23:f0:9d:f7:5d:81:6b:4e:45:f3:49:16:f9:a2:75:cf:
bb:7a:c6:84:65:06:46:14:83:7b:a2:2d:ed:db:81:ee:5e:ca:
1d:96:38:8f:0d:0a:59:31:b5:20:95:2b:46:d3:2d:a9:f3:13:
7e:14:64:32:c5:6f:bf:5a:d8:09:ca:12:29:aa:8b:9a:c3:8d:
b3:53:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:54:28 2025 by rpki-client