Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/112a113a-d657-4d1b-b8d9-492958114e12.roa
File: 112a113a-d657-4d1b-b8d9-492958114e12.roa (raw, json)
Hash identifier: OvTmaC6ctjWvlepP9xHHi4yuYS24h1A63kyMv2nWdRk=
Subject key identifier: 9B:61:E6:35:CD:2E:DD:77:BC:76:2D:8F:2D:02:C7:BA:21:7A:F9:DC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1F8A5858CC8A3F320AE2127CE0C64F089A665493
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/112a113a-d657-4d1b-b8d9-492958114e12.roa
Signing time: Mon 02 Oct 2023 00:00:00 +0000
ROA not before: Mon 02 Oct 2023 00:00:00 +0000
ROA not after: Mon 06 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:8a:58:58:cc:8a:3f:32:0a:e2:12:7c:e0:c6:4f:08:9a:66:54:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 2 00:00:00 2023 GMT
Not After : Nov 6 23:59:59 2023 GMT
Subject: serialNumber=707c234c2d2b631d40cb7901064b3bd7ad3d5f3cff8fb61468f688300128d24e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6d:e3:2e:ba:2f:9a:25:cc:30:8b:87:14:6f:
3b:26:d0:da:b7:1f:56:00:bf:c1:b2:79:e3:cf:7b:
3d:2e:38:4b:28:52:f7:33:b0:e2:b5:3b:6b:ba:f2:
48:52:79:e4:83:39:9a:63:db:4d:65:09:77:a9:ee:
22:3d:88:7a:67:a6:4a:05:8e:11:24:ba:64:dd:d0:
46:ef:80:27:a6:ba:71:9e:76:9c:35:60:fa:20:57:
5d:a1:f2:21:f7:99:f8:6a:88:cf:ce:28:83:6b:0d:
90:8a:d3:b3:23:90:b8:13:b3:91:d5:20:0c:e2:1a:
a4:c1:00:d4:b5:b0:85:e0:7f:28:9a:4f:93:3e:81:
df:26:46:56:8c:35:33:74:af:56:b4:33:a2:a1:f4:
70:08:db:8a:47:3c:e0:24:74:a5:44:19:83:54:e7:
d4:34:8b:f6:94:12:c7:e5:c9:3c:ec:7c:d8:cc:a2:
99:c0:94:ca:67:54:9e:b8:96:f6:47:f9:c6:0f:77:
3c:91:16:6c:a5:2b:2e:bc:b9:05:44:e8:9e:34:92:
ae:44:05:8b:ce:db:7b:5d:a0:97:25:8b:f3:73:d3:
77:a9:1e:a3:e0:7a:d5:71:27:2e:b4:f4:fe:a9:f7:
27:4a:29:54:12:dc:05:ab:23:b6:3b:7b:d1:9d:53:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:61:E6:35:CD:2E:DD:77:BC:76:2D:8F:2D:02:C7:BA:21:7A:F9:DC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/112a113a-d657-4d1b-b8d9-492958114e12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3f:4f:0c:97:59:36:48:b0:c8:fa:90:96:04:19:7c:77:b3:
7c:76:22:e5:f8:84:fb:11:5d:37:ae:db:aa:ad:86:fd:e7:aa:
0f:8a:5c:f8:59:86:30:cd:5e:56:c7:5f:fd:4e:ff:bd:dd:56:
96:c8:dc:5f:af:b5:f3:7b:48:ab:71:55:46:81:d9:0b:ad:72:
e3:cc:e8:ce:ef:00:f2:04:70:dc:da:2e:56:76:b4:46:ce:a4:
33:fd:54:09:b4:2c:91:f9:54:c6:8a:c3:6a:24:34:d8:0d:e4:
8d:a4:fe:82:cd:7c:ca:81:29:7b:d5:90:2c:e0:ce:ad:0e:ed:
6c:71:36:79:3c:f6:eb:05:3e:b8:e5:d1:36:95:91:48:58:c6:
58:81:69:17:26:e6:47:65:5b:71:4a:29:5a:51:88:fb:3d:f7:
dd:c4:49:fd:f4:61:ad:32:ee:f5:82:43:eb:06:5e:f1:0c:4f:
f0:8a:d5:87:67:b8:a0:97:a6:43:d6:a9:83:63:15:5a:23:e1:
c2:54:33:56:83:45:43:3c:eb:df:98:dd:3a:da:6a:8a:67:9e:
80:d8:be:dc:59:b7:cc:5d:75:fc:0e:3c:d1:ac:0d:47:18:a7:
69:a4:0e:cc:d2:be:c2:72:61:02:eb:6d:ab:9e:c3:8f:c4:f2:
fc:be:6d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:46:09 2025 by rpki-client