Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2afc8594-6962-4d7a-896d-b9cdb4d31fd6.roa
File: 2afc8594-6962-4d7a-896d-b9cdb4d31fd6.roa (raw, json)
Hash identifier: JcCI2G1VmJLsPQcT13s2ZjEI180N2xgNAwvWBCC88Hk=
Subject key identifier: 9C:DD:42:CB:DD:66:C2:09:3F:79:A4:41:F7:07:B5:5F:D7:7A:DD:90
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7732582C79CEEED8A629A1B337CBD92CF5FFE5E4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2afc8594-6962-4d7a-896d-b9cdb4d31fd6.roa
Signing time: Tue 05 Dec 2023 00:00:00 +0000
ROA not before: Tue 05 Dec 2023 00:00:00 +0000
ROA not after: Tue 09 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:32:58:2c:79:ce:ee:d8:a6:29:a1:b3:37:cb:d9:2c:f5:ff:e5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 5 00:00:00 2023 GMT
Not After : Jan 9 23:59:59 2024 GMT
Subject: serialNumber=6a6edbaef456a8d97b7ebe575361fa313bc6c56da1b6d22ae76435a35ddc24f5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:4c:a9:a1:b7:4c:6b:dc:ef:b2:6c:68:78:
01:cd:a8:e6:fc:06:b2:55:41:ed:2b:17:fe:bd:c5:
e1:06:4f:23:df:93:e6:db:48:dd:9d:bb:41:2c:95:
7c:c2:b4:66:86:be:d1:3b:b8:9f:10:0e:5a:c0:19:
dc:27:0b:94:2e:54:83:4d:a3:2a:d6:65:48:97:91:
3d:19:43:ca:a9:da:dd:40:bc:c8:1a:55:35:27:e0:
c0:f4:88:b6:63:5d:d0:03:82:5f:f4:23:c9:b2:6b:
dc:e5:68:04:ff:65:db:00:c6:7e:00:d2:16:00:94:
9b:04:68:cc:3d:f3:25:ca:25:bc:61:73:24:db:d5:
ad:0f:21:9d:95:51:ee:ce:32:bf:5d:b8:dc:14:0b:
53:33:a8:b4:b5:49:05:62:22:68:39:b2:3e:25:99:
af:69:f4:31:14:7b:bd:cd:82:6f:07:bf:48:02:43:
0d:b9:f4:d1:fb:6f:2e:bf:80:54:2b:28:df:5a:13:
39:c1:0a:47:99:34:45:0b:23:99:d7:1d:c6:2c:fe:
aa:3e:b0:cb:99:53:1e:58:1f:11:b6:eb:39:2b:f1:
96:9d:ba:34:93:4e:03:ac:10:89:b4:2c:a8:1c:fc:
32:ae:26:aa:06:cc:40:48:06:15:58:3f:87:2b:a6:
f5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DD:42:CB:DD:66:C2:09:3F:79:A4:41:F7:07:B5:5F:D7:7A:DD:90
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2afc8594-6962-4d7a-896d-b9cdb4d31fd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:82:f9:aa:99:81:41:d3:1e:78:3a:f4:35:51:92:af:a8:60:
ca:d9:7c:64:5a:df:87:88:a6:7d:54:51:2e:41:03:8e:6d:f0:
62:aa:a1:61:36:cf:af:27:c4:08:9f:b0:65:6a:fb:21:1f:c7:
02:a1:fb:b8:a4:b8:9b:81:2b:da:b1:03:0a:fc:88:21:8a:fb:
e3:21:03:71:e7:a2:42:99:81:01:71:c7:78:99:0c:60:90:9e:
0f:c0:84:c5:3b:79:de:8c:35:8a:ec:a4:a9:88:0c:ef:72:a6:
29:d4:52:5c:64:18:dd:60:49:d2:e2:89:3f:a4:aa:50:27:52:
7b:cf:f1:cb:f4:d5:8f:1d:bf:42:b8:0d:90:39:5b:9b:74:82:
a3:75:a1:46:0b:47:e0:3a:87:53:3e:eb:22:20:ab:af:17:30:
6e:40:68:9a:58:b8:67:3e:a7:1f:6b:96:19:bd:62:d5:74:27:
a3:0c:86:36:ed:4e:16:9b:eb:65:39:84:09:16:ad:8b:6d:02:
ed:9f:42:18:ed:76:40:56:f2:3f:bf:e3:35:2d:2f:83:f6:b7:
92:0f:f1:99:2c:67:cc:65:30:2e:40:b4:e6:78:46:73:37:18:
e3:d3:1f:22:44:c2:72:fb:3a:fc:e7:dc:14:ca:5e:ab:d1:aa:
f2:99:de:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:15:01 2025 by rpki-client