Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/34adbfd6-7383-4f59-8aea-97531951f41d.roa
File: 34adbfd6-7383-4f59-8aea-97531951f41d.roa (raw, json)
Hash identifier: 7CTLR6jFnMURgRHR3YYYFGaHB/o0XCeY3Rg/2bO5v4g=
Subject key identifier: 6D:8B:8B:CE:F8:DB:83:62:8A:61:CC:4F:E8:A3:6E:FE:5C:87:5A:C5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6BDB3EBDA110F9503D2E9388FD85376024B80BCF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/34adbfd6-7383-4f59-8aea-97531951f41d.roa
Signing time: Thu 06 Jul 2023 00:00:00 +0000
ROA not before: Thu 06 Jul 2023 00:00:00 +0000
ROA not after: Thu 10 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:db:3e:bd:a1:10:f9:50:3d:2e:93:88:fd:85:37:60:24:b8:0b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 6 00:00:00 2023 GMT
Not After : Aug 10 23:59:59 2023 GMT
Subject: serialNumber=65814f3a40ce793ed662ca4649cebc828e97d23173c88cd945b89767cade0017, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:3d:2f:bc:43:83:5d:3d:a3:03:ab:bb:bc:
e1:ed:7e:97:7a:c1:9b:64:c7:7c:44:65:3a:45:e5:
a7:d8:a2:e2:bc:e0:7a:b3:c5:56:70:74:a1:d4:1a:
ea:1e:df:1d:21:64:34:82:3c:43:de:6e:e4:37:dd:
56:10:7f:18:db:b8:b1:ca:fb:aa:8a:25:85:56:d9:
e8:4c:7d:c6:4a:08:22:b6:1e:f3:d6:f6:e1:14:eb:
41:9f:c1:5f:57:f6:a5:f9:bd:35:d3:c2:05:b0:b7:
ce:5d:f0:b6:7d:4a:d6:a8:45:42:60:4d:7b:19:fb:
71:1d:45:d2:8b:96:e1:cb:01:d6:f9:cd:98:81:ce:
89:c0:e0:a4:87:6b:d2:f7:2e:c0:22:aa:0f:2a:25:
32:7e:61:56:4c:ef:db:1e:fc:3c:48:c0:3c:d5:1f:
e9:78:2a:58:19:73:c0:7c:a4:e5:2d:7a:62:21:52:
4d:6f:28:9c:f9:32:36:85:14:5b:f2:c5:5d:ce:e9:
54:7b:09:a6:3c:25:df:08:57:df:23:b9:c0:c1:dd:
df:4c:30:75:13:b4:3f:01:b5:56:d5:04:d7:02:bb:
16:73:80:a1:4f:e4:4c:cf:74:2d:f5:b9:86:2b:d3:
45:fc:eb:d3:75:8d:c1:06:a6:65:70:19:e1:85:ff:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8B:8B:CE:F8:DB:83:62:8A:61:CC:4F:E8:A3:6E:FE:5C:87:5A:C5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/34adbfd6-7383-4f59-8aea-97531951f41d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
68:44:88:c2:ab:65:54:c2:33:cc:48:f8:4d:6f:ae:08:fe:20:
c3:01:fc:af:1b:86:1d:58:a1:96:dd:42:1a:9d:35:91:37:e4:
d0:41:b4:33:a5:56:c7:4c:8c:d1:bc:fa:ef:61:b2:c1:0c:51:
74:d8:74:62:84:ca:52:53:e9:4b:32:44:0f:ed:de:d6:1a:f8:
80:72:a9:21:cc:5c:e2:be:61:31:13:c4:bd:e6:23:36:70:5e:
f4:9d:c0:70:c5:f8:0d:55:a8:c4:f0:e3:e7:58:30:ed:71:d0:
07:47:12:77:8a:36:45:50:d5:3e:ce:0c:d2:d6:65:94:6d:b4:
07:6f:24:89:17:45:79:f7:97:c2:c2:81:f7:bf:cb:af:d9:f1:
ce:a1:9e:91:41:2b:1f:6f:e2:2f:64:39:fc:b2:09:af:fa:c5:
aa:9c:89:c6:ce:70:ac:51:62:5f:28:d5:3b:16:01:b9:51:b0:
eb:62:11:d5:12:9d:7c:67:c4:cc:5d:c9:53:06:03:de:01:71:
ce:ff:23:0f:bd:b3:90:e8:26:60:48:ec:28:9f:fc:dd:7d:d9:
7d:4e:ba:16:4f:72:21:3c:1a:a3:06:a4:69:7e:7b:cf:54:b4:
7c:1e:db:63:b1:be:a8:f9:06:ac:ca:ce:0a:4f:b9:8d:fe:2f:
31:a2:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:17:43 2025 by rpki-client