Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/36b46af4-5bb8-4774-b252-5281d46871c5.roa
File: 36b46af4-5bb8-4774-b252-5281d46871c5.roa (raw, json)
Hash identifier: aJYUTsBMhCIqnrkcsYvyNS3Bd/ZPT0gOLPwYqKpnMRM=
Subject key identifier: 6E:BE:67:FF:79:64:1B:E2:55:07:1C:A1:2E:4A:D0:85:99:46:98:13
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 167B2E1A4FBCDCC53D8F1FDD2BDA87CDEA8862DF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/36b46af4-5bb8-4774-b252-5281d46871c5.roa
Signing time: Thu 06 Jul 2023 00:00:00 +0000
ROA not before: Thu 06 Jul 2023 00:00:00 +0000
ROA not after: Thu 10 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:7b:2e:1a:4f:bc:dc:c5:3d:8f:1f:dd:2b:da:87:cd:ea:88:62:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 6 00:00:00 2023 GMT
Not After : Aug 10 23:59:59 2023 GMT
Subject: serialNumber=497dadeca0a4dc3b684bf563b605646868f9da337a6ce0db34527edd163f185e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:58:6b:7c:7b:71:c3:45:e4:b7:d1:20:d2:
df:27:b2:e1:57:7e:a6:1c:9d:7e:9f:02:a6:8e:b3:
29:f8:3d:00:74:43:5e:7b:1d:2b:9e:23:3d:e2:20:
bd:1f:76:9f:d3:bb:eb:63:2a:8a:fc:a1:d2:5f:e0:
bf:8e:a0:66:5c:45:55:a2:30:b1:cd:e8:25:ee:08:
29:46:88:0e:f2:1b:e1:b8:67:f8:94:7b:e6:a7:f2:
63:73:e0:6b:90:69:47:77:64:76:5d:af:de:97:69:
75:9d:59:1b:bc:d7:4a:fd:98:43:ab:8b:4a:5f:df:
15:c9:43:b5:56:bf:8b:08:f5:84:f6:1a:07:64:68:
b4:78:69:a4:61:21:3f:05:50:36:2f:8f:aa:ad:f6:
3c:14:50:70:61:cc:4f:50:c4:1a:d5:2a:aa:f8:1c:
ee:a6:df:30:49:ea:91:3c:03:aa:53:48:78:e4:70:
9b:90:6a:c9:9b:15:c8:78:15:f7:32:3b:b3:43:b8:
06:ef:b7:d3:c9:bd:db:53:71:52:b8:06:36:da:ba:
ed:f8:10:cb:d0:af:1c:3a:dc:8a:e0:b6:da:53:88:
f7:d3:e6:cb:2e:6f:77:7b:74:6a:82:ef:f3:ba:d3:
cb:39:e0:8b:36:36:33:52:f5:01:c1:73:bb:0e:47:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BE:67:FF:79:64:1B:E2:55:07:1C:A1:2E:4A:D0:85:99:46:98:13
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/36b46af4-5bb8-4774-b252-5281d46871c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
27:93:67:34:c0:f2:ed:dd:d2:ef:b9:12:71:39:ea:b4:ef:95:
7e:63:cd:22:a5:55:68:0f:06:70:0d:44:2c:5a:24:50:03:31:
86:30:86:80:9d:75:d4:89:8e:7e:da:a5:6b:3f:66:9e:0c:19:
c5:84:dd:b6:1a:d2:c0:e3:8b:62:bf:f0:4b:97:ec:7f:04:3d:
8d:9f:70:0b:f2:3e:bb:15:89:c2:40:3d:19:2a:4a:5e:07:8c:
6b:88:94:9b:d6:fa:9f:54:01:f2:5f:9d:e2:6e:e6:f0:5d:70:
21:91:6b:e9:24:66:ce:1c:6f:12:89:a4:61:40:b9:3c:54:71:
5a:2a:ee:5e:4e:7d:0e:14:ce:21:99:59:7b:0c:70:b1:42:7a:
4d:2c:31:72:f7:a6:29:98:7b:04:1b:a2:e6:41:a9:ac:eb:63:
83:08:5e:9a:56:4a:ba:ab:9b:a7:30:02:9a:10:48:79:c1:3a:
1a:46:70:f8:21:ea:97:6d:dc:b3:b2:23:81:f5:2f:67:1b:87:
61:94:f1:72:c6:14:d6:d4:f1:17:04:a9:7c:35:56:df:9e:1c:
b3:35:b0:65:c7:4a:d9:d8:a9:f7:97:3e:eb:21:9c:f4:5d:63:
88:f3:70:2f:a4:d9:f5:6f:6b:e5:b2:f5:03:97:d9:af:8f:fb:
13:2f:bd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:05:13 2025 by rpki-client