Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a2b373c-51e5-4b16-a518-30448e721692.roa
File: 3a2b373c-51e5-4b16-a518-30448e721692.roa (raw, json)
Hash identifier: aNPHo0+II8IwqH1J4rj1IycR041nXric7JpiBzF3jBQ=
Subject key identifier: 3D:D2:75:EA:3B:EA:F2:85:64:E4:43:A6:C5:FB:61:62:94:EE:FF:E7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2EDFBBC2C3610B6658F9E3104585A178B8693CFD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a2b373c-51e5-4b16-a518-30448e721692.roa
Signing time: Fri 25 Aug 2023 00:00:00 +0000
ROA not before: Fri 25 Aug 2023 00:00:00 +0000
ROA not after: Fri 29 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:df:bb:c2:c3:61:0b:66:58:f9:e3:10:45:85:a1:78:b8:69:3c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 25 00:00:00 2023 GMT
Not After : Sep 29 23:59:59 2023 GMT
Subject: serialNumber=dcfc089a957b5d83547f72677fda4bf0a854fa385d34f42f77be69822cb5d826, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:51:8e:f7:64:01:25:4d:67:fb:43:23:57:
88:d4:61:bb:fd:0c:01:b8:ed:67:d2:8e:ee:2b:c5:
1e:4b:30:c3:80:79:db:6a:bd:7e:22:e8:21:fe:2b:
0d:17:fb:05:9b:5e:33:df:c5:4c:c0:4e:e6:4e:f1:
d2:5f:48:a7:67:9d:ab:31:7d:5f:8b:5d:32:fe:60:
36:3e:1d:3e:53:89:62:51:26:f0:e4:ee:00:55:e8:
d7:dd:af:bb:6e:5e:00:4c:ab:3e:bc:68:98:a8:bf:
8d:20:31:bf:1b:fb:c4:59:dc:7a:5e:46:85:87:c2:
58:14:10:4c:3d:b6:ca:58:eb:ef:2a:84:b2:88:48:
d4:38:73:a9:56:37:5a:37:57:9e:67:9e:99:94:ac:
b1:f2:21:7a:90:a7:ce:5e:1a:3e:1e:c2:19:66:c9:
be:f8:d6:5d:fa:2e:70:c3:25:38:54:b0:aa:f0:60:
3d:0b:7c:a9:de:49:6c:a3:c5:fe:94:b7:c2:2e:e9:
2a:b5:f2:87:c6:46:c5:47:8c:a1:01:db:6b:f2:4e:
c9:f3:e3:05:d3:c5:0a:43:4f:a5:bb:5c:1c:0c:24:
6e:06:c8:5a:c8:9a:1b:83:a6:0b:5b:c5:f9:3a:d5:
f3:31:7a:7c:09:5f:f2:5c:d9:95:a7:91:0f:6d:b7:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D2:75:EA:3B:EA:F2:85:64:E4:43:A6:C5:FB:61:62:94:EE:FF:E7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a2b373c-51e5-4b16-a518-30448e721692.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c8:1e:cb:18:d0:77:72:6b:b6:c4:6a:9b:a3:73:5f:57:b6:
d5:8d:d7:dd:35:db:17:7b:4e:37:55:9d:5d:4f:ba:b4:b1:19:
4d:58:c2:a4:81:5f:df:70:0d:c3:8b:fc:a6:61:25:27:de:cd:
38:e0:3a:d6:ff:c6:11:06:aa:ec:c0:84:dc:65:35:51:fc:d5:
f5:a9:15:ad:d4:5b:56:9d:3e:78:38:30:43:cc:0c:c7:72:f4:
c7:13:67:0d:a6:4d:fe:c6:ff:e5:50:c8:df:10:77:df:13:ab:
a0:fb:df:d1:14:22:cb:0e:f5:26:c2:64:33:2a:91:17:44:07:
25:ac:a3:ba:e5:12:a5:ef:27:26:9c:6c:40:67:21:4f:de:7f:
eb:eb:f4:23:b7:cd:0d:08:7d:f2:69:6e:a3:ed:e1:f4:05:e8:
a5:2c:6c:3f:a3:96:77:47:02:04:5a:09:92:fb:36:ae:fd:58:
cc:75:5e:a2:20:7a:16:68:33:fb:9a:84:3e:4f:d7:55:c6:e5:
2d:5c:2f:c4:c3:d3:73:0f:89:c8:5a:79:b0:3d:58:43:14:45:
79:77:9d:59:eb:12:6d:23:c0:2e:3a:d4:71:46:35:49:2c:48:
b5:6c:12:32:d3:a4:dd:ca:8f:fd:34:a2:b2:29:6e:27:72:2b:
8f:6c:2c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:04:07 2025 by rpki-client