Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e4e3e5f-3fad-48bc-87bb-657d8b2e580b.roa
File: 3e4e3e5f-3fad-48bc-87bb-657d8b2e580b.roa (raw, json)
Hash identifier: QJpiwbXoQ2dHic21BlFVHHVw1nLt+lPrhE1Yq3lAvRY=
Subject key identifier: 71:4D:A4:80:FA:1A:B8:AE:0E:E1:67:90:73:91:70:33:AA:9A:1B:E6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 712775C4036759167235509F52C9C10594CB4663
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e4e3e5f-3fad-48bc-87bb-657d8b2e580b.roa
Signing time: Thu 08 Feb 2024 00:00:00 +0000
ROA not before: Thu 08 Feb 2024 00:00:00 +0000
ROA not after: Thu 14 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:27:75:c4:03:67:59:16:72:35:50:9f:52:c9:c1:05:94:cb:46:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 8 00:00:00 2024 GMT
Not After : Mar 14 23:59:59 2024 GMT
Subject: serialNumber=7303753494c34966df0865c12281f69e0dd295dbc4c3fb3ddd96c1340d762084, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:4e:64:22:d3:c9:51:b6:cb:c6:03:20:0d:
0c:e2:60:85:69:c0:51:0c:0a:f3:d6:0a:1e:fa:a0:
a7:d5:40:16:2f:61:1a:66:40:9c:82:65:a0:ec:4d:
5f:d7:6f:f5:4f:a6:eb:1b:90:53:5a:ff:a0:63:c3:
9a:fa:e7:b0:5f:37:49:be:ee:ca:48:42:d1:dc:ac:
b4:a5:e6:31:0e:5f:00:fc:6b:ea:ae:b6:72:f1:ea:
43:ca:2d:a1:99:bd:36:58:fe:da:c8:9e:d7:99:f6:
bc:37:aa:38:9c:a3:36:b9:a0:6d:ad:07:ae:0b:d7:
fb:32:52:1a:60:63:02:9c:0a:4c:4a:ab:cf:98:97:
c1:59:ef:3a:82:0d:72:78:ca:26:bf:44:8b:80:32:
60:62:27:db:9a:d8:06:aa:4a:47:f3:71:af:e4:3b:
73:1f:50:81:8c:62:82:e7:48:2b:9e:d0:d2:d5:66:
d4:73:e8:d6:92:e2:a4:e2:95:de:81:bc:e8:a1:07:
e8:bd:f7:6d:2e:c1:ac:dc:63:3b:1a:a7:1d:26:84:
2b:ec:87:dc:b4:ff:0a:5a:d6:c4:5b:4f:bb:44:f1:
fa:6d:6c:2c:21:4a:54:39:3c:78:7b:1b:fe:b2:e6:
e9:30:19:b3:fb:a7:56:97:b7:f2:30:99:70:ac:c4:
77:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4D:A4:80:FA:1A:B8:AE:0E:E1:67:90:73:91:70:33:AA:9A:1B:E6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e4e3e5f-3fad-48bc-87bb-657d8b2e580b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
66:67:5b:55:c4:ea:06:26:f7:2f:80:c6:62:33:b5:30:9f:00:
27:ee:a0:97:f9:48:a4:3a:3f:de:32:2f:90:79:0e:ce:93:54:
d6:6a:ec:be:eb:37:1f:f4:34:d1:3f:b1:8c:25:14:84:01:f3:
3f:3a:7f:6a:e5:0c:98:0e:e1:0a:eb:95:01:71:14:16:a7:b2:
98:1b:25:34:cb:9f:72:61:8d:2c:07:ca:23:ae:38:ca:1a:6e:
0c:11:89:e3:b8:02:f7:e5:04:07:bd:1d:e6:dc:47:fb:a9:8c:
95:d0:d0:03:9c:b2:cd:45:a0:32:d6:d9:b8:db:16:f4:b8:09:
97:01:46:a0:32:25:3b:58:5d:da:f7:75:d5:d2:de:98:87:60:
8a:3f:bb:c6:69:4f:4f:8c:f1:ae:1d:4d:d3:67:41:1f:9f:e7:
1f:b1:5a:94:40:70:23:99:5d:89:73:c9:23:c2:fc:3e:2a:e7:
72:36:ab:53:a4:70:de:00:80:93:81:76:8a:a7:68:cf:f8:a4:
7f:31:2b:76:f0:4d:19:7e:84:2d:ef:11:1f:6f:c6:e7:e1:82:
a2:84:2e:03:ba:21:fd:4e:d9:64:85:62:e2:69:f8:ae:83:84:
34:d7:7c:dc:0c:e3:4b:ea:41:4f:e4:1a:5e:84:b5:1c:89:a8:
67:f6:bc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:53:06 2025 by rpki-client