Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/48c6d552-b376-4f2f-9a9c-c7f3761c8838.roa
File: 48c6d552-b376-4f2f-9a9c-c7f3761c8838.roa (raw, json)
Hash identifier: cGdyWgtiHBnPkyweBsV0opqAW4+gmR+wQpEinkOS3Eg=
Subject key identifier: 61:8F:CE:0E:C9:7D:D5:35:34:BD:D5:B5:58:F0:66:C0:67:8B:AF:56
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 692DD7E780E5C8C6C2D9DBD60384BA757DF660A0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/48c6d552-b376-4f2f-9a9c-c7f3761c8838.roa
Signing time: Sat 04 Nov 2023 00:00:00 +0000
ROA not before: Sat 04 Nov 2023 00:00:00 +0000
ROA not after: Sat 09 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:2d:d7:e7:80:e5:c8:c6:c2:d9:db:d6:03:84:ba:75:7d:f6:60:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 4 00:00:00 2023 GMT
Not After : Dec 9 23:59:59 2023 GMT
Subject: serialNumber=6b811e42adf799343f67f15f09797cc8450f0c4406d9afc3385d142c129cd7b4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:ad:1f:91:aa:b8:7a:8e:62:81:22:18:d8:
1f:ea:fc:4c:ef:39:82:3b:1e:d6:7b:85:c8:1f:35:
5d:23:1f:4d:f7:20:bd:66:9c:48:c4:03:18:5c:fc:
90:b8:ea:c3:1e:9a:d4:91:ba:1a:13:b5:02:f0:d6:
90:2c:13:95:71:25:76:b2:18:3f:c2:55:48:88:16:
51:f8:f0:08:44:f1:31:7e:00:92:18:58:0a:41:a1:
22:bf:7a:21:e5:30:33:23:21:00:29:34:6e:f5:da:
9b:cc:be:95:9c:56:b7:ce:08:23:df:3b:e6:74:66:
b1:ac:d3:c5:6c:20:bd:3d:97:74:86:df:16:1f:1d:
ab:14:8d:72:cf:46:62:0a:8c:a2:f4:b8:ea:d8:64:
79:eb:af:49:13:d6:4d:7a:c5:18:ac:12:0c:42:e9:
8c:13:85:e5:e5:3a:c6:72:67:6e:c6:15:2b:4d:00:
c2:f4:e9:40:f1:b3:2e:f3:d4:67:5e:af:b7:e7:cb:
eb:14:60:27:c7:fb:18:ef:af:5a:6b:50:f5:4b:98:
d9:49:ef:24:54:90:4d:32:44:5d:45:c6:f3:3e:12:
72:57:0b:e4:b7:b0:e2:75:5f:22:7e:7d:b2:d6:21:
e2:69:33:d6:17:b1:f9:bc:2f:5b:bf:c3:40:6f:3b:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8F:CE:0E:C9:7D:D5:35:34:BD:D5:B5:58:F0:66:C0:67:8B:AF:56
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/48c6d552-b376-4f2f-9a9c-c7f3761c8838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:00:5e:b9:2e:1f:1c:69:ef:d1:bb:54:1a:b3:ef:aa:a2:56:
fd:a8:65:60:cf:2e:b6:b0:ae:43:e9:8e:f5:eb:4c:94:dc:3d:
2e:8c:aa:b7:f4:34:80:5b:03:09:a9:6c:9a:2b:df:6f:c2:d9:
3e:40:a1:da:76:2a:a5:4c:f3:71:03:cf:05:bd:ed:4a:46:16:
6b:0e:24:6b:fb:d7:5a:07:16:50:f4:af:90:2b:d0:25:18:80:
2f:2e:08:a6:e6:07:d9:3c:06:b5:67:47:53:03:b6:90:65:fa:
bb:1f:e1:b3:b9:0a:d7:7c:2e:b9:45:cd:67:32:5d:90:23:5b:
4e:06:ba:51:f1:d5:cc:52:15:2b:7d:b4:a1:0d:9d:26:5a:f8:
03:25:07:36:0a:ba:89:47:9c:8d:03:40:f7:e1:f2:0b:5b:0d:
74:33:e5:90:e9:4b:69:a0:a6:bb:a7:3c:86:9a:cc:d8:71:97:
bc:5d:4b:40:06:a0:eb:2a:52:38:e0:f8:34:2c:de:b7:89:a2:
22:bf:90:89:31:05:a8:df:08:25:8c:fa:12:c5:db:b7:90:bc:
c1:3f:c1:7f:90:62:2c:0c:69:29:9d:2e:d6:48:d0:f5:6c:8f:
cb:1d:e8:2e:64:a7:1d:fc:01:c6:94:19:3e:7e:00:d0:40:5b:
22:61:fa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:55:02 2025 by rpki-client