Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4cae5fbf-f1c7-470d-9737-97d03737346d.roa
File: 4cae5fbf-f1c7-470d-9737-97d03737346d.roa (raw, json)
Hash identifier: h+lzw4OzlXuWCAZDsH/xPmxufg35K0cpK+/4m/W/f+I=
Subject key identifier: 5F:D2:8D:6D:68:89:D6:36:39:D4:B7:AC:3B:44:1C:A7:93:CE:0A:A9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1B05DB18663192400BF1336A53CD90DF4805B6A2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4cae5fbf-f1c7-470d-9737-97d03737346d.roa
Signing time: Sat 09 Dec 2023 00:00:00 +0000
ROA not before: Sat 09 Dec 2023 00:00:00 +0000
ROA not after: Sat 13 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:05:db:18:66:31:92:40:0b:f1:33:6a:53:cd:90:df:48:05:b6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 9 00:00:00 2023 GMT
Not After : Jan 13 23:59:59 2024 GMT
Subject: serialNumber=181206720f26d26d7d2cd0b95a221f93a47ac2c2e48868bd02208dc2c5d17c00, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7a:5a:a5:4a:10:36:80:f3:cd:4e:f9:cb:e9:
26:67:f5:0f:76:06:4a:97:45:1f:82:e5:2a:43:18:
09:34:fc:61:6e:d1:ee:f6:a0:f9:06:9d:0d:37:45:
16:15:32:32:7a:ed:60:e2:af:2e:21:a2:a0:39:c6:
76:44:1c:c8:a9:8e:ec:5a:fa:50:f7:f2:25:06:45:
3d:8e:bf:18:91:d4:47:dd:14:90:89:f7:62:e1:81:
8e:93:f3:1f:ce:2d:0c:5a:04:a1:fb:dd:f6:a5:4b:
04:03:6f:ea:ef:0d:e8:5a:48:da:09:66:15:9c:15:
43:35:3d:c9:8f:37:8d:aa:7f:17:44:5f:f9:54:21:
d6:56:58:f7:0f:b1:c8:4d:58:58:3e:3c:00:3a:dd:
bd:c1:c0:3d:39:22:f9:e5:53:9f:1e:39:a7:e0:3d:
91:9a:06:9e:24:f8:c6:68:f4:e2:15:fc:76:0e:30:
4b:82:f1:26:be:a6:44:03:11:a6:4d:8f:74:95:6b:
77:1a:e1:19:97:40:32:57:fd:ab:cc:f2:ba:45:6b:
08:82:4d:c9:19:a0:41:84:5e:fb:2f:bd:93:63:0a:
5a:e4:60:f2:60:4f:6f:5f:eb:e6:5b:37:cd:ef:e8:
42:55:2a:e9:6e:b0:c8:57:fc:11:97:ea:94:07:3b:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D2:8D:6D:68:89:D6:36:39:D4:B7:AC:3B:44:1C:A7:93:CE:0A:A9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4cae5fbf-f1c7-470d-9737-97d03737346d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
33:04:7c:60:e3:5b:cc:23:ce:5a:19:40:7f:7b:93:4e:97:0d:
7c:cf:97:eb:3e:db:be:9d:c6:c1:fd:db:44:ef:81:f2:41:97:
1e:8f:9a:bc:e4:ec:ea:76:10:ed:d6:c8:95:2c:aa:b6:1f:d6:
16:5c:e5:8a:e6:4f:e8:fa:40:a8:9e:2a:a3:4c:90:d8:d4:17:
d0:3e:16:7d:23:d2:09:2e:22:7d:ef:80:6f:65:4c:99:85:97:
d3:3d:96:65:de:3a:9b:99:a3:1a:f5:bc:0a:37:a7:25:19:ac:
45:c6:a4:9f:50:d8:d7:a8:07:5a:1d:7b:b8:e4:30:27:20:5e:
dc:cd:fc:ae:86:0d:ac:f3:43:c1:99:e2:81:ad:29:88:72:a5:
dc:73:31:8e:42:07:c8:f1:4b:fc:9c:70:96:56:fd:43:0d:35:
ba:93:95:22:94:3f:62:88:21:d0:57:3b:dd:f7:d6:68:00:0e:
be:cf:21:f6:3c:84:73:c9:eb:27:db:18:2d:15:0e:b5:7e:b2:
fa:b1:da:d8:5a:78:2c:3b:c3:73:72:00:a5:eb:3f:30:22:02:
af:8e:e0:22:0c:ff:2d:a7:5b:bf:1a:65:cc:f2:de:35:15:10:
22:35:63:7a:ff:b9:2b:03:25:50:a9:84:13:2b:76:9e:1a:82:
da:c0:df:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:26:35 2025 by rpki-client