Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/625812f2-a791-48c8-9c80-526ac32597ff.roa
File: 625812f2-a791-48c8-9c80-526ac32597ff.roa (raw, json)
Hash identifier: NccmhLj/TMbsBx13S+T44PnZuNuabRjrFUBZlmuveXg=
Subject key identifier: 23:2B:5A:6F:71:F6:7F:53:C9:DB:EE:F9:B2:35:F3:F3:4A:48:66:5E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7DBEA09FC74FEF5492FEF600BE470CB485B3C72F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/625812f2-a791-48c8-9c80-526ac32597ff.roa
Signing time: Thu 16 Nov 2023 00:00:00 +0000
ROA not before: Thu 16 Nov 2023 00:00:00 +0000
ROA not after: Thu 21 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:be:a0:9f:c7:4f:ef:54:92:fe:f6:00:be:47:0c:b4:85:b3:c7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 16 00:00:00 2023 GMT
Not After : Dec 21 23:59:59 2023 GMT
Subject: serialNumber=f0529820357e83297ce86a2302fa377068f1dd3eb29550717e2f377807778157, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:d1:b7:16:1b:07:20:f0:85:2d:64:ae:3f:
5a:64:46:11:5b:74:87:27:db:69:d5:ec:83:73:73:
82:00:ea:b5:80:cf:c2:61:1e:13:7b:b2:d0:ae:9b:
80:2c:b2:1c:ca:ac:2a:29:ce:b0:12:a4:b1:da:37:
9e:3b:a8:a4:6d:0c:c6:da:a2:c0:0b:aa:7e:9a:16:
61:37:e6:f1:69:b1:fd:c5:a3:c4:23:f2:63:18:7d:
a6:fb:c6:72:9d:31:39:ee:de:e8:2a:fd:2e:0d:12:
4c:a9:2c:13:27:7d:79:ba:a6:4a:ee:12:1e:68:00:
d6:ee:9f:6c:6d:f7:44:36:3c:71:9e:57:a1:0e:4a:
69:dc:a1:fb:1f:85:55:d6:1c:17:05:b3:00:6e:1f:
6a:e2:ea:84:d4:37:ec:d3:04:11:9e:c7:19:89:f0:
b3:3c:0e:58:02:65:14:8d:fb:05:36:d9:22:b1:bb:
08:95:cb:0b:a2:a4:20:ff:da:fd:89:44:d4:cf:4a:
05:8d:ef:3e:da:8d:e8:ac:44:65:b9:d9:9b:0d:88:
6d:31:7b:90:eb:4d:1c:5a:1e:f6:63:d9:e7:57:f4:
5d:e3:df:92:83:f4:e8:5f:96:95:ea:e8:9f:7e:a2:
ba:93:40:6b:8f:c1:e7:c6:e2:98:f7:fb:1e:f3:c2:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2B:5A:6F:71:F6:7F:53:C9:DB:EE:F9:B2:35:F3:F3:4A:48:66:5E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/625812f2-a791-48c8-9c80-526ac32597ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:83:9c:54:07:b9:6d:ea:17:ba:43:95:be:81:78:83:e6:2b:
c9:c7:6a:5a:44:e7:85:d1:45:05:a4:af:f0:10:1e:91:46:f2:
d5:f7:bd:04:15:ff:3e:07:38:23:9a:65:fd:c0:bd:0b:35:58:
d0:e2:f4:2c:42:5a:d5:30:d2:21:d8:7a:3d:6a:3a:8f:79:13:
40:1a:c5:e7:2f:65:0e:df:26:e6:1b:9f:8d:2e:7d:07:e7:36:
58:6b:90:2d:3a:92:16:29:6a:d3:da:b8:a3:21:bc:09:c0:0b:
a7:7f:6a:93:65:a8:b4:e1:fa:e6:d2:89:6c:de:9e:b1:9b:07:
c1:15:88:66:04:e6:43:81:85:84:8c:55:ac:76:60:1a:b6:04:
39:dd:81:5b:61:3d:1f:2f:5f:f6:d6:d1:5a:81:09:fd:fa:6b:
8b:78:fc:63:8a:bf:a4:68:36:e8:3c:42:94:f3:27:03:2e:78:
40:8a:05:9e:97:56:c5:32:7b:eb:84:05:e9:69:2c:79:14:af:
15:45:f3:9c:75:64:77:3e:b4:a6:a2:bd:6b:8b:51:44:ae:b3:
89:90:e7:06:9b:00:8c:b2:8b:20:f2:c3:3e:a5:8d:b8:aa:57:
d9:bc:7f:9c:ee:cf:fb:64:30:d2:86:cc:f9:dd:97:cb:ce:e8:
df:96:0c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:57:04 2025 by rpki-client