Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/63586247-ef05-4f7d-bed4-b685eedaa235.roa
File: 63586247-ef05-4f7d-bed4-b685eedaa235.roa (raw, json)
Hash identifier: ZZLUZJ1XaSFtJg41yp9h4K7zbz+ueXBRpMHLEXFUlCw=
Subject key identifier: A9:1F:9C:49:8C:18:E1:DF:3D:5A:83:F5:8E:6F:F1:B7:89:B5:3E:BE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7C6ACA908B851C4F3F5C9E36E294E19944141054
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/63586247-ef05-4f7d-bed4-b685eedaa235.roa
Signing time: Sun 22 Oct 2023 00:00:00 +0000
ROA not before: Sun 22 Oct 2023 00:00:00 +0000
ROA not after: Sun 26 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6a:ca:90:8b:85:1c:4f:3f:5c:9e:36:e2:94:e1:99:44:14:10:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 22 00:00:00 2023 GMT
Not After : Nov 26 23:59:59 2023 GMT
Subject: serialNumber=3d75079ca8e5c9f37e1b780df5a2c489b1677edcb399250a88561a0dd0db1c08, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7a:81:3b:ff:28:1a:17:3e:64:03:8a:cc:f5:
77:6d:ed:ca:8b:00:bb:11:a6:48:33:b3:b4:75:dd:
ed:0d:dd:1e:95:42:45:77:4e:65:c1:c1:f5:1f:79:
30:9a:8c:d7:17:e9:a7:12:19:68:5d:92:1f:8e:dd:
2d:15:60:27:da:e3:20:75:cc:b6:b4:f0:40:54:7d:
02:56:5e:f3:a1:c9:04:1a:ab:08:16:cd:fd:a0:06:
df:d9:15:aa:80:58:e9:1b:12:a7:2f:1e:eb:29:b7:
c9:36:f9:a5:3e:16:65:e0:29:be:49:94:3a:12:3d:
c8:f1:84:81:6e:79:8f:19:fd:34:8b:19:0a:d0:c8:
9b:02:c0:87:e7:93:ec:26:1f:75:f9:46:be:43:89:
8d:00:73:01:ec:2c:63:07:79:52:12:58:33:2a:54:
d5:5e:ed:ee:8a:db:e1:16:71:29:ab:b7:55:2e:0e:
db:19:51:3c:c5:47:b7:8a:b7:28:5d:5b:5b:67:86:
c7:f1:a0:11:62:18:24:70:79:20:02:09:16:65:fa:
a6:2b:67:33:27:d3:c4:e1:86:12:6a:9e:81:3c:76:
ab:b6:3a:c8:3a:00:b6:67:e8:22:9f:40:e9:e7:3d:
f1:be:ff:63:c7:19:8c:8b:d7:3f:59:85:ad:df:a9:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1F:9C:49:8C:18:E1:DF:3D:5A:83:F5:8E:6F:F1:B7:89:B5:3E:BE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/63586247-ef05-4f7d-bed4-b685eedaa235.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:cd:28:5c:1c:6e:44:f3:ce:fa:e1:2a:61:50:a1:a2:64:0f:
26:dc:d8:18:73:4d:73:27:2a:11:7b:44:95:19:35:b9:02:7d:
1f:b2:39:fd:f3:f7:4f:3a:12:ec:7e:e6:6f:f4:f8:a6:b3:41:
78:34:f4:ee:e5:ea:28:30:10:5c:05:1a:bd:a5:34:57:a2:72:
c4:a2:37:9e:f9:9b:a1:f3:02:89:54:bb:0d:c4:2e:78:6c:1a:
da:c7:47:00:bb:48:b4:98:cf:a9:a3:76:3d:cc:9f:35:c2:94:
c5:67:4c:f1:d3:2c:66:49:c1:53:3c:8f:c7:f0:97:9a:02:31:
8f:b7:35:b1:11:af:93:f3:08:14:3a:2b:61:94:e2:ee:f7:a7:
aa:24:66:4f:6e:b4:f9:e1:6e:5f:7d:6c:bc:9d:b6:58:f7:85:
e3:f1:3a:ab:00:cb:5e:1c:57:99:10:59:30:3f:dc:4b:44:0d:
0b:33:db:05:9e:1d:90:5a:91:60:72:35:33:16:e6:45:63:7c:
fd:df:75:24:23:29:74:67:08:3f:2e:1c:ac:ae:36:45:d0:3f:
e2:ce:b3:d2:0d:63:a4:17:c4:4b:dc:20:61:14:49:88:b7:46:
80:37:92:10:25:f4:3f:55:f6:3f:19:c1:8d:55:21:ea:f5:66:
c6:48:05:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:04:25 2025 by rpki-client