Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6e4ad4a8-4566-4b9b-a4f2-58450b97df44.roa
File: 6e4ad4a8-4566-4b9b-a4f2-58450b97df44.roa (raw, json)
Hash identifier: uY3GEn2H9pokjhsjm060uVL4UFWWR4j7P5daoAqnUQo=
Subject key identifier: 9C:4B:D9:01:8B:66:23:E8:F6:66:CB:CC:A1:23:3A:E5:D7:D7:84:D1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 278FC07FF98833B2DA3CD44200AEA501670EAFC7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6e4ad4a8-4566-4b9b-a4f2-58450b97df44.roa
Signing time: Wed 26 Mar 2025 06:23:21 +0000
ROA not before: Wed 26 Mar 2025 06:23:21 +0000
ROA not after: Wed 30 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:8f:c0:7f:f9:88:33:b2:da:3c:d4:42:00:ae:a5:01:67:0e:af:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 26 06:23:21 2025 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: serialNumber=07dfc0a3261a351f43a0a68dd44be65fc19c6262b8efa6b30177cc667860f19c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:20:82:fe:2d:0c:80:ca:35:2b:6c:61:1b:
13:d5:0a:15:c8:27:05:18:ed:5b:08:2d:dd:5d:b3:
2a:cd:13:26:97:7f:03:3b:7c:5b:6c:9a:98:76:0c:
9e:e6:5d:90:5f:74:53:61:35:ca:63:ec:62:00:bb:
a8:5c:ac:e3:52:71:17:3c:ff:4b:78:36:c7:43:b2:
21:5e:ac:04:dd:50:cd:38:48:e4:6b:b5:82:dd:60:
95:84:e2:1a:32:1b:03:31:9b:5f:bd:7f:45:54:2a:
df:10:cf:87:36:49:53:ae:fa:3f:58:e8:01:de:20:
9d:64:8c:6a:17:0c:72:99:e7:9c:8f:3b:7e:b9:30:
06:fc:80:80:49:0d:2a:8e:4f:04:b1:65:3b:5f:be:
3e:e4:2f:19:ae:b1:71:e1:b5:1f:be:67:8f:9e:5d:
e7:fa:1d:70:81:51:b4:4c:30:72:99:cc:b8:27:f2:
29:9a:82:74:7b:90:27:9a:ca:9c:a7:34:82:0d:f9:
fd:db:b5:46:82:8c:b9:43:22:a5:18:f8:8a:c2:8b:
f7:dc:a5:98:79:dc:89:9c:19:23:e6:46:f7:32:0c:
0c:d5:8e:26:a5:4a:0b:fc:46:dc:91:20:48:87:6f:
f5:44:eb:9e:0b:3b:07:43:0e:f2:40:c2:a2:ba:56:
62:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4B:D9:01:8B:66:23:E8:F6:66:CB:CC:A1:23:3A:E5:D7:D7:84:D1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6e4ad4a8-4566-4b9b-a4f2-58450b97df44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:2a:78:4e:92:ba:3a:a9:99:c4:c4:c7:7c:e1:8a:9c:df:42:
d4:15:93:ac:90:9e:ad:4e:87:cc:04:63:a4:78:a2:95:66:cf:
70:c1:0a:f1:d9:1e:16:19:c0:bc:ee:1a:a6:a4:db:06:63:dd:
31:d3:f0:b8:4e:a1:5d:32:82:bf:8d:20:48:cc:2d:77:8d:8a:
0c:9b:af:d9:9c:cd:29:57:90:c6:bd:8d:7b:77:14:99:68:80:
07:c5:b6:6e:c2:7a:4c:d6:ee:4e:9e:d6:9a:53:78:3a:83:bf:
04:5d:44:a5:49:f8:11:7b:39:a8:cd:9d:91:1e:a7:a5:6f:1f:
ce:b9:9c:36:c7:19:99:b8:c1:da:7e:64:03:ec:88:e1:52:4e:
f4:a3:4e:89:72:cf:be:d5:35:d5:ce:90:b6:0f:95:70:82:8a:
66:83:c6:d5:71:81:22:34:12:8f:44:3b:67:6b:15:95:d6:fc:
36:e2:7e:eb:47:27:ce:84:7b:ea:2f:69:f4:67:4e:12:ca:c1:
e0:1e:2c:27:9f:bc:05:56:a0:c0:13:08:72:fc:de:ac:33:6b:
82:8c:f6:3c:99:68:ae:cb:18:3b:5a:d2:4f:a3:55:db:33:23:
d5:fb:ba:8b:e0:bf:9b:33:dc:3f:a8:5e:e3:9e:cf:f6:ae:a8:
99:49:51:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:23:14 2025 by rpki-client