Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/728c56ba-6db9-43d4-97e6-1bac2da64180.roa
File: 728c56ba-6db9-43d4-97e6-1bac2da64180.roa (raw, json)
Hash identifier: BZ94obQ6BE2Y9j2IZfAN4y86fv3ftQnDsj0ddSub6sw=
Subject key identifier: 8A:E4:1F:4A:6F:AC:D8:EC:79:B2:C8:E2:54:B5:82:38:E9:74:CA:0A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6301F48F451DBF893D9F8AF322CFCBA02579460B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/728c56ba-6db9-43d4-97e6-1bac2da64180.roa
Signing time: Tue 13 Aug 2024 00:00:00 +0000
ROA not before: Tue 13 Aug 2024 00:00:00 +0000
ROA not after: Tue 17 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:01:f4:8f:45:1d:bf:89:3d:9f:8a:f3:22:cf:cb:a0:25:79:46:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 13 00:00:00 2024 GMT
Not After : Sep 17 23:59:59 2024 GMT
Subject: serialNumber=3364c7ad6c0f45b6936d7e8234ad7f75437f0e83e8bac7f0bc948ed8e59676f6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:73:36:14:83:2d:3f:86:88:70:56:dc:20:
52:a4:50:02:06:e2:7b:82:8b:71:c0:10:d6:3c:38:
94:a2:e2:db:c4:3c:d8:a7:c2:db:ac:4d:0a:66:b3:
c8:d5:33:80:4a:75:90:af:57:b4:3a:c3:76:eb:1a:
eb:4a:28:5c:e0:ba:99:0e:ee:15:5c:b1:2c:fb:9f:
3d:99:6e:f9:94:e4:f3:62:d3:96:57:a0:c1:c7:16:
b9:72:46:b3:e3:e0:88:2f:d5:ff:a3:28:d8:b5:be:
33:b8:98:4e:51:fb:69:96:b1:41:8d:4f:29:c9:fe:
28:82:0a:38:73:4b:a9:98:7f:b5:27:21:c5:76:1a:
ac:fd:9b:43:69:d3:48:4d:49:5c:9e:aa:09:e7:01:
60:bb:9f:e3:8d:db:b2:60:a8:c4:73:63:0e:53:d3:
c2:87:79:10:e9:ea:11:13:44:d7:4d:7b:0d:0f:87:
ce:d5:e8:b7:2c:61:33:a9:72:32:19:02:9e:38:39:
2e:ed:c9:39:53:36:73:d2:0b:a8:28:ea:9a:2a:47:
6e:fe:0a:78:28:91:15:71:63:4c:10:8e:21:46:62:
ab:94:83:db:9e:9f:a7:d8:68:54:1c:4a:91:c1:16:
79:3d:a5:eb:c8:a3:98:fc:35:a4:f3:ae:1d:af:fc:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E4:1F:4A:6F:AC:D8:EC:79:B2:C8:E2:54:B5:82:38:E9:74:CA:0A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/728c56ba-6db9-43d4-97e6-1bac2da64180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:6f:e0:19:d0:24:d9:d2:fa:c5:4b:2a:59:a6:fe:55:87:03:
2d:2f:b3:a0:80:82:ad:c6:3c:62:d0:a3:8a:a2:68:a8:dc:47:
2c:42:b6:84:e2:e1:05:af:55:79:35:1d:39:1a:a6:51:11:81:
18:6a:ca:7f:03:4e:24:9f:b6:95:1a:2d:d5:93:ba:07:da:a7:
46:df:19:3b:14:9c:5e:76:d0:b3:75:64:8a:3c:c4:57:8f:fe:
b1:ac:d9:5e:41:7c:18:9d:42:d9:8c:55:21:8a:34:b9:4f:11:
af:8c:d7:79:f4:d6:ef:ef:b4:68:f4:0c:96:06:fb:25:55:31:
91:d3:68:a3:92:2d:ce:6c:3b:82:2a:2f:82:ac:cd:e2:ec:f4:
46:9f:cc:59:3e:28:31:c3:37:8e:04:25:36:60:ed:65:99:e2:
f1:17:25:19:17:50:d1:3d:78:ee:a5:3e:88:fa:69:0c:b5:06:
fc:ee:bf:9b:22:ea:b4:26:6a:87:f3:f7:3d:ea:a3:d5:73:67:
08:92:6f:74:f8:15:91:a3:ac:13:13:76:8e:c2:6c:54:62:0e:
4a:75:64:81:69:73:0c:be:97:f6:ec:06:a0:82:f6:3e:05:01:
37:c8:e9:27:59:76:cf:64:8c:0e:f4:68:5a:04:2a:2f:11:3f:
b5:c0:1f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:35:25 2025 by rpki-client