Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/777edc80-a768-4cee-9620-0d89be3236af.roa
File: 777edc80-a768-4cee-9620-0d89be3236af.roa (raw, json)
Hash identifier: dBwIOcoFrZtH0QO1nWXnaSSeSLfLLaBMNTZuV9EzHdw=
Subject key identifier: 9A:DB:0B:C4:F7:5A:1E:BC:FA:8C:EB:B5:B9:E4:D2:C9:DE:03:5B:53
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 768B55760236F2C846FE751828735CF74478EB04
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/777edc80-a768-4cee-9620-0d89be3236af.roa
Signing time: Tue 12 Dec 2023 00:00:00 +0000
ROA not before: Tue 12 Dec 2023 00:00:00 +0000
ROA not after: Tue 16 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:8b:55:76:02:36:f2:c8:46:fe:75:18:28:73:5c:f7:44:78:eb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 12 00:00:00 2023 GMT
Not After : Jan 16 23:59:59 2024 GMT
Subject: serialNumber=05943b8314918d4e48ec4146f73d56bb62aaad3c4496adc95f4bdb54d7afeece, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:64:fa:9b:d0:0c:20:23:da:9f:5d:42:89:
d1:7b:a5:a6:24:6e:a4:f4:9e:d3:4c:c7:91:4e:4e:
26:f0:a5:47:39:57:f7:f7:35:67:70:24:73:9e:56:
af:70:1b:9d:b9:be:0b:cc:d6:a1:fb:1b:e0:1d:87:
84:32:1f:d4:1a:ac:df:79:e4:b2:b9:ee:03:a4:60:
6b:52:d4:e5:51:5e:37:da:3c:fd:c8:54:c7:e7:45:
52:c2:40:71:f1:9c:04:7a:e7:5b:20:59:44:53:43:
df:f9:22:c2:1e:d0:ad:3f:0b:54:94:76:0b:09:0d:
c8:4c:b6:e9:25:29:63:8e:e8:65:57:5c:09:ff:fb:
3d:0e:45:93:27:d7:52:b3:01:6a:04:6f:9f:09:df:
c6:e6:f1:a7:5a:e7:07:25:22:64:58:42:d5:3b:f8:
83:0e:e2:e8:1f:f0:21:77:23:76:04:61:29:93:35:
ad:98:9e:10:87:cd:6a:04:82:84:3a:25:4b:b3:cd:
36:7d:ff:5e:fe:92:6a:c1:e4:03:06:e4:41:bc:46:
4c:25:d3:c5:84:19:d5:cb:1c:50:7f:b2:d1:af:41:
ac:71:56:5c:43:2a:10:15:db:f0:69:d6:2d:e8:2d:
20:73:22:70:04:71:85:49:70:f0:9c:9f:fe:93:0d:
7c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DB:0B:C4:F7:5A:1E:BC:FA:8C:EB:B5:B9:E4:D2:C9:DE:03:5B:53
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/777edc80-a768-4cee-9620-0d89be3236af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b5:b6:6b:9e:45:63:a4:be:cb:e2:f7:d1:92:1c:ba:46:d6:
0c:e9:4b:d7:30:bc:83:84:62:bb:9b:ec:24:03:55:4d:d8:8f:
48:a3:9d:57:8f:7b:47:dd:fd:30:75:8f:8c:e7:d5:f8:a2:dc:
cb:73:12:d9:c0:5c:ce:7b:17:60:18:83:2a:15:83:8a:d9:85:
ac:b2:90:02:da:4c:60:ac:75:dd:f7:31:dc:e6:22:d7:35:bb:
53:b9:2d:6a:c1:21:2f:25:99:a0:32:c1:83:ce:af:b9:4c:5b:
24:ee:89:4d:c4:6e:cb:14:42:0d:7e:5b:5f:3b:ac:27:e8:1c:
0e:72:af:0c:3f:34:57:05:56:1d:85:7f:44:3e:81:6b:f8:38:
db:96:a4:95:b2:3e:58:46:5e:cf:66:e0:2d:1d:63:f5:1c:6e:
e4:16:8b:1a:07:74:e2:25:fd:52:f7:36:04:9b:b5:e1:9a:d0:
07:1a:39:4c:d2:d3:75:43:0a:ed:a4:82:4a:38:bd:ee:1a:ba:
0d:e8:d7:c7:9d:fa:10:3f:31:fc:dd:7f:82:a0:c0:b7:2e:9a:
d8:b9:72:b7:2e:7c:95:77:d8:54:3b:34:22:4c:b0:ed:b0:7e:
3b:38:2c:e7:df:31:69:69:99:34:c6:c3:36:21:ef:e9:65:38:
db:c5:22:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:57:04 2025 by rpki-client