Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78baf9be-e9d9-4b0c-95d1-9c4d26af78e8.roa
File: 78baf9be-e9d9-4b0c-95d1-9c4d26af78e8.roa (raw, json)
Hash identifier: FsIA/XKQnN9CusPHL3asNwLT06MgLkwGERxnPIPZN8k=
Subject key identifier: 4D:B9:8E:BB:0A:13:8C:A5:AA:5F:98:55:34:9B:8A:51:DA:02:96:6B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3FD88AE594E136599C63EFF337D277083A5946BD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78baf9be-e9d9-4b0c-95d1-9c4d26af78e8.roa
Signing time: Mon 19 Jun 2023 00:00:00 +0000
ROA not before: Mon 19 Jun 2023 00:00:00 +0000
ROA not after: Mon 24 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d8:8a:e5:94:e1:36:59:9c:63:ef:f3:37:d2:77:08:3a:59:46:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 19 00:00:00 2023 GMT
Not After : Jul 24 23:59:59 2023 GMT
Subject: serialNumber=596d4d48b5b2bfa956effb32addb5c2a03e7933823dd9d8195716bdd503677ea, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:c4:c0:db:29:06:12:78:6f:7a:3c:07:f8:
71:c6:32:bd:8b:45:78:9d:27:a8:eb:f3:ff:2e:7d:
65:ad:d2:d1:6e:d0:66:78:1d:8a:da:84:58:f4:65:
60:cf:a6:1b:bc:cd:3c:19:69:e1:3e:e1:c8:84:b4:
1b:2a:da:ae:d5:51:6f:7d:ec:0e:1e:b8:77:16:ca:
39:24:4c:bb:ee:fc:12:73:e6:ca:bb:2f:35:33:d9:
06:2a:91:3d:7d:17:5c:2e:11:92:07:7a:52:2e:67:
fb:4c:8d:6b:3a:e2:b1:1c:fa:30:58:9e:7f:e1:ab:
3d:59:29:db:eb:2f:81:0f:ef:9b:67:94:28:5b:99:
d2:a9:68:ad:b8:1e:3b:43:2f:a4:13:99:42:82:ee:
50:c2:2c:18:ee:a5:e9:f0:c3:d0:c2:3e:ea:e1:43:
f4:fb:25:92:c3:1a:ce:33:dd:ed:90:d9:07:bc:62:
48:7b:d9:b0:21:50:37:d7:b0:5d:81:be:c8:f4:93:
6e:d0:b3:dd:62:1f:36:22:2d:95:b8:d3:af:36:a0:
61:ef:59:08:a8:34:96:20:4c:34:e8:94:3a:1f:d9:
ab:04:90:08:53:c0:49:e0:ef:a7:04:e5:50:60:8b:
99:7f:3d:b1:e7:a6:ef:5c:b7:c2:fa:00:98:1a:ff:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B9:8E:BB:0A:13:8C:A5:AA:5F:98:55:34:9B:8A:51:DA:02:96:6B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78baf9be-e9d9-4b0c-95d1-9c4d26af78e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
26:17:a8:c9:ae:b2:d0:e4:67:0d:d4:56:e1:28:33:22:dc:53:
85:0b:eb:84:fc:2e:7b:9a:62:e7:8c:b6:b8:e9:02:76:bb:dd:
52:54:5a:61:72:3b:6e:4b:05:7e:d9:43:6b:c9:ba:ec:c1:df:
6d:02:50:cb:09:fa:b4:6f:0b:de:4f:e7:a4:30:06:7e:68:30:
5f:5e:bb:52:aa:fa:27:81:6b:1e:34:41:60:e9:9e:9f:87:1e:
fd:cd:b9:7e:8c:b2:8b:bc:52:03:c8:c5:b6:d2:1d:9b:db:e7:
05:24:26:66:e5:fc:11:82:eb:cb:92:37:87:5c:2d:ca:f9:71:
77:49:7f:76:0f:c7:60:ae:66:88:b9:f7:c2:08:af:14:34:e8:
e0:cb:57:3d:86:10:01:24:9d:e0:59:64:9d:46:68:5b:3a:d2:
1a:10:a3:c8:1c:2e:82:00:13:ef:b0:7c:40:65:37:85:4e:c2:
a6:5f:59:e7:00:ef:4b:e9:ee:3f:09:d6:27:74:56:4a:09:aa:
64:7a:e5:31:9a:89:4c:3f:d2:69:17:cc:34:d1:36:72:50:39:
7e:cc:66:4e:1d:03:b3:50:4f:09:4c:d2:56:f4:4d:ec:a8:8e:
8e:48:ca:46:a7:8a:14:c4:3f:12:4f:8a:11:27:31:d3:63:5d:
ba:37:a9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:00:31 2025 by rpki-client