Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9500408b-c5cb-4a8d-b3d2-a0773b4e5cb4.roa
File: 9500408b-c5cb-4a8d-b3d2-a0773b4e5cb4.roa (raw, json)
Hash identifier: JcPHgOuV8/K0UrXx79PiJZWzW/FABFGVKipSfi20aKE=
Subject key identifier: 30:79:64:9F:9B:D2:13:71:EA:90:F5:5D:07:15:7B:58:37:8A:05:40
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4003C6A63817C1C879084E009ABEE1528BCBF53B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9500408b-c5cb-4a8d-b3d2-a0773b4e5cb4.roa
Signing time: Thu 30 Nov 2023 00:00:00 +0000
ROA not before: Thu 30 Nov 2023 00:00:00 +0000
ROA not after: Thu 04 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:03:c6:a6:38:17:c1:c8:79:08:4e:00:9a:be:e1:52:8b:cb:f5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 30 00:00:00 2023 GMT
Not After : Jan 4 23:59:59 2024 GMT
Subject: serialNumber=9cbb491f90aa2d1498e414f25ee9dd45ce791f420ab7f9603a3bc08c9fe64e5f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:1b:e4:b8:b3:d8:e1:80:5e:aa:00:2b:9b:
29:50:f4:55:36:bc:58:00:a4:ce:7b:2a:cb:02:72:
ec:33:e3:46:ac:3d:62:27:55:24:2f:9c:bb:88:cd:
8e:1d:08:ba:9c:cd:8c:79:29:80:8f:6b:69:39:08:
f9:9a:11:76:33:d2:8d:65:d2:f0:96:a2:85:95:ae:
aa:14:82:d5:ef:c9:c9:0c:a5:80:da:7d:bd:4b:e7:
02:47:20:73:73:c4:81:4f:fb:c3:db:a2:ae:1d:e2:
7f:b6:34:08:89:a0:2f:6d:79:18:bd:25:3c:78:4b:
11:d2:2a:fc:eb:35:67:78:01:9b:10:a9:05:3e:75:
1d:8b:13:e7:f3:db:37:31:7f:9b:30:bd:ac:c0:52:
3b:b8:87:b5:39:4e:e4:4b:f7:aa:85:52:07:c8:d8:
1d:0c:32:4e:97:3c:4e:8e:58:c6:e1:6e:f3:f4:71:
c0:b4:c3:3e:50:dc:e8:a4:09:87:89:5c:a8:87:0d:
86:b3:8c:89:33:e8:86:fe:e0:8f:91:83:2e:e3:09:
2b:cd:99:9e:2a:6a:1e:75:86:60:08:95:1f:e8:8b:
5a:20:a9:23:b7:64:e7:10:b5:77:e2:1f:aa:bb:a9:
00:a2:8b:0f:13:32:20:36:20:e0:2e:3c:4b:23:23:
59:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:79:64:9F:9B:D2:13:71:EA:90:F5:5D:07:15:7B:58:37:8A:05:40
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9500408b-c5cb-4a8d-b3d2-a0773b4e5cb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0e:b1:a4:f9:4d:1a:56:a2:bd:95:59:ee:25:36:b9:07:3e:
dd:7d:90:61:24:1a:72:0d:f5:c5:93:a0:96:0d:a5:de:45:58:
b6:85:90:81:54:67:1b:a4:d4:b1:ed:e8:6a:85:2e:93:68:96:
92:42:7b:8a:76:0a:69:e4:b6:0c:4e:4c:80:09:42:be:31:64:
41:8c:1b:56:34:90:fe:97:31:4d:d1:7d:62:10:e5:ad:9b:d8:
63:c2:93:93:38:fe:7a:74:9b:78:a5:87:78:50:9f:dd:81:a5:
a3:14:cc:ba:6b:d8:cd:23:b3:a6:d4:e2:4f:be:9e:4c:78:2b:
5c:f7:6c:2c:95:c1:78:7d:29:8d:d0:f1:30:e8:3b:bb:ac:12:
f7:5a:f9:6e:3f:bc:09:a2:38:ce:83:00:34:23:5b:28:b5:76:
e7:00:d0:8b:0e:72:f0:94:26:91:df:3c:c1:71:f7:ac:13:64:
d1:95:3a:79:cc:19:ff:eb:03:21:2a:72:d1:02:78:0c:d6:48:
40:52:6e:d5:65:76:ba:bd:be:e7:d0:45:9d:4c:26:d7:79:91:
12:c8:80:4f:6b:a4:7c:97:45:7e:eb:3f:5a:6b:2e:47:ec:15:
84:65:41:c5:75:52:ae:32:1d:b8:22:7f:89:36:4a:16:03:d4:
73:66:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:20:18 2025 by rpki-client