Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a16e06a9-82bc-4429-bf52-019669168d10.roa
File: a16e06a9-82bc-4429-bf52-019669168d10.roa (raw, json)
Hash identifier: ASc4JaAbjIsK4RUi5wcWT3HURkC2vkPSeRkCNjNhryg=
Subject key identifier: 8F:BF:E6:3A:37:AE:D4:3A:13:D9:41:A8:F5:74:1C:42:50:27:3C:96
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 63C1A70727133A5AC49EB8CC98413E1393D8AF8F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a16e06a9-82bc-4429-bf52-019669168d10.roa
Signing time: Sun 05 Nov 2023 00:00:00 +0000
ROA not before: Sun 05 Nov 2023 00:00:00 +0000
ROA not after: Sun 10 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:c1:a7:07:27:13:3a:5a:c4:9e:b8:cc:98:41:3e:13:93:d8:af:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 5 00:00:00 2023 GMT
Not After : Dec 10 23:59:59 2023 GMT
Subject: serialNumber=7026d4575dd8461ed8605df6995aac28c02eb227764bda5825190ae2e8014a23, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:73:c9:b9:a1:32:8a:11:dd:c8:01:9f:80:
52:15:cd:a9:53:5c:0a:1f:0e:42:2d:17:7c:94:c2:
18:1b:b6:f3:3b:c9:ce:b4:d9:40:a7:8a:bb:78:3d:
a5:72:e2:79:d7:37:64:9a:05:07:a4:6e:5d:5e:fc:
c1:ab:aa:ed:0a:64:7b:6f:5e:d0:4e:62:ad:ea:ba:
a1:68:54:d8:6d:5d:f6:50:78:ad:25:34:17:21:14:
f0:e2:4a:7c:f6:12:9b:ce:04:4f:65:6a:69:5a:0b:
b0:c1:69:38:29:2a:c0:0b:35:35:35:9b:77:00:49:
69:2f:a9:d9:e8:07:c7:87:ec:92:2b:d6:60:33:a9:
16:d2:1d:f3:62:73:ac:8a:5d:bf:8a:b2:ff:19:eb:
6e:79:00:07:c9:ac:c6:03:36:82:09:51:2e:a0:6f:
70:a9:cb:e2:db:80:f0:77:5b:fc:d6:4f:25:90:03:
b1:c9:28:18:82:89:d1:97:a3:fd:90:aa:54:97:1e:
ed:c2:91:75:cd:25:f8:48:18:99:22:3a:4e:bb:dd:
cb:2b:59:3c:27:2a:d3:47:f3:74:3e:45:24:ee:1f:
59:e6:30:ed:10:66:e8:97:95:18:1f:f7:1b:02:3b:
d5:9f:72:fc:c0:ff:d4:bf:4f:35:d1:bc:9d:9f:41:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BF:E6:3A:37:AE:D4:3A:13:D9:41:A8:F5:74:1C:42:50:27:3C:96
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a16e06a9-82bc-4429-bf52-019669168d10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
34:0e:84:02:dc:b7:58:63:f9:39:4f:1f:99:cb:a9:a5:00:1d:
16:e1:42:55:46:d9:8a:7f:e2:c9:08:5a:7f:2f:fe:47:51:16:
be:fc:36:d7:9a:6b:6b:8a:20:7a:7b:5d:18:29:db:09:89:2a:
82:2a:e9:23:bd:fe:be:9a:6b:49:a1:ec:24:25:20:1e:37:97:
73:f1:1c:94:06:ed:b6:73:76:82:e9:e3:ba:59:84:81:32:aa:
a6:9e:71:ac:bd:96:ae:60:4c:f5:fb:11:57:e6:81:ac:1a:4f:
3f:d6:71:09:f8:34:11:75:6e:38:bd:ad:1f:68:23:44:46:ff:
c6:d9:c3:b7:0c:d3:c2:ab:60:b5:1d:05:37:a7:02:1d:e7:cc:
50:7e:5e:95:ff:55:b0:2e:61:17:ef:69:c0:9d:91:77:4c:25:
e1:11:b8:ac:5f:88:b5:b9:ef:a0:60:1f:dc:c6:fb:43:27:8e:
0e:f8:a2:70:4d:aa:df:e8:12:ca:25:c8:07:8c:01:89:13:e5:
2f:e5:bd:a3:6a:0c:af:ac:49:49:62:fd:c7:51:f5:f3:f1:be:
30:8c:27:c4:1a:18:7a:94:0d:5b:6b:67:17:14:e2:89:8b:5f:
07:5e:fb:6a:fa:8e:ec:94:ac:96:12:7b:b8:51:e8:03:89:76:
8c:ca:cd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:39:04 2025 by rpki-client