Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a764619f-6c4e-4060-8d93-228b18563d57.roa
File: a764619f-6c4e-4060-8d93-228b18563d57.roa (raw, json)
Hash identifier: EM4/QimNk+HzTNjPT4jb7i1r37BOeORggNF/64AYubg=
Subject key identifier: DF:77:65:ED:8A:C4:10:1A:EC:8C:65:58:6E:0B:3B:2B:B9:EE:34:BA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 65F8CE0C5100545502735B950F7C00F68BD30A84
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a764619f-6c4e-4060-8d93-228b18563d57.roa
Signing time: Wed 23 Aug 2023 00:00:00 +0000
ROA not before: Wed 23 Aug 2023 00:00:00 +0000
ROA not after: Wed 27 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f8:ce:0c:51:00:54:55:02:73:5b:95:0f:7c:00:f6:8b:d3:0a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 23 00:00:00 2023 GMT
Not After : Sep 27 23:59:59 2023 GMT
Subject: serialNumber=ec2515dd78f859f6b52e01efb6433ac7c94b834a1288504aba752b6d17269756, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:bf:64:54:89:e9:ea:c6:f2:ff:4b:bc:4e:
4b:dd:b2:51:bc:5d:49:79:4a:c6:b6:4a:95:b9:78:
04:ae:e1:d8:5f:74:27:fc:2e:11:7f:17:f6:b3:df:
90:b5:dd:da:7e:a3:a7:cc:36:3a:2d:33:d3:45:05:
72:bb:fb:b6:bb:65:d8:aa:50:0d:2e:df:3e:c1:a3:
cc:3a:01:01:c5:3e:a9:ee:f9:23:21:a8:02:ed:1e:
05:0d:f1:7c:c0:e1:1b:29:ef:1d:d9:b1:38:33:b5:
4f:ce:18:64:39:c1:6e:2e:2a:59:3e:20:03:71:81:
83:55:fe:91:d9:42:1a:e5:78:8a:2f:69:9a:6a:97:
43:75:06:6c:38:d5:09:c3:8d:b5:6c:a8:64:14:24:
49:86:9e:28:a5:a8:47:f7:63:95:7d:f2:7e:69:b6:
e9:6a:4e:84:42:a9:81:58:30:1b:31:1d:c8:d1:3e:
c0:4b:1f:8b:7f:4c:7f:99:90:1c:21:f8:a3:9d:21:
e2:42:79:ec:d7:97:8d:e1:d7:35:72:47:ef:85:fb:
1a:e4:6e:7e:c3:cf:f4:4b:6b:be:a3:0b:2b:bb:ed:
a0:ac:69:2b:34:a2:45:e0:b9:b3:e2:cf:6b:02:f3:
3f:47:e6:cb:f8:a2:6b:08:51:1e:c3:7b:09:60:db:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:77:65:ED:8A:C4:10:1A:EC:8C:65:58:6E:0B:3B:2B:B9:EE:34:BA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a764619f-6c4e-4060-8d93-228b18563d57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:fc:c0:41:2b:18:f4:04:54:23:6a:a7:6e:2f:c3:9b:b7:22:
e0:93:88:df:5c:38:6f:59:f8:ac:20:47:8b:60:f5:6e:d2:7c:
78:00:3c:d8:ce:12:08:7f:7b:a7:e1:31:a4:23:6b:b7:b5:46:
4e:48:e2:ff:b1:eb:19:5e:96:c8:15:f3:3f:3b:18:80:b5:04:
63:a2:5b:88:1b:00:21:e1:74:be:8b:43:7e:af:0e:ef:62:0f:
94:f6:36:86:8c:36:c5:e6:4a:4f:bd:f8:60:59:d3:d6:10:c1:
9b:11:92:12:24:2c:7e:fc:82:b9:49:98:5e:c9:2f:18:76:92:
6f:0a:df:0d:fe:a4:b6:68:6b:95:f8:45:21:2b:21:93:ad:32:
9c:53:db:1f:a1:ec:c2:8e:b8:3f:1b:a0:f0:8b:a5:52:d1:da:
7a:40:b4:05:65:68:2b:88:c6:1d:af:64:41:df:56:c5:b1:50:
59:60:fb:f6:35:9e:79:3e:ac:9d:cd:c2:f4:0a:3c:18:16:21:
57:60:65:32:5d:bf:5b:2c:02:f9:f5:b3:38:d9:57:bc:36:1b:
c6:7f:8a:33:7b:78:ef:2a:38:2c:37:01:d2:1e:2b:86:94:34:
4f:90:bb:4f:78:6f:18:5d:64:81:9d:82:c3:64:04:34:5c:37:
b8:a3:3d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:42:38 2025 by rpki-client