Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b6cc4e93-8d85-422d-bfc2-cad892e3ce05.roa
File: b6cc4e93-8d85-422d-bfc2-cad892e3ce05.roa (raw, json)
Hash identifier: AckfpBUT3uI9XemXQkoVFBnGXWYIC8TmjAhHXR50G+c=
Subject key identifier: 00:05:48:1C:D2:3D:4A:EA:36:A4:44:3C:19:60:5D:38:82:05:34:4A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1683A359A5DEE76EA0D67B0C34291CF11722C4C5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b6cc4e93-8d85-422d-bfc2-cad892e3ce05.roa
Signing time: Wed 19 Mar 2025 03:13:20 +0000
ROA not before: Wed 19 Mar 2025 03:13:20 +0000
ROA not after: Wed 23 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:83:a3:59:a5:de:e7:6e:a0:d6:7b:0c:34:29:1c:f1:17:22:c4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 19 03:13:20 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: serialNumber=d7ba6a1353f8a34bf8e78ad8520193f53734ce784a25cca890adfbc53c61f977, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:96:bb:b3:5f:fb:9b:27:b3:07:98:a0:6d:
38:5f:61:4f:11:48:13:27:48:d1:37:1a:84:14:ba:
0a:4f:e9:9c:3e:4c:71:bc:05:44:34:d4:ac:52:5c:
85:9a:fe:f7:7b:7e:fc:be:da:05:b4:cf:f4:c7:70:
63:0e:74:4d:de:e4:5f:2e:7d:ee:65:95:16:f4:16:
7e:7c:04:09:31:28:03:b9:5b:c1:d8:7c:5f:82:5d:
fc:44:4d:23:cc:2a:02:2a:05:c1:0f:05:e0:21:5b:
3d:67:e7:a4:2a:f0:a2:b6:cd:f1:10:8b:21:36:49:
71:48:f8:d9:1e:c8:7d:4d:3c:06:55:8f:d1:57:67:
01:3e:f5:59:b4:8f:75:b5:1c:ff:55:3a:d4:7c:7d:
c4:be:d1:26:9d:0c:c9:54:06:b2:52:b6:25:9a:c9:
64:db:40:e6:b3:25:ec:d8:ff:25:60:9c:81:91:91:
80:63:7e:53:c9:e3:63:78:4e:e9:88:c9:1e:b7:51:
2d:7d:9c:3b:0f:73:b8:76:fc:6d:7e:08:8b:70:fe:
63:bd:94:84:8f:d2:13:f7:5f:3f:e3:df:18:11:d1:
5a:ec:2e:85:b5:b6:23:c0:8b:f8:5b:4e:94:c0:f3:
e6:64:8c:5f:60:df:1e:9b:dc:42:1d:3c:c7:22:a6:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:05:48:1C:D2:3D:4A:EA:36:A4:44:3C:19:60:5D:38:82:05:34:4A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b6cc4e93-8d85-422d-bfc2-cad892e3ce05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:16:a7:fc:08:07:7d:9a:cc:49:46:91:d0:6f:c7:3f:94:97:
72:48:32:bb:de:21:77:f5:1b:41:64:f0:d7:d4:eb:43:94:09:
8c:9b:47:ba:df:3b:ac:52:60:5c:5e:b8:26:66:18:7b:7d:8e:
d8:1d:bf:ef:cc:e8:65:08:a2:ed:c8:e3:66:49:8b:c1:9b:5f:
30:7c:f9:09:eb:21:39:38:08:1e:ef:9f:32:47:cc:36:6f:e4:
c5:4e:ad:89:a6:5f:6b:56:21:f8:e0:77:0d:12:97:32:4a:19:
6f:1e:78:9d:86:07:96:07:a3:6c:18:ae:8a:46:a2:61:67:b1:
25:05:30:17:9d:9a:83:7c:e9:c0:0e:15:cc:ae:73:d4:09:13:
09:30:af:24:3f:dd:40:3a:04:3c:86:09:1c:89:c5:23:06:89:
fc:ad:6b:a0:20:69:b8:64:7a:7c:45:ed:b7:84:99:1c:f5:dc:
cf:35:be:7f:a2:73:a1:4b:c1:ae:2f:13:1b:a1:68:79:52:8d:
41:9f:45:2e:66:fb:11:98:8e:77:b4:82:90:6c:04:05:71:98:
0d:0b:3e:7a:45:e9:3f:01:50:1d:c2:78:09:c7:aa:94:e4:65:
35:10:8b:b0:79:03:90:5b:b1:88:dd:fb:97:23:43:07:25:44:
b6:5f:31:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:10:42 2025 by rpki-client