Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c0ae0b3b-bc65-4fca-a5ef-6b3192457dd9.roa
File: c0ae0b3b-bc65-4fca-a5ef-6b3192457dd9.roa (raw, json)
Hash identifier: TwMwphDTv8HIVWGMLrL7mGlyMqDjX5uzZTMLbgmGcjQ=
Subject key identifier: 3D:D0:E9:C5:D3:BB:E7:77:69:29:E4:CC:04:90:2F:FA:09:41:34:1A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 57436EDAB333C46C365BEF34B7EC182F424B110B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c0ae0b3b-bc65-4fca-a5ef-6b3192457dd9.roa
Signing time: Thu 03 Aug 2023 00:00:00 +0000
ROA not before: Thu 03 Aug 2023 00:00:00 +0000
ROA not after: Thu 07 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:43:6e:da:b3:33:c4:6c:36:5b:ef:34:b7:ec:18:2f:42:4b:11:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 3 00:00:00 2023 GMT
Not After : Sep 7 23:59:59 2023 GMT
Subject: serialNumber=51acb1f67262870ce9fcdab1be958d4892ef2e6ff6b484ce0decefa9fb15f663, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:1a:47:18:0f:b2:5d:f0:95:b8:b1:ed:4d:
d3:a6:1c:77:74:1c:73:2d:c4:90:2e:68:df:94:3b:
ac:3e:a0:37:8e:c1:51:ee:6c:56:63:9d:dc:57:6e:
89:67:b0:f1:4b:18:fd:00:68:bd:68:45:97:6d:ee:
2f:71:09:fb:3c:dd:41:a4:7b:43:0d:fa:be:df:88:
38:ed:e9:be:64:86:ef:85:37:0a:57:a3:38:b5:2f:
f4:c0:d2:91:bc:47:94:0f:01:c7:16:58:9e:e9:5a:
a0:29:d2:0f:84:da:7c:91:04:de:94:60:b2:fb:6d:
92:19:79:e2:5a:ac:0a:0d:c2:39:35:76:44:32:a9:
7d:c5:8e:02:9b:0f:2b:6d:61:b0:ac:68:a2:4e:28:
1c:c8:a9:41:2f:5f:d4:26:79:46:ef:25:2e:db:8c:
ad:48:ac:2e:59:9e:4f:7b:b2:39:24:6e:c1:3a:b7:
2c:01:ed:f7:b6:d7:78:fe:f2:71:99:b8:b1:db:05:
57:28:07:85:63:2b:98:d1:f9:7e:d6:3c:9d:c4:fc:
96:45:2a:8d:67:0a:2e:b8:8c:3a:af:8d:fa:fc:a3:
d6:d3:8a:ef:5c:4c:24:4e:52:81:c0:3a:02:e4:eb:
91:15:c9:c9:73:ef:3d:04:d2:76:a8:2a:08:14:5b:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D0:E9:C5:D3:BB:E7:77:69:29:E4:CC:04:90:2F:FA:09:41:34:1A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c0ae0b3b-bc65-4fca-a5ef-6b3192457dd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0d:0a:56:c4:6f:9e:23:43:d2:a1:fc:0a:87:76:e7:c0:f4:
2a:e3:48:ee:79:93:3a:6b:80:e3:c9:27:ff:d2:98:f7:05:4f:
97:73:6b:a3:83:67:8e:18:ce:fe:ed:4e:44:94:5f:2b:c2:5b:
2b:bd:0b:09:8e:59:49:66:77:d5:8c:aa:69:8f:b5:f0:8d:48:
bf:cb:e7:98:cf:ff:38:35:1b:9d:5e:97:64:08:80:ba:d3:b1:
a4:24:98:7f:47:d8:b3:5d:42:c7:81:60:8a:ae:12:cb:e5:6e:
e1:14:49:da:72:e3:fd:3b:f2:c1:fb:38:18:bd:86:80:ef:d7:
86:91:8e:e0:e7:1d:41:4b:06:48:8d:13:e0:13:4d:a5:12:22:
c4:08:c1:73:07:11:6a:9b:35:1f:76:dc:b3:aa:96:5d:35:e4:
3f:08:8e:ad:77:1f:46:38:2f:1e:64:99:90:19:9b:71:36:78:
2a:f7:07:b7:1f:49:8a:92:6a:89:2e:a6:5a:3a:7a:d4:d5:28:
98:88:a2:6e:d7:21:cb:81:49:69:50:84:0e:5f:e2:20:fb:63:
e6:50:11:34:84:b6:d6:a0:7a:18:44:81:16:8e:d6:d2:a6:93:
5a:84:a9:4d:f1:14:34:38:5d:14:6c:08:46:c1:97:bf:3b:7b:
0e:16:24:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:38:05 2025 by rpki-client