Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c3a72a4d-cc25-4a64-bd4f-af51cfdfb256.roa
File: c3a72a4d-cc25-4a64-bd4f-af51cfdfb256.roa (raw, json)
Hash identifier: QPEXW2lHt5/bFJVa5Z2AaxkQTQQT16DErC7v9vdbCgo=
Subject key identifier: A8:A2:E6:CA:9C:46:45:40:07:5E:E7:AD:57:15:D1:B7:7F:67:DC:26
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 34B7014FD84450C58E2BB922D31E3E7104A39785
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c3a72a4d-cc25-4a64-bd4f-af51cfdfb256.roa
Signing time: Fri 18 Aug 2023 00:00:00 +0000
ROA not before: Fri 18 Aug 2023 00:00:00 +0000
ROA not after: Fri 22 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b7:01:4f:d8:44:50:c5:8e:2b:b9:22:d3:1e:3e:71:04:a3:97:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 18 00:00:00 2023 GMT
Not After : Sep 22 23:59:59 2023 GMT
Subject: serialNumber=787ae86fa419b17ad0f37d30a97c40d9da8c6eb77e1da4854081daadfe9c2468, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:a3:9a:58:89:d8:c7:8c:23:55:7b:6a:4b:
22:a1:c4:f0:fe:5d:3b:7f:58:69:13:d8:10:7e:62:
3b:4b:6c:27:17:59:90:0f:b0:d3:af:27:9d:32:cf:
5b:80:76:a7:96:2c:3d:3f:26:04:08:fc:b8:b1:8c:
e0:e7:d2:b5:2c:30:83:c1:93:f9:bf:d3:a9:19:72:
f3:58:ba:36:89:5e:a4:f4:94:81:77:fd:06:29:4a:
07:1d:0d:b1:8f:6b:60:03:1d:96:79:c3:42:0e:41:
78:1a:fc:09:30:b7:e9:7c:9d:ed:15:0f:0b:17:b5:
c2:72:ad:35:21:0e:a0:d8:25:fb:89:b7:9b:c0:f6:
d4:ca:d8:e5:25:00:16:01:24:c0:64:c8:20:fc:21:
e3:b0:83:e5:0d:70:8c:66:04:de:8c:e1:a3:85:be:
e9:d1:fa:d8:a8:2e:b0:c0:0c:9e:b1:1e:bb:34:9b:
bb:1c:51:f1:64:05:b5:ad:54:d6:37:d9:f9:64:4e:
2a:e8:c5:cb:32:a7:2d:18:61:ad:ad:24:40:6e:cc:
18:b1:8e:6d:98:f5:49:31:b5:38:0f:08:90:4b:1b:
23:d2:61:e7:d2:c4:ee:4a:ba:3e:b5:32:6a:c3:bb:
51:59:bc:82:3a:d1:41:7d:44:be:bf:1e:da:fd:bc:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A2:E6:CA:9C:46:45:40:07:5E:E7:AD:57:15:D1:B7:7F:67:DC:26
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c3a72a4d-cc25-4a64-bd4f-af51cfdfb256.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
87:99:96:03:00:cb:10:ff:f9:24:84:9a:d0:af:97:82:7a:49:
6f:18:ac:2c:2d:99:ec:41:e5:75:58:88:b7:0c:f7:71:b0:89:
d4:59:6c:02:bb:08:7a:4c:57:2e:ed:d7:31:65:87:78:84:15:
09:54:73:ec:fd:af:16:a0:b1:af:bd:d4:cc:5e:9f:b9:7d:cb:
d3:56:7a:2e:6d:9c:10:f3:d7:23:47:2a:36:1d:b8:9c:e5:9a:
1d:ed:63:ed:15:a3:72:10:b0:76:be:53:aa:e4:97:2d:8a:94:
29:6f:cf:41:43:d6:cf:e8:8b:f2:2f:d3:7d:fa:32:d8:6f:f2:
9b:0c:0f:c1:7b:12:b3:e7:e7:4d:23:fc:79:58:b7:46:3d:50:
9b:5a:cd:49:2c:63:5a:6a:43:ae:17:5d:e9:3d:d8:17:02:be:
7f:0d:d2:b5:d9:ee:c4:e1:3e:61:3d:83:36:06:ea:77:90:61:
ed:85:74:86:06:b1:1b:b0:8c:d4:1a:a6:81:31:19:eb:f1:d1:
3e:98:2b:10:ce:9c:62:8a:e7:56:6f:22:94:2f:86:81:58:86:
e6:2d:09:cc:ec:b9:2b:5c:dd:2b:a9:5c:e8:2f:ce:aa:04:10:
5d:e4:21:c2:3b:97:cf:74:7c:0d:73:da:de:89:e4:a8:0d:72:
04:17:2d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:18:08 2025 by rpki-client