Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c5f0d16a-9991-4311-8266-d0af8f0ec2e6.roa
File: c5f0d16a-9991-4311-8266-d0af8f0ec2e6.roa (raw, json)
Hash identifier: p9wayffEHtM6+tr5r8KPG9V+fN+zQtgbNflpyhcsovU=
Subject key identifier: 2E:6A:F5:E5:00:25:FC:94:A8:B2:95:A0:05:B9:E0:9E:97:84:94:36
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 467C8B7FD4BED5396CFBD8B3DF21244F575027FB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c5f0d16a-9991-4311-8266-d0af8f0ec2e6.roa
Signing time: Tue 04 Jul 2023 00:00:00 +0000
ROA not before: Tue 04 Jul 2023 00:00:00 +0000
ROA not after: Tue 08 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:7c:8b:7f:d4:be:d5:39:6c:fb:d8:b3:df:21:24:4f:57:50:27:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 4 00:00:00 2023 GMT
Not After : Aug 8 23:59:59 2023 GMT
Subject: serialNumber=43271a56e624cdf0270420f0237e6520b15f52f175c4dd8087c211ac827b3296, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:98:e2:39:f5:22:bd:6a:c6:8c:f4:8b:2e:
44:5b:f7:5f:30:af:7f:d3:6f:2a:ff:31:3c:aa:84:
5e:ce:a2:f8:c2:5b:16:5f:05:0c:a3:0d:a3:ba:3d:
2c:00:4c:64:54:f5:fc:21:4e:b7:90:a7:be:02:d4:
1d:8d:f0:0b:82:b2:f8:66:b6:18:38:3c:89:10:17:
26:49:26:9c:37:a1:a8:70:18:85:9b:3f:46:05:95:
c1:fc:2b:f3:97:36:1d:dc:0d:89:b1:19:40:87:e1:
f4:96:fd:c3:df:96:69:10:c5:83:0f:f6:53:5d:c7:
d1:50:85:db:d6:7d:52:6e:4b:07:65:ec:6b:20:7d:
87:4a:12:83:9e:c1:f2:92:23:3f:59:7d:d8:99:2f:
da:1a:d4:ea:25:10:e7:d1:11:b5:df:9f:f6:9b:c3:
2b:2f:58:03:d1:e5:58:67:ac:79:c2:15:33:75:a6:
1e:f8:8b:06:c4:6a:40:2b:cd:6c:37:a0:76:64:d3:
67:d1:90:87:73:0d:ca:bb:0b:d8:a8:d1:62:2a:3d:
12:6a:7f:6d:89:58:b6:e9:05:f5:bf:81:a9:ba:ec:
2b:39:e5:b5:28:04:d8:7b:7d:8f:9b:47:5f:85:6e:
b7:fc:56:b9:46:ca:a5:c3:7e:f0:97:6b:74:5f:2b:
08:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6A:F5:E5:00:25:FC:94:A8:B2:95:A0:05:B9:E0:9E:97:84:94:36
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c5f0d16a-9991-4311-8266-d0af8f0ec2e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
96:00:5a:55:25:a8:17:99:f4:35:80:fe:5c:69:35:43:0a:67:
d8:65:7a:f5:59:17:66:b4:f1:53:80:f7:f2:28:83:ca:59:90:
92:79:88:a1:f7:59:66:19:b4:65:ff:4c:32:2f:a3:92:b6:f3:
9f:d9:5c:6b:81:7a:aa:62:23:b7:03:e8:11:e4:0a:5d:6f:91:
79:76:0b:2d:53:15:6d:aa:06:2a:3a:5d:a2:89:4e:15:ec:01:
fc:fc:4f:77:c9:b5:73:2d:d0:7d:a7:29:44:90:2d:d8:d9:d3:
c1:c2:25:3a:b0:ce:b6:c8:55:20:ba:d4:16:b3:58:df:a9:a9:
8b:16:fd:4d:5a:db:d4:ab:0f:8b:a4:7b:da:35:d5:75:78:68:
c8:1a:c8:31:b0:62:f9:46:ae:b9:cd:e2:50:d7:35:f9:50:ce:
9a:88:85:c5:24:8d:b5:bb:f7:97:3b:6e:d5:84:19:8d:d5:ae:
48:77:da:c6:44:94:1c:4d:8b:f4:6d:e7:03:4b:e5:c2:45:34:
4d:3f:30:08:35:0f:8f:b1:b3:11:99:ff:36:29:70:22:49:cf:
69:78:01:b1:7e:8d:5b:83:5f:2b:c3:9a:7c:d2:6d:27:4b:62:
77:ff:d0:9c:79:6e:a7:09:2b:f7:7b:e0:73:67:66:b0:04:eb:
ab:9b:34:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:50:25 2025 by rpki-client