Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c6fbac7d-6733-4198-8797-46c5a4e426a2.roa
File: c6fbac7d-6733-4198-8797-46c5a4e426a2.roa (raw, json)
Hash identifier: 3rRFNTGjJlzL2lQ0eW3XIwZ7C0kVkMkMi6SFXe0DVI0=
Subject key identifier: 28:90:F6:67:87:29:B8:4B:9A:B1:7B:0D:BE:01:34:30:37:AE:E1:6F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 558B5947E08224A41F62F2BDA3681C28A61B185B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c6fbac7d-6733-4198-8797-46c5a4e426a2.roa
Signing time: Tue 02 Jan 2024 00:00:00 +0000
ROA not before: Tue 02 Jan 2024 00:00:00 +0000
ROA not after: Tue 06 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:8b:59:47:e0:82:24:a4:1f:62:f2:bd:a3:68:1c:28:a6:1b:18:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 2 00:00:00 2024 GMT
Not After : Feb 6 23:59:59 2024 GMT
Subject: serialNumber=d0100f50831fa47c7c337eb9163bc13adb098c95af2ea8c5567aaf32e4373610, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:11:bf:a8:77:4b:b6:41:52:d0:3b:d3:8b:
ed:9b:7d:5e:06:72:9f:bc:b1:f3:22:aa:89:c5:39:
16:f7:3a:7c:80:77:72:23:00:93:f6:0a:a6:05:4c:
98:7c:0c:44:8a:74:89:f7:47:2a:b5:3f:63:e9:00:
4c:ab:4f:8e:18:2f:ab:80:d4:d4:94:4b:12:61:cb:
f1:c3:e3:6b:07:0e:a9:fb:7a:5d:ce:73:f5:2c:0c:
a5:c2:f5:4e:06:88:82:3e:e1:66:ef:f7:66:c3:e4:
a6:11:26:8e:df:20:42:0b:0d:8a:a4:a3:f2:b7:85:
89:01:31:77:18:b2:8b:41:ee:80:0e:13:1a:96:4e:
6a:38:8b:b0:35:db:2e:3a:6a:73:60:e9:28:0e:03:
11:e9:30:92:fe:14:b6:52:43:10:f5:b1:52:41:28:
80:08:87:1c:51:ba:5e:59:af:00:42:f0:f1:a0:3c:
18:18:09:28:fd:9a:38:a4:d7:86:df:df:61:76:09:
e3:41:bb:cb:a7:28:1d:2f:a1:bc:ef:cb:84:ce:4b:
42:7e:54:7d:af:00:aa:a9:8a:b7:c9:12:f0:73:d2:
57:bb:97:57:74:3b:c3:09:d8:1f:51:c1:c8:79:0c:
df:e3:09:54:db:d3:64:88:b9:d8:1b:ca:09:a1:6c:
c2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:90:F6:67:87:29:B8:4B:9A:B1:7B:0D:BE:01:34:30:37:AE:E1:6F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c6fbac7d-6733-4198-8797-46c5a4e426a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
55:47:65:89:47:58:3d:9a:bd:58:32:b5:e5:4d:d6:a2:b1:f4:
ca:5a:6c:b9:e9:96:04:3e:66:77:f4:9b:d2:38:c4:ea:7d:1b:
e2:62:45:bf:62:0d:4e:f7:05:44:19:3e:d6:4b:ea:e0:55:62:
01:ea:ff:5a:60:50:0a:0c:32:04:fc:7e:7f:0a:97:19:a4:78:
ed:36:30:8c:65:25:20:41:b5:e8:dd:b4:11:9f:a2:5c:4c:c8:
e1:4c:33:e6:86:b1:7c:ec:a8:75:18:45:88:89:d9:c6:1b:71:
b9:5f:07:76:3d:07:9f:86:1e:6d:6c:96:48:d2:eb:9b:e1:99:
06:95:8b:ed:06:29:f5:66:44:67:55:2b:13:c3:24:bd:31:e3:
5c:19:af:39:1a:86:7d:b9:7d:5c:f1:95:29:99:d8:d8:5f:e3:
de:43:9c:f0:1f:3a:05:e8:8d:6b:b1:84:4c:08:23:f1:41:7c:
79:fb:bd:22:7b:cb:b2:fe:9e:f4:c0:17:a8:9b:91:16:2c:86:
d4:c9:08:73:42:84:05:1d:dd:ea:db:6f:f7:1c:6c:7c:df:ca:
14:1d:a1:31:bf:f1:10:90:06:12:61:9b:88:99:1d:ca:0d:20:
9b:cb:48:fc:6d:77:ba:a5:d6:be:50:bb:38:fb:40:dd:f3:2a:
8d:db:dc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:25:58 2025 by rpki-client