Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cfc76c55-018e-4b7b-92c1-bbb3225f6f61.roa
File: cfc76c55-018e-4b7b-92c1-bbb3225f6f61.roa (raw, json)
Hash identifier: ZPb8YK5kvTxU4Fno5NXExAveSZtNBIU1LgfDpHxSP3M=
Subject key identifier: 62:10:0E:A4:10:BA:EA:44:D6:93:34:70:CC:AC:AE:92:EA:BB:B5:C9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5431B3260C9D7F847A68FBF0EA5CCE5CC1B3371C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cfc76c55-018e-4b7b-92c1-bbb3225f6f61.roa
Signing time: Thu 06 Jul 2023 00:00:00 +0000
ROA not before: Thu 06 Jul 2023 00:00:00 +0000
ROA not after: Thu 10 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:31:b3:26:0c:9d:7f:84:7a:68:fb:f0:ea:5c:ce:5c:c1:b3:37:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 6 00:00:00 2023 GMT
Not After : Aug 10 23:59:59 2023 GMT
Subject: serialNumber=b88e29b1a0568771d03309942286d70252b8033fac112a78003b670d312263b5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:07:5b:71:91:b0:73:c3:40:48:65:56:11:
d5:f8:fd:dd:d8:8a:8f:bc:f5:09:99:90:63:23:76:
aa:d9:e7:94:3a:3c:e5:f6:0a:83:b1:39:3d:95:5f:
a3:24:ed:f1:ef:8b:44:bc:db:2e:7e:9b:5a:c0:d7:
f7:d6:a0:fe:7a:b0:35:bb:40:39:4d:f1:9f:8b:3c:
ba:08:d1:14:22:1a:c1:fa:89:2f:3f:42:e6:93:9a:
49:29:63:c9:dc:18:f2:17:e4:aa:6a:e9:f7:3f:9a:
78:59:06:12:5d:fc:a6:7e:1b:c3:4d:17:a6:33:3a:
08:de:36:cc:b0:83:df:9f:35:ed:de:5b:16:eb:03:
ef:44:e2:b7:57:1c:0a:11:05:6d:4f:86:ad:70:d9:
d4:ce:a9:5c:48:68:34:b1:ce:40:60:05:63:aa:b4:
4c:a2:c4:d5:b3:ec:0a:e4:d6:42:8d:d3:a2:44:14:
b2:6e:35:b7:7b:c3:1c:14:da:36:5d:7c:44:75:11:
5a:3d:5f:31:b1:c9:94:41:57:65:0f:b7:87:43:32:
fa:6b:95:1d:58:2a:39:53:fa:20:d4:c9:d5:bf:67:
8f:4a:7b:fc:69:c0:06:cb:ef:eb:85:f3:1a:72:fe:
ae:35:5f:a8:d3:d2:01:1a:f2:51:d3:81:45:e4:0e:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:10:0E:A4:10:BA:EA:44:D6:93:34:70:CC:AC:AE:92:EA:BB:B5:C9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cfc76c55-018e-4b7b-92c1-bbb3225f6f61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:34:fc:dd:9c:8e:90:90:5d:76:8b:dd:13:d9:1f:7a:ee:35:
74:84:e4:63:15:38:40:3b:a5:d0:f7:18:a5:33:0e:7e:e1:ea:
64:eb:f6:02:b8:16:25:3b:f8:bf:5e:b5:54:3b:b8:c6:91:c0:
74:8d:fc:22:63:06:0c:dd:62:ae:36:38:c7:16:04:3a:96:ef:
b0:fc:74:1b:d3:52:43:cc:c8:93:6b:0a:61:78:5b:be:8b:66:
a1:26:63:93:45:bd:88:0b:9a:d8:e7:f9:bc:01:a6:f9:aa:ab:
9e:8c:30:49:b8:cd:68:72:5c:26:10:20:f9:87:f3:c1:11:8f:
98:f1:aa:c7:ce:7d:7a:fb:76:e6:8a:79:20:f1:eb:94:f1:6c:
8f:57:af:e4:12:67:c8:3d:2d:04:f6:b3:1e:e7:8f:3d:53:de:
6d:49:91:98:1c:e4:6a:12:56:2a:31:a1:5e:03:ea:d4:62:42:
d6:6f:63:53:bf:3c:c5:c7:26:22:a9:c1:24:1c:2f:0a:81:2e:
28:01:90:58:ae:b1:cf:1a:0a:e5:81:dd:88:b1:d0:68:ab:b2:
57:0e:d7:69:7f:98:7f:c1:60:8d:fa:7f:45:ba:d7:62:99:24:
c6:68:e0:08:d8:3c:65:f9:3f:c4:c5:9d:58:84:45:a4:8c:7e:
75:89:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:36:27 2025 by rpki-client