Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cfdcb025-92a6-4561-ac20-94ab2da9435e.roa
File: cfdcb025-92a6-4561-ac20-94ab2da9435e.roa (raw, json)
Hash identifier: ngenvsv78PXSqbhe7smlsi0P9xIVKZ5ZKuogSWwI2as=
Subject key identifier: 76:F5:B4:24:3C:EE:C8:81:5D:89:1D:01:58:04:01:2D:A2:25:E6:4B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4B1703A5E30161A5A9C0009D4DA9664E5777B2B7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cfdcb025-92a6-4561-ac20-94ab2da9435e.roa
Signing time: Fri 06 Oct 2023 00:00:00 +0000
ROA not before: Fri 06 Oct 2023 00:00:00 +0000
ROA not after: Fri 10 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:17:03:a5:e3:01:61:a5:a9:c0:00:9d:4d:a9:66:4e:57:77:b2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 6 00:00:00 2023 GMT
Not After : Nov 10 23:59:59 2023 GMT
Subject: serialNumber=7591f7657314078ce72da6460305ba8b6df2b48ff0b578073ce1553d629719e7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:e1:b7:e7:39:16:4e:cd:57:eb:ef:ba:45:
9c:22:91:c6:2c:a0:3a:ca:be:89:89:a6:49:c0:70:
42:0e:79:5b:87:1c:ca:ef:71:11:0c:8a:41:3c:cb:
6c:85:5a:ce:71:40:18:20:b3:73:6f:25:bc:c1:ff:
5c:fe:cd:53:34:2e:5e:33:48:eb:8a:61:50:26:bf:
67:d1:4d:9f:d9:0c:dd:5e:47:8c:c3:a9:89:d0:28:
a7:12:12:be:a9:85:15:d5:61:33:db:f5:f5:1e:07:
b9:ec:de:4d:df:8e:62:a0:18:fc:e7:c3:f8:d2:58:
3a:55:48:55:bf:aa:6b:77:fe:24:ea:42:35:0f:ee:
e3:e7:51:dc:15:a8:1a:4c:1b:b2:73:ea:7c:30:3a:
76:15:56:b9:0a:05:86:7b:25:e0:73:52:f4:eb:6a:
7e:3b:67:a0:44:90:82:a5:ed:24:13:f9:0e:7e:d9:
52:38:62:ba:5a:cb:0c:fb:9d:3c:34:4f:3d:cc:c2:
10:7c:48:f1:74:a9:c0:e1:c7:e8:74:7b:a1:46:13:
d8:c6:6a:13:4f:3f:55:49:09:d9:3f:47:d3:32:51:
45:44:c2:1e:87:d3:04:94:ce:07:22:d9:e0:44:ba:
5c:e7:91:fc:02:cc:66:99:09:bc:93:ae:58:1c:b8:
5e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F5:B4:24:3C:EE:C8:81:5D:89:1D:01:58:04:01:2D:A2:25:E6:4B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cfdcb025-92a6-4561-ac20-94ab2da9435e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
20:0f:48:98:7e:aa:79:c8:d7:5d:5c:0b:0e:41:9e:39:58:b7:
c1:30:ff:54:13:de:a5:7b:58:6a:02:c0:7d:1d:9f:38:8b:9e:
36:b0:c9:35:be:b9:b6:42:c0:2e:67:95:4e:d0:6d:32:da:d9:
74:d3:bc:cb:43:d8:02:53:6f:45:ce:11:74:1d:55:b2:cb:92:
6c:e1:47:8e:6a:04:fc:63:f6:eb:c4:d6:f9:63:3c:80:32:61:
15:2d:9a:43:c8:a2:2b:93:2c:fd:94:ab:71:62:c6:d8:69:ac:
90:f1:aa:82:78:02:3a:0b:09:fc:1e:88:f1:63:63:25:f6:9c:
a4:4f:77:ed:67:36:c3:b2:c0:e0:ac:28:67:3f:73:8e:47:48:
55:28:3f:c5:33:d8:6e:9a:a2:18:0c:05:83:4c:0c:dc:da:3b:
fc:59:85:64:df:d0:af:33:32:1e:b5:31:ce:8e:8a:72:c5:f4:
61:41:47:c2:f5:16:2e:3e:16:da:bd:74:6a:e2:c0:00:ea:40:
3c:00:f3:2c:58:da:b4:95:4e:b2:71:23:a1:79:64:6b:d5:56:
c3:15:51:c6:0b:43:0d:f4:ab:44:71:67:56:a4:02:ca:0d:3c:
d3:bb:15:ab:be:2d:a3:09:6d:19:68:98:de:69:f6:bd:64:98:
fc:cc:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:32:28 2025 by rpki-client