Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e00d56b1-d9dd-4e24-99c0-f6a981174832.roa
File: e00d56b1-d9dd-4e24-99c0-f6a981174832.roa (raw, json)
Hash identifier: SFcRXood4unhVuQmA2zTaKAt8v7GxV4sN+IM+t4fxhQ=
Subject key identifier: C8:B3:FC:47:C0:98:A3:32:91:CE:F3:BE:31:0F:B6:46:AA:7C:6A:E3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 487C1AB30338F4C2CA7F8E2322E30EB71744F4B9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e00d56b1-d9dd-4e24-99c0-f6a981174832.roa
Signing time: Mon 30 Oct 2023 00:00:00 +0000
ROA not before: Mon 30 Oct 2023 00:00:00 +0000
ROA not after: Mon 04 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7c:1a:b3:03:38:f4:c2:ca:7f:8e:23:22:e3:0e:b7:17:44:f4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 30 00:00:00 2023 GMT
Not After : Dec 4 23:59:59 2023 GMT
Subject: serialNumber=03e2ccb63291d04337d20ff114735eb8cdaa294cd5973781064cb7b8aac9d847, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:93:16:31:bd:70:87:66:97:64:d8:3e:65:
c1:59:0c:7c:90:b2:7f:a3:a9:43:4e:14:eb:01:ba:
4f:24:e1:8f:9c:b5:0d:f9:46:ff:98:ba:dc:c5:70:
49:bb:a8:cb:14:9a:c7:5c:77:d2:cf:01:da:32:9d:
0f:c0:75:87:64:ac:64:b4:cf:1b:64:86:10:58:46:
45:0c:c4:dc:69:b5:d4:9f:d2:c5:f5:b6:64:bc:11:
70:0d:4c:76:87:bd:b9:b6:f3:3a:ab:d4:75:6e:3e:
b1:25:14:9f:f2:42:9f:52:58:30:fc:72:18:00:6a:
28:14:95:db:7c:9e:f2:31:04:3a:48:f6:bb:2f:05:
09:e0:3a:ec:76:16:4f:6a:c9:de:22:72:3c:99:e0:
8c:da:78:49:94:f7:2c:59:9a:69:12:68:2d:0d:ce:
47:5e:30:05:ce:28:97:5c:57:b4:8d:70:27:d1:49:
e4:06:2b:f6:fd:ae:44:3c:69:ab:79:b0:4a:a4:d0:
80:cb:81:41:4b:cd:d3:54:54:9a:36:c0:3d:90:c2:
de:57:71:1e:ec:dd:ca:86:fa:fe:c3:19:c9:0e:28:
af:25:6d:70:00:29:71:43:4c:f5:16:08:33:0c:28:
4b:57:40:29:73:a1:aa:0a:9e:ee:fb:47:cb:1f:c6:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B3:FC:47:C0:98:A3:32:91:CE:F3:BE:31:0F:B6:46:AA:7C:6A:E3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e00d56b1-d9dd-4e24-99c0-f6a981174832.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:bf:e4:ad:88:06:d2:22:2f:00:ac:08:ab:bc:a8:75:0d:2e:
49:d9:5f:b0:71:83:02:d1:11:00:d5:3f:24:fa:e0:62:be:34:
1c:a7:35:b0:ef:34:33:41:3f:4e:d7:5f:d4:bc:3b:db:14:2a:
3e:e4:8f:89:88:ea:37:25:4f:c5:8e:ee:2b:c2:e8:b9:b9:2e:
60:52:09:f1:c8:ce:e2:65:ff:16:da:af:15:a3:69:ff:bf:53:
c4:3c:e1:2b:77:c7:ca:ff:63:50:33:25:d6:90:8b:f2:49:d1:
1c:a0:ab:35:94:bd:b8:48:1d:5e:68:a5:a4:d9:a2:fc:97:79:
5b:61:c8:f3:b6:58:02:f2:e2:bc:f8:24:2b:53:38:bf:e3:32:
2c:65:2f:b1:b5:3a:17:6a:98:9c:97:81:55:32:72:1f:9d:3d:
7f:53:5e:b3:12:11:cc:ce:3a:dc:46:2c:ef:11:cf:14:48:c4:
e4:db:5b:d8:ef:6b:31:6f:a6:ce:b2:c4:b5:55:07:af:d6:b7:
35:97:53:e1:e4:31:3d:6e:b1:cd:af:65:6c:47:6b:e6:b5:02:
43:db:dd:62:55:57:64:50:70:1e:c2:be:49:71:c2:05:21:6a:
d9:5c:13:8d:c0:12:36:cc:ae:b9:09:a0:d8:18:7e:15:0a:c9:
2b:dc:13:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:40:11 2025 by rpki-client