Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e84eb2ee-6f55-41ac-8670-5121698ff4b8.roa
File: e84eb2ee-6f55-41ac-8670-5121698ff4b8.roa (raw, json)
Hash identifier: kWDapAQPzuMYhPvJYmXfknZ+qtGY0Oko+y1KQIIm2BU=
Subject key identifier: 98:AC:E1:49:A6:AE:FE:2C:9B:B8:1B:92:E8:33:03:5C:C0:32:AE:BB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: CF5208479DA43930520D339F953466ADE8714D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e84eb2ee-6f55-41ac-8670-5121698ff4b8.roa
Signing time: Thu 14 Sep 2023 00:00:00 +0000
ROA not before: Thu 14 Sep 2023 00:00:00 +0000
ROA not after: Thu 19 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
cf:52:08:47:9d:a4:39:30:52:0d:33:9f:95:34:66:ad:e8:71:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 14 00:00:00 2023 GMT
Not After : Oct 19 23:59:59 2023 GMT
Subject: serialNumber=8ba1ce2d416779ae80b49d7d2a6ecdeac0dbabab7324b1b7635cadefd27d6a0f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:a4:d5:57:66:8e:dc:81:fd:26:d7:9a:ed:
e0:c2:03:0e:bb:18:38:54:bb:5a:12:0a:5b:d9:ea:
80:6f:4b:d1:c9:5b:39:d9:ad:40:87:75:f3:89:f2:
57:23:ca:bb:0d:a3:90:69:6a:29:0c:8c:89:13:c7:
da:ea:17:90:17:26:39:75:9f:56:c8:b2:44:a1:dc:
75:3d:59:17:57:45:57:49:cf:db:c7:a5:48:37:44:
7f:61:29:d2:fd:39:69:d9:cd:bd:7b:33:6e:6f:ca:
27:f7:c1:11:8d:19:4b:51:75:f3:dd:23:ef:13:56:
8a:44:ba:ed:0a:30:bb:b6:6b:a4:93:ef:a3:98:74:
a7:e9:2a:a0:cd:57:75:61:08:25:c8:7f:88:77:2d:
d9:97:e8:f0:b1:91:45:0c:b7:20:72:2d:5d:6a:48:
3a:4b:9f:3c:9f:16:fa:b3:33:ab:9a:cc:7a:24:aa:
ca:10:2e:dd:5a:b0:ad:79:28:be:62:ea:bb:b4:47:
80:04:34:91:59:ee:0d:f2:84:a8:22:16:1e:8f:58:
cb:84:26:89:12:ba:77:ae:f1:63:90:71:ba:f7:af:
31:00:66:56:b8:21:e3:0c:53:46:ea:ce:05:ad:88:
f2:05:6d:48:dd:4c:3d:07:6a:ae:3e:1c:e6:51:2c:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AC:E1:49:A6:AE:FE:2C:9B:B8:1B:92:E8:33:03:5C:C0:32:AE:BB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e84eb2ee-6f55-41ac-8670-5121698ff4b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
13:88:b8:50:1d:a5:d9:5f:49:4e:ea:81:b4:b0:f9:73:a8:8c:
83:ca:3d:08:4d:19:9a:99:3f:bf:75:7d:16:20:8a:de:d3:24:
7d:c7:d8:db:c0:27:4a:85:5b:03:d7:9f:b6:d4:89:6d:b0:b0:
b3:02:d7:92:e8:92:44:ed:8f:ec:43:a4:fd:c2:42:bb:0b:4b:
22:e8:21:a0:9f:4b:07:89:7a:1a:4b:6e:03:43:66:9f:c0:9e:
41:57:60:26:46:ef:56:12:a2:ab:c2:4d:7b:e0:2c:47:f7:1a:
22:ba:e7:4b:c8:2f:c9:27:7a:c8:90:d6:5b:31:9d:75:a0:f5:
9c:f6:38:24:0f:b0:48:c1:3b:9b:b0:54:61:b7:b7:52:52:c0:
fe:88:78:a3:2b:f5:f7:74:ad:82:d3:d5:56:d4:a5:de:7b:0e:
34:f6:43:f2:80:b2:5a:fd:81:c4:40:f5:b1:87:72:1f:e1:e7:
80:dc:30:7e:c3:a3:e3:89:03:d2:94:9a:71:eb:17:f9:2f:1a:
23:df:b4:64:72:6b:ba:83:33:34:fd:cd:ae:be:24:a1:b8:30:
8c:21:e0:6c:70:e5:02:bf:68:15:6a:10:3b:b8:35:c7:63:2e:
e6:9f:9c:f5:a2:8a:4d:06:6b:d8:3a:5e:ed:43:ff:30:27:c0:
5c:3e:f3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:47:23 2025 by rpki-client