Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb834d9f-b68d-42ab-9e46-a39aa200e176.roa
File: eb834d9f-b68d-42ab-9e46-a39aa200e176.roa (raw, json)
Hash identifier: FOQiWSWjJSGmzdbNzGftDs4lMfdqxR4Sg+ORwAFScuw=
Subject key identifier: 23:5D:2B:7E:7B:DC:D1:25:FB:54:CD:EB:7C:57:2F:41:01:60:47:2E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 09F42543D2266106A3A6AB4AAE794A47DB0923C1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb834d9f-b68d-42ab-9e46-a39aa200e176.roa
Signing time: Fri 03 Nov 2023 00:00:00 +0000
ROA not before: Fri 03 Nov 2023 00:00:00 +0000
ROA not after: Fri 08 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f4:25:43:d2:26:61:06:a3:a6:ab:4a:ae:79:4a:47:db:09:23:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 3 00:00:00 2023 GMT
Not After : Dec 8 23:59:59 2023 GMT
Subject: serialNumber=e54b735f2f1c5175cf83823e24525f802f7523851636b71779ea18f4174ef482, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:5c:2a:7b:e2:4d:83:12:54:19:42:43:92:
8c:06:e0:4b:1f:bc:72:54:02:9e:ce:6d:31:87:e3:
5b:46:c0:21:d5:c1:e4:a6:e2:ef:a4:30:d6:00:e5:
84:1f:85:79:5f:67:6a:88:58:c8:b8:e6:83:d8:8d:
38:7a:d0:f1:84:d1:52:34:3d:1a:50:49:26:dd:30:
e3:c2:c7:92:78:1e:a2:55:42:78:0d:4d:e6:8d:45:
2f:87:05:f1:31:31:7e:82:a9:29:1f:04:ab:7b:d3:
fe:8f:86:21:29:a0:6b:cc:0e:01:cc:93:8d:e8:68:
67:02:64:79:bf:b4:63:f3:61:b1:ca:b9:21:de:1f:
d2:f1:b5:83:c2:01:1d:35:dc:7a:b8:0d:20:c4:8e:
44:43:6f:1b:37:94:f9:55:d3:52:f9:d2:51:bf:dd:
a8:5a:24:7e:f8:a4:8f:3e:d2:8d:cb:11:2a:69:19:
b0:73:a1:1e:41:e5:ef:08:41:56:d5:7c:9f:52:cf:
ed:9d:e6:ef:23:2e:22:60:70:ae:73:fa:61:7e:0e:
33:f3:7e:b6:6f:8d:5f:74:f1:40:1c:e1:65:94:d3:
52:ac:de:6a:a5:ff:14:6c:9b:f0:f4:a4:c2:e1:c7:
10:1c:b6:e8:3d:9d:0e:d2:fb:6d:ce:80:ad:c2:12:
26:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5D:2B:7E:7B:DC:D1:25:FB:54:CD:EB:7C:57:2F:41:01:60:47:2E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb834d9f-b68d-42ab-9e46-a39aa200e176.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:04:d8:df:3b:f9:e6:99:ce:c7:47:32:c8:58:50:bb:18:2a:
6f:6e:86:5a:eb:2b:a2:a1:df:38:e1:78:b9:0d:01:78:33:5c:
18:7c:6b:5e:6b:03:03:94:0a:5f:73:82:7a:32:31:cc:0d:ca:
00:25:29:a4:20:2d:1a:ed:24:4b:f8:d4:ee:14:f2:70:1a:68:
1a:c3:b2:4f:f8:f5:f1:7a:30:81:c0:ef:a6:2b:64:3c:05:2c:
b5:12:d1:39:b8:23:21:2c:77:f9:5c:a6:b6:99:a4:bd:34:61:
94:c5:fa:f7:a6:d5:36:97:18:b4:83:0a:77:21:d0:5e:86:ca:
a7:b3:85:10:4b:8f:a7:44:f1:6d:71:1a:a3:28:81:3d:7c:c7:
72:41:49:36:19:80:83:3d:76:bb:41:39:24:1b:2c:59:02:15:
2c:b0:d1:7f:a3:25:17:99:27:5f:1e:c4:47:ad:c9:09:8f:30:
ea:ee:55:61:cf:5c:8f:05:50:d0:4f:17:91:75:7a:e1:5a:8c:
a0:1c:1a:dc:e2:c7:e2:55:1a:92:a2:b2:12:cc:78:80:b9:07:
e8:5e:9b:25:c1:e5:7c:ae:a6:e9:d7:96:96:26:75:24:4e:9e:
26:05:c5:00:12:9f:b4:2d:51:e7:b4:d9:d6:a6:53:f6:03:9f:
a1:f1:17:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:12:15 2025 by rpki-client