Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ffa73a20-98d1-494f-b370-7c72ce7c09e9.roa
File: ffa73a20-98d1-494f-b370-7c72ce7c09e9.roa (raw, json)
Hash identifier: U9H/5xHLGex2OjJs31If7+YRxnmwnDRxSeBLdDSVA3c=
Subject key identifier: 94:9F:B4:75:5F:65:5C:EC:12:57:2F:7F:86:35:27:44:F9:7E:56:BF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5455169A173473652489520A1F16DD9765D57CBE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ffa73a20-98d1-494f-b370-7c72ce7c09e9.roa
Signing time: Sat 07 Oct 2023 00:00:00 +0000
ROA not before: Sat 07 Oct 2023 00:00:00 +0000
ROA not after: Sat 11 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:55:16:9a:17:34:73:65:24:89:52:0a:1f:16:dd:97:65:d5:7c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 7 00:00:00 2023 GMT
Not After : Nov 11 23:59:59 2023 GMT
Subject: serialNumber=3ec55b2265344bb061b1e1cf07d00ccc1ef16dbf1dba43f7b2a523b134ffdb22, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:44:83:e0:78:99:98:14:1d:be:ce:75:f9:82:
b5:c3:39:5c:42:af:33:49:cd:2f:79:fb:f0:3e:77:
08:87:c5:c7:e4:d9:1a:6c:10:46:bc:46:d2:14:f7:
2d:d0:0b:49:be:81:cc:06:ce:16:f0:cd:89:02:46:
4d:d0:53:cc:ae:e0:eb:1a:b5:34:1e:02:78:bd:76:
71:9c:f4:06:a4:d4:ba:79:7c:fb:c2:ef:5f:4a:8c:
9b:d2:1b:76:d8:3d:3c:4e:3b:f9:16:ee:de:9d:d1:
b4:90:2f:a8:bd:8f:42:74:83:5b:c3:e5:81:eb:40:
e1:cb:75:d6:58:40:06:7e:7e:ae:9c:e8:85:0d:b9:
4c:75:e2:fa:da:26:3f:36:58:7c:3a:61:96:c5:26:
d0:a3:84:1c:22:b7:74:67:a2:aa:82:17:c7:c7:7a:
86:cc:eb:f8:45:19:58:9d:9a:8c:70:2a:69:da:19:
8e:50:ed:62:f9:46:65:85:3e:56:9a:7e:1b:f5:87:
db:12:8e:f7:df:22:47:8e:f1:27:16:5c:93:2d:81:
a4:8a:6c:27:77:08:87:b9:f1:4d:39:6e:5e:ad:c6:
2d:b4:f0:ab:cd:8f:b8:3a:be:ba:03:e6:13:6b:87:
b6:38:b8:64:05:f0:ec:07:4c:5c:80:ff:90:92:6d:
82:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9F:B4:75:5F:65:5C:EC:12:57:2F:7F:86:35:27:44:F9:7E:56:BF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ffa73a20-98d1-494f-b370-7c72ce7c09e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
79:48:75:9f:38:59:68:f9:8b:77:73:7f:8e:41:52:c5:46:80:
07:18:96:54:31:cd:2c:1b:53:37:92:f6:2e:90:86:2b:6c:98:
ad:25:09:f1:96:d1:ae:eb:f7:9d:d0:d9:78:b7:04:15:f5:83:
5b:4d:3a:1e:69:76:ed:7e:0f:c8:63:06:d1:44:2b:10:5e:b1:
e2:b5:a4:08:e3:84:ac:c3:77:ee:62:f0:fe:54:76:cf:8b:77:
0b:2c:f7:f7:41:66:a8:85:31:06:4c:52:3a:16:e1:2a:16:9e:
16:e4:d7:37:c4:e0:8c:ea:e1:6f:dc:c7:6f:de:ce:4b:ae:70:
ca:e8:30:86:00:75:5d:a4:82:f9:ec:3f:8f:b8:b3:e2:6f:cc:
f8:2e:bf:68:11:ad:45:96:81:cb:47:22:99:20:71:0f:cf:82:
87:aa:eb:af:a3:bb:6a:86:ae:0a:f0:cd:2a:16:e0:ef:72:ee:
4b:26:7a:48:8f:ef:e6:56:06:cf:cf:dc:d7:67:76:38:4c:1e:
61:35:d3:ad:90:fb:7d:28:f5:b5:5c:ac:9b:17:91:65:f8:9d:
6b:13:6c:d5:f0:5d:c2:f6:cc:d4:bb:bd:31:b6:85:40:77:ef:
ef:b2:37:67:52:05:53:fb:70:28:16:8a:38:d5:2c:fa:29:56:
7e:b0:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:07:54 2025 by rpki-client