Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f5177228-9e23-4747-9bfa-e93519fa9a43.roa
File: f5177228-9e23-4747-9bfa-e93519fa9a43.roa (raw, json)
Hash identifier: 69BT8RtGpDjqk/GuSDzXl7eDyW5NjDWUx+jJc3poA2M=
Subject key identifier: F2:5B:D0:2A:54:C6:6C:E4:2C:0B:B1:39:22:58:79:E3:5B:2E:82:57
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 26EB4D6448E99A4D6AE66AC3DD1AD3BED1A57682
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f5177228-9e23-4747-9bfa-e93519fa9a43.roa
Signing time: Thu 27 Jul 2023 00:00:00 +0000
ROA not before: Thu 27 Jul 2023 00:00:00 +0000
ROA not after: Thu 31 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:eb:4d:64:48:e9:9a:4d:6a:e6:6a:c3:dd:1a:d3:be:d1:a5:76:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 27 00:00:00 2023 GMT
Not After : Aug 31 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:09:dc:41:cb:ba:31:5f:1a:37:1f:58:bb:
9c:0b:88:78:30:9f:e3:97:5a:c6:3f:aa:c5:a4:91:
9c:da:a8:dd:b4:16:12:40:4f:cf:c4:da:79:dd:dd:
9e:6f:29:fa:00:aa:ac:89:8c:ed:59:01:40:e9:2e:
92:3b:bb:2d:8b:b8:ae:dc:6b:0a:a3:0f:4b:fd:21:
07:a6:79:4e:eb:01:4b:c0:ea:37:72:5f:f2:e8:07:
4e:1c:1e:ac:7c:8c:e8:3c:a4:19:79:0e:e5:57:95:
49:96:fa:5b:55:c5:85:d9:c6:03:70:5a:46:70:5d:
82:d5:fc:3e:85:21:2f:47:9f:6a:f1:b2:e1:cf:99:
b0:80:09:21:74:0d:31:a7:8f:23:2c:8c:fd:49:26:
e3:76:c1:d2:4e:97:4a:59:53:94:42:d3:23:b1:ad:
87:8a:bc:92:0e:80:85:4f:b8:96:9c:28:aa:04:a5:
eb:04:ff:bd:29:bf:66:7c:52:e7:c6:24:19:a0:5f:
64:dc:f8:c8:10:f1:63:9f:e2:de:bf:82:c1:f6:96:
b8:c6:f9:fe:89:b6:5e:55:68:f3:bd:ef:04:27:df:
dc:ee:25:d4:6c:fe:fd:8f:6a:c5:49:bf:dd:fb:74:
81:a0:5f:25:f0:8a:25:dc:92:99:e2:f1:f7:d5:f3:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5B:D0:2A:54:C6:6C:E4:2C:0B:B1:39:22:58:79:E3:5B:2E:82:57
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f5177228-9e23-4747-9bfa-e93519fa9a43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
66:35:52:d9:ac:aa:1d:a0:40:34:a5:1e:5c:be:a4:9f:05:ac:
9c:d3:8f:42:cb:bb:ee:4a:da:0e:f2:53:19:e1:43:15:d9:f6:
55:b2:c0:55:0a:f5:32:49:22:8d:14:0d:b5:a5:20:a2:75:b7:
3f:41:20:ef:7e:f1:bc:27:f5:38:e1:37:7a:82:93:4e:c4:6c:
75:13:ea:4d:52:63:a7:52:8f:44:46:4f:5d:f2:f2:27:fe:e7:
3a:04:e1:5d:34:d9:62:a1:1d:aa:79:f5:95:16:6b:5f:6f:b3:
24:35:61:2e:74:78:12:23:e4:50:9b:0e:c6:60:b0:92:e8:f9:
69:61:1e:19:6c:49:a2:85:39:d2:84:92:dc:47:7d:ef:2c:bc:
de:96:1c:e1:5f:18:a7:f9:3f:1b:6b:f6:72:a2:36:83:c0:e9:
a3:a3:6e:70:3c:6e:ce:7f:8c:9a:30:e2:cd:67:8d:e9:f9:2e:
cf:13:2d:15:0d:1c:b5:1c:f8:44:bb:a5:3f:fd:77:9c:b7:93:
f8:73:b6:f1:40:ee:34:e8:15:1e:ed:6b:49:fd:38:dd:5b:4d:
4a:6b:9d:68:c0:ff:3f:50:1b:26:39:de:4d:1b:12:ba:15:92:
a2:e2:ee:39:54:5b:6b:4d:42:c2:83:14:e9:d9:fa:48:35:81:
d4:b3:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:53:08 2025 by rpki-client