Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/014c746b-916a-492c-a566-39fa43dd2c52.roa
File: 014c746b-916a-492c-a566-39fa43dd2c52.roa (raw, json)
Hash identifier: i79M+3TLhMkwRxyaUs2dMtcT6OhfazV0zjjUrJsSxGQ=
Subject key identifier: 06:85:76:99:E5:FF:22:00:64:37:8E:04:71:F9:94:BD:BF:C7:54:B9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 33C46FBE24FCF22477064B74DAC95C5FA96ADC05
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/014c746b-916a-492c-a566-39fa43dd2c52.roa
Signing time: Sun 27 Apr 2025 13:43:19 +0000
ROA not before: Sun 27 Apr 2025 13:43:19 +0000
ROA not after: Sun 01 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c4:6f:be:24:fc:f2:24:77:06:4b:74:da:c9:5c:5f:a9:6a:dc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 27 13:43:19 2025 GMT
Not After : Jun 1 23:59:59 2025 GMT
Subject: serialNumber=656aa18d54b8de4cfd718847148dc4cebdd1d0c61cfdaaaa4548380fb4b07bbf, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:22:d3:71:ef:ff:d7:ed:62:01:99:52:58:b2:
f8:b2:0c:91:b0:92:62:8d:61:a1:50:53:ec:11:98:
d7:be:ff:f0:e7:73:b8:1c:a5:02:06:ab:ec:ce:90:
6b:f2:64:78:d1:fb:20:ac:54:53:c7:2e:0e:66:09:
a5:6b:9b:74:fa:d8:ef:98:e3:3f:0e:72:c8:e7:63:
bf:e3:70:67:ea:8e:54:f3:83:80:a4:7e:1d:63:8a:
3c:19:97:04:98:1c:aa:6c:f6:c5:bc:3b:c5:44:eb:
da:9a:f0:51:46:71:62:90:70:08:4d:10:3b:2a:46:
8a:ef:05:1b:05:5a:6b:c2:03:9f:32:d9:0e:b2:a7:
5a:e3:89:c2:b7:c2:6b:84:3f:b4:27:b9:45:f1:2b:
86:3f:cb:be:9c:b9:72:1d:12:64:c6:6b:6f:6a:cb:
36:9e:16:a0:cf:ff:b1:5c:b5:20:9b:21:7d:b4:ed:
ba:ef:7c:2e:cd:2b:16:24:0e:34:fe:cf:20:e5:02:
15:bc:84:b6:5f:e7:1a:2e:23:c8:94:69:3b:2e:8f:
4d:e8:67:63:dd:2f:c3:a3:45:94:f1:68:ae:8a:d7:
0e:d9:fd:a0:47:17:8a:aa:69:33:90:bd:94:54:62:
57:51:35:5a:68:ed:74:d7:94:c1:a1:5c:eb:f2:e8:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:85:76:99:E5:FF:22:00:64:37:8E:04:71:F9:94:BD:BF:C7:54:B9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/014c746b-916a-492c-a566-39fa43dd2c52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b2:c3:4c:b3:a8:78:f6:85:06:9d:9a:27:90:5a:14:88:e9:
f7:ce:98:2a:9a:79:53:12:2f:df:0a:b1:b3:15:88:eb:7d:a1:
6f:40:8a:ae:87:26:d3:98:1a:88:d7:9b:3b:ea:f7:bc:e2:2d:
9c:47:66:0e:2c:03:a4:ef:1d:69:5f:d0:33:3d:90:2a:cb:02:
ad:01:02:2f:a0:7f:f5:86:34:43:c3:35:b1:82:f8:b3:ea:ae:
cc:33:ff:16:c8:95:1d:9c:72:f8:ea:ef:ae:5a:0b:0c:af:3d:
5b:86:15:a4:ce:63:55:2f:6f:42:26:a8:fb:f0:f1:a6:9c:0c:
3b:f5:af:4c:3d:7d:86:e2:7f:2b:f5:f2:ba:7d:2b:33:74:05:
17:27:b1:ce:af:1e:d0:18:7d:7e:89:75:4e:b5:29:15:e5:85:
b8:e6:86:a9:bd:0b:5c:b3:cc:b7:b7:1c:aa:ab:88:c1:9b:63:
7f:3f:ac:b8:d3:00:13:be:89:bf:a7:fe:a7:18:14:c6:86:56:
bd:e8:3a:ff:b9:3f:4d:df:89:25:2b:00:97:b8:51:9b:0b:2a:
49:7d:29:06:7f:74:e0:ac:a3:38:bf:ec:0b:dd:8b:98:ce:42:
f0:1b:c7:2e:17:d8:23:e4:ba:e5:63:84:61:90:a4:82:b4:34:
8a:7f:2b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:51:48 2025 by rpki-client