Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0e6ebb8f-95b2-4310-bd72-f05724adb88c.roa
File: 0e6ebb8f-95b2-4310-bd72-f05724adb88c.roa (raw, json)
Hash identifier: UYJAVAZchNuhwbfK1HCI9ZvOeN5jPNDOzJg3foIOUOs=
Subject key identifier: B1:AC:7E:D0:FE:5B:38:AF:69:1A:82:11:82:CD:B9:05:A2:70:51:E3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4DBFBD95BCCC9DFB429D1A92E5B5639A35549866
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0e6ebb8f-95b2-4310-bd72-f05724adb88c.roa
Signing time: Fri 22 Mar 2024 00:00:00 +0000
ROA not before: Fri 22 Mar 2024 00:00:00 +0000
ROA not after: Fri 26 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:bf:bd:95:bc:cc:9d:fb:42:9d:1a:92:e5:b5:63:9a:35:54:98:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 22 00:00:00 2024 GMT
Not After : Apr 26 23:59:59 2024 GMT
Subject: serialNumber=187a1054e30859bec14d19f4d22b73bc0cb94adad4678bd855dd70f864e6404b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:65:4b:e9:da:d2:a4:02:99:47:c9:16:8a:
3e:a0:f7:a7:09:31:12:b1:9a:6f:f5:5d:80:a7:33:
51:b1:d4:ff:94:46:79:d6:78:2a:60:85:f6:ea:33:
0c:fa:75:a7:41:97:92:d8:0a:b5:9d:e1:6a:46:92:
28:f8:ab:f7:5e:f9:61:64:d0:06:21:8a:18:0a:6b:
d6:82:61:b6:56:8b:03:39:a9:a9:06:4a:25:72:d2:
03:57:e7:43:40:ad:2a:7a:88:bb:bc:4c:50:c2:71:
6d:b6:4a:62:b3:01:8b:be:28:5f:13:57:0b:37:c0:
d7:b2:c7:59:b3:d6:79:81:e8:8a:1c:4a:64:2e:bb:
e8:d4:bd:84:74:90:33:a0:65:d4:53:da:47:9c:b1:
79:fa:5e:3f:66:fc:db:50:a0:b1:94:09:59:06:97:
5c:09:28:42:65:41:25:27:ba:09:ad:38:cc:45:3f:
ac:01:36:ed:90:7a:d3:c7:a7:16:46:45:8d:03:24:
83:c9:a7:a6:73:09:cd:51:7a:7f:8b:53:43:d8:25:
71:d4:e2:64:8f:94:c2:f4:22:47:84:42:38:17:f8:
37:96:e8:ff:5e:cb:41:31:8a:bd:4d:ce:42:96:75:
af:50:9e:31:5c:ef:1d:11:3e:d4:a8:54:31:4d:fc:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:7E:D0:FE:5B:38:AF:69:1A:82:11:82:CD:B9:05:A2:70:51:E3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0e6ebb8f-95b2-4310-bd72-f05724adb88c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
54:16:ba:8e:25:d7:ac:5b:07:91:d1:35:e3:1b:c1:1d:b9:15:
4b:18:6d:af:61:0f:98:da:0d:22:b7:ab:0b:ef:13:9b:da:30:
33:ac:47:26:fd:55:5a:ef:53:3c:71:9d:e9:7b:15:64:bd:f7:
86:09:af:16:fc:be:a9:02:67:c8:88:b1:e6:87:06:75:b1:3c:
be:20:d1:73:02:3e:76:75:6d:63:b8:96:7e:05:af:e4:2e:f8:
de:37:1c:f6:6d:1c:a6:b1:37:47:e6:3e:f3:58:6a:3e:cb:a7:
41:6b:1c:b6:07:7c:f9:cc:57:c4:79:5d:ea:3c:ce:0e:53:3b:
2c:6e:77:0b:92:89:d8:e2:7a:58:c1:da:71:f8:46:77:ff:c0:
d6:6e:50:45:c0:26:46:3d:b3:e1:53:67:52:0a:03:75:87:20:
22:b0:29:3b:8d:ed:b6:ba:80:3e:ed:54:21:5f:91:cd:50:a2:
4d:40:40:d8:34:b7:95:77:e5:cf:19:99:ea:c7:9b:cb:4d:57:
fe:b7:5e:17:42:72:41:ac:ff:38:a0:00:24:5a:4b:56:89:b6:
7c:98:97:bf:f4:8f:e8:3d:38:34:15:22:98:ab:de:79:95:62:
23:d8:d6:75:00:98:9e:06:df:0d:fd:20:45:d3:6e:27:63:63:
40:b8:8f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:32:34 2025 by rpki-client