Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/10634fa6-364d-44e9-99a8-47f1ea317356.roa
File: 10634fa6-364d-44e9-99a8-47f1ea317356.roa (raw, json)
Hash identifier: EtZK9Mpq6livzRvljYkk8cMnoN3u3hfgSQULtH8/uy8=
Subject key identifier: CA:0D:25:A4:85:57:85:3C:50:C9:02:D5:7D:58:EF:B6:94:34:19:EE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1B35A3846612D17E09962F60FBC021340AD71E96
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/10634fa6-364d-44e9-99a8-47f1ea317356.roa
Signing time: Sat 13 Jul 2024 00:00:00 +0000
ROA not before: Sat 13 Jul 2024 00:00:00 +0000
ROA not after: Sat 17 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:35:a3:84:66:12:d1:7e:09:96:2f:60:fb:c0:21:34:0a:d7:1e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 13 00:00:00 2024 GMT
Not After : Aug 17 23:59:59 2024 GMT
Subject: serialNumber=8c6b04b0653857d7ad3802e9dffd6ab14fc1afaa5ee2375869c5ac8803405f5f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:d6:02:3d:19:dc:d9:7a:11:41:a5:a5:bf:
e1:7d:90:a2:26:ed:3c:f3:b4:ae:7c:dd:d7:ee:84:
c1:ac:6e:b7:d3:e4:a8:ad:96:1d:c6:dc:d3:0e:6b:
73:ce:43:a1:50:17:19:16:cb:ea:8f:64:13:7d:5c:
41:ef:09:a6:75:46:7e:98:13:0c:1b:4f:fb:06:da:
24:84:11:c3:a9:02:07:73:2b:88:02:cf:eb:1b:99:
2c:ce:5d:1b:5e:d0:88:46:57:48:68:5a:a0:62:4c:
2c:34:6e:f9:25:fe:3b:21:76:7f:f4:18:0e:26:57:
8a:47:86:a4:9b:29:14:3b:6f:ec:62:c9:3a:40:9b:
70:09:25:9e:31:94:54:cb:dd:f5:b0:7a:15:a4:ad:
2f:c3:3c:43:1a:a4:24:2d:45:26:74:02:07:cf:e0:
cc:00:50:de:08:a7:cf:12:9d:f4:66:f8:1d:ad:ae:
9b:e4:24:29:5c:15:93:b0:1f:09:20:05:14:c7:49:
38:20:f3:ed:01:c4:5e:6d:54:9e:39:a0:5d:42:73:
68:f6:b0:e6:d1:6f:d3:1e:9a:f1:67:82:40:94:a4:
19:04:b1:80:e3:e9:b3:b4:81:59:94:f7:96:de:f9:
f7:e0:62:a9:96:35:fd:7a:99:3b:bf:89:c9:ad:b4:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0D:25:A4:85:57:85:3C:50:C9:02:D5:7D:58:EF:B6:94:34:19:EE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/10634fa6-364d-44e9-99a8-47f1ea317356.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f4:23:ef:8e:e0:ad:cb:fd:d7:4d:2a:ac:52:40:34:d1:8b:
d4:a4:d0:37:00:c5:9a:ee:ea:0f:57:d1:6d:5d:ba:dd:43:17:
36:bd:0c:d3:70:ad:e6:1e:0c:2a:59:45:cf:8c:da:70:4d:0a:
20:59:44:a1:fa:10:47:a4:28:bb:1d:96:51:e8:42:c0:e5:ed:
ce:13:d5:ff:d0:4d:94:c9:e8:4b:e6:42:f4:ac:a7:fb:b6:94:
1c:37:6b:b7:18:8a:2a:a3:f6:3f:f3:c6:ab:86:c1:5c:40:bd:
48:e4:a7:04:dc:70:10:5c:3b:e4:4b:e5:e6:47:26:d7:68:28:
13:55:ba:d9:0a:0e:14:0d:d5:75:47:91:80:e3:a9:f2:0c:a9:
2a:a6:f5:e0:71:d7:0f:35:5e:26:b6:d5:e8:10:92:42:a2:0a:
b5:f5:9a:73:59:47:dd:a0:07:23:49:82:6a:e2:35:af:6e:90:
49:40:2f:4f:7d:58:b9:f7:89:a0:57:59:2d:ca:0c:d1:9a:f3:
20:f5:40:d1:65:c6:ae:7a:b4:3d:d1:e0:b5:e3:17:ff:f7:c7:
81:65:33:4e:fc:41:80:9c:83:eb:81:f1:9e:96:61:c1:7b:cf:
56:03:ff:27:29:fb:a3:10:35:90:c9:3d:36:bc:fe:43:fa:ac:
59:5a:20:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:54:11 2025 by rpki-client