Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1228d635-697a-4375-b894-b1557a80040a.roa
File: 1228d635-697a-4375-b894-b1557a80040a.roa (raw, json)
Hash identifier: KwLgYtI3mMlavMyBp2WV8qocIAgYyIIZ9GFvbIhg/bM=
Subject key identifier: D5:52:53:10:1A:99:65:98:14:1C:BE:15:20:D2:2D:CF:69:7E:6A:0E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5F34C7F387AF05A78F56E44BCE1A7035813BE987
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1228d635-697a-4375-b894-b1557a80040a.roa
Signing time: Wed 20 Sep 2023 00:00:00 +0000
ROA not before: Wed 20 Sep 2023 00:00:00 +0000
ROA not after: Wed 25 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:34:c7:f3:87:af:05:a7:8f:56:e4:4b:ce:1a:70:35:81:3b:e9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 20 00:00:00 2023 GMT
Not After : Oct 25 23:59:59 2023 GMT
Subject: serialNumber=adaeb4031c4d09d1fcc68dad3b60b04751c69fc1e86efac73d5cd9c7fcf82474, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:03:32:00:f9:95:2a:44:cd:70:e8:c6:c9:
4f:a0:06:29:b3:14:f7:c4:60:5e:ca:30:3f:08:f9:
75:2c:81:f5:f9:d1:f1:c4:08:b3:77:aa:a4:1b:41:
72:75:6f:85:84:cb:bb:d6:1a:5d:dd:38:ff:71:fd:
9d:da:04:41:c3:63:99:06:cf:59:d9:ac:78:20:0c:
ce:e8:51:e5:12:9b:75:35:3a:c2:af:42:f7:a1:78:
e0:03:d3:d9:1d:5b:1d:1a:65:c2:38:63:44:ed:da:
60:3e:22:06:07:bb:4e:54:e9:ee:99:cc:e1:05:88:
83:67:e2:7c:81:a0:54:b2:2e:60:ab:ae:87:5a:53:
2b:5f:d3:2a:09:c4:c1:e7:11:61:af:82:2d:4a:c5:
38:df:93:12:4c:eb:18:a7:73:a9:7f:78:c3:e9:6d:
6a:73:08:e8:50:d5:7f:1c:30:02:95:31:9a:6c:b1:
db:e8:dc:72:3e:a5:76:f2:be:87:dd:2d:5e:e8:35:
44:4f:b9:52:33:a3:4f:93:11:5e:f2:00:14:18:c1:
5c:fd:17:a7:88:4b:4f:3d:29:dd:6d:2d:ad:84:b0:
73:bf:da:51:0c:3a:0b:52:89:0f:e3:d5:da:19:59:
61:7d:3d:32:37:6f:7f:2b:bc:40:01:a7:2f:e7:1d:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:52:53:10:1A:99:65:98:14:1C:BE:15:20:D2:2D:CF:69:7E:6A:0E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1228d635-697a-4375-b894-b1557a80040a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
45:06:af:0f:c0:39:3b:b4:0e:93:43:43:d3:3d:1d:ab:c2:47:
a7:31:7b:a3:d6:2c:d1:2b:a2:9e:94:64:53:6c:3d:f6:a6:42:
69:9b:b9:d0:6f:1a:b4:b5:a6:65:12:d4:2a:17:59:c4:be:8b:
eb:a0:97:4b:f6:c4:a5:00:55:42:42:da:87:9f:19:b2:a2:c7:
6e:b1:cf:72:07:26:03:65:25:e3:f0:96:db:84:ad:9d:1a:a8:
1b:c0:ae:b0:dc:ad:a1:c3:59:ac:ab:f6:1d:b6:5c:9d:e5:30:
2b:e5:b8:0b:b5:60:38:a0:02:ee:52:79:ee:a1:64:97:90:0b:
34:88:bb:13:bc:ff:b9:89:45:d6:96:42:df:e8:fd:8f:35:02:
58:6e:03:9d:8f:46:5f:97:ab:08:5b:8d:43:b5:e2:ed:3e:39:
ea:48:0b:76:bd:32:4a:ee:b7:ed:ea:cb:61:13:41:ef:12:3f:
24:5b:21:c4:4a:1b:f8:78:ff:75:e2:dd:0f:d1:eb:2e:0d:2f:
c6:01:76:04:41:9c:85:7e:bd:b8:92:b4:1d:ae:05:9d:b7:14:
b7:c5:5b:69:d5:7e:6c:5b:1e:c5:e1:0e:5c:80:0a:65:4e:27:
b4:c9:ca:54:40:13:a6:d2:34:ca:50:ef:86:40:63:52:b5:64:
e1:71:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:15:05 2025 by rpki-client