Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17f80ac9-d787-4d0e-af90-d69d3b2749fd.roa
File: 17f80ac9-d787-4d0e-af90-d69d3b2749fd.roa (raw, json)
Hash identifier: Z2wGsM5foz7KmUSAF4aPu3fOdjA9I7ySo71vQWQDx7U=
Subject key identifier: 89:6B:C6:32:9A:84:0D:11:24:9F:11:B9:AE:93:48:09:4F:76:39:F9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3C4D07F4532C513BD70125BC4D69F2DCF47160E5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17f80ac9-d787-4d0e-af90-d69d3b2749fd.roa
Signing time: Fri 08 Mar 2024 00:00:00 +0000
ROA not before: Fri 08 Mar 2024 00:00:00 +0000
ROA not after: Fri 12 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:4d:07:f4:53:2c:51:3b:d7:01:25:bc:4d:69:f2:dc:f4:71:60:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 8 00:00:00 2024 GMT
Not After : Apr 12 23:59:59 2024 GMT
Subject: serialNumber=8151db4bab7c28bf4f4406925657f6e8cb8b834b91e822c1a765307e46940fff, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:d1:bc:32:18:f0:68:b9:6e:0a:73:8c:af:
bf:a4:f6:81:f8:94:ff:b5:4f:37:2d:e0:03:d2:5a:
2c:46:26:68:69:1d:9d:65:94:05:e5:03:6f:64:51:
21:bb:ee:a2:f1:9f:ca:c6:5b:65:d8:13:9c:d8:a9:
8b:cd:8f:e8:2f:dc:6d:7a:c5:a5:13:fa:45:b8:90:
b6:80:06:de:6a:15:38:db:0a:4f:94:fd:72:ea:a2:
8d:fb:35:7f:4d:39:51:c0:04:ce:27:dd:f4:ef:df:
e4:99:05:68:17:d9:81:a7:ae:b7:6d:32:44:00:01:
85:81:6e:e8:84:fe:67:c4:02:17:8b:04:e1:a4:15:
e2:55:81:43:9f:aa:c8:43:f7:d0:01:bb:4b:a9:47:
0d:98:04:78:ca:c4:4d:63:b3:1f:4c:02:0f:b0:92:
0a:5a:67:b4:34:09:67:19:34:98:dd:2d:d5:61:f8:
e7:ef:89:d4:49:07:9e:36:f6:3d:de:f3:5d:6e:a0:
31:5a:0d:62:f3:6f:32:0c:52:f9:93:0e:fc:6d:fe:
4e:69:c1:46:da:c3:96:2d:42:ef:bb:da:3f:82:59:
98:fe:49:6e:2f:16:36:1b:0d:ec:67:73:77:26:91:
fa:00:52:9f:8e:e0:e4:99:0e:8f:73:22:a7:80:13:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6B:C6:32:9A:84:0D:11:24:9F:11:B9:AE:93:48:09:4F:76:39:F9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17f80ac9-d787-4d0e-af90-d69d3b2749fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e4:a1:a3:a9:52:51:a0:64:b1:73:e9:5f:98:6f:6a:a6:3c:
49:d0:7f:f5:8f:e7:eb:be:3a:da:84:92:27:ba:66:12:41:c6:
89:0f:94:e4:59:89:df:97:78:45:c2:de:93:62:07:80:a7:8d:
3d:3f:1a:96:fc:a2:07:54:af:22:ea:4f:79:de:d8:e3:bc:07:
0a:fa:05:88:95:01:02:64:78:cb:ba:03:24:d2:dd:ed:8d:04:
40:01:f1:6d:cb:9b:0f:e9:72:4b:a1:fa:91:05:6e:8c:38:27:
8e:70:1f:97:fb:8f:85:aa:47:fe:7b:38:ab:dd:b4:fd:3b:8a:
80:54:38:ed:7d:a2:4c:e1:96:fa:ac:ba:ee:b5:1d:45:75:90:
32:ca:3c:e2:13:b4:b4:30:af:07:f8:21:b7:c7:be:2f:93:e8:
31:3d:9c:29:90:33:37:5f:7f:cb:46:d2:82:10:e4:64:e0:1b:
09:71:1f:14:95:63:9b:5f:e9:f7:9e:c7:46:1b:fd:16:13:67:
c1:07:6e:05:73:c7:1c:10:11:69:0b:de:49:99:68:82:75:8f:
64:84:7a:3c:21:86:7d:72:3c:85:14:3d:c2:a5:42:48:a2:e9:
86:12:80:fe:68:a7:93:06:6c:68:94:60:68:a7:ac:a1:f7:5f:
91:2b:82:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:41:55 2025 by rpki-client