Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1813a628-f516-4dee-a17e-7a8ffc0e4942.roa
File: 1813a628-f516-4dee-a17e-7a8ffc0e4942.roa (raw, json)
Hash identifier: BXip6gAyFUPo0A48udXKwL8RG84vCZ28hwS/qZuwcXo=
Subject key identifier: A5:B1:D5:49:3B:02:90:68:B6:CB:4D:46:6C:CD:F7:38:A1:72:8D:71
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 525202D64611043706AC43B881DEA8B36F731B24
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1813a628-f516-4dee-a17e-7a8ffc0e4942.roa
Signing time: Fri 19 Jul 2024 00:00:00 +0000
ROA not before: Fri 19 Jul 2024 00:00:00 +0000
ROA not after: Fri 23 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:52:02:d6:46:11:04:37:06:ac:43:b8:81:de:a8:b3:6f:73:1b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 19 00:00:00 2024 GMT
Not After : Aug 23 23:59:59 2024 GMT
Subject: serialNumber=b224b7ff0aad01f42ae33913a5598823d1633d2671d6f5f542621eb2c3dbed70, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:b9:62:d4:7e:74:ce:19:07:05:e8:49:38:
6c:a3:50:9a:2d:8e:36:06:45:f3:4f:b8:b6:9f:38:
98:67:df:f6:8e:99:ca:c0:bd:df:c2:4d:d2:5b:89:
40:ed:74:f1:1d:ad:90:6f:6d:8e:63:01:44:87:11:
f9:1d:96:08:0e:25:3e:17:9d:f4:60:6e:f1:e3:12:
18:67:6b:35:7f:aa:a4:7e:52:3b:78:74:7c:53:26:
c6:d8:09:93:8a:20:f4:d1:0e:11:5e:7c:f5:db:ec:
79:4a:cd:df:be:a2:1a:1c:c0:04:70:93:96:44:5a:
1f:12:2d:1e:64:d1:cb:b5:75:0d:1e:90:41:ab:60:
db:57:d2:63:19:37:af:07:5b:6d:3a:99:29:f4:bd:
8b:17:6b:b1:ea:a1:67:f6:73:7e:95:14:72:ab:d1:
ec:98:1a:d8:be:0f:75:8d:e6:6c:78:e7:0d:6a:b3:
8a:0e:9e:2c:92:5d:b9:0f:0a:19:bd:11:34:0e:b8:
71:b2:20:18:d6:69:97:d4:31:de:2c:49:05:c3:19:
51:7d:c0:06:4f:92:d0:de:d8:7a:8d:e3:6b:18:a9:
7b:fb:37:36:94:b4:cc:2c:59:82:c8:8f:d3:c5:b6:
7e:1f:93:5d:2b:37:d6:f0:9c:1c:35:05:ec:b4:04:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B1:D5:49:3B:02:90:68:B6:CB:4D:46:6C:CD:F7:38:A1:72:8D:71
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1813a628-f516-4dee-a17e-7a8ffc0e4942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b6:38:8e:3e:8a:c3:61:44:e0:b9:e3:3f:60:5a:49:67:c7:
55:0a:e9:cb:85:7b:69:0c:39:50:de:5c:e3:7e:92:43:2b:5d:
cb:4f:3f:03:bb:fa:6c:ab:4e:25:03:4e:20:6a:39:02:1c:b3:
c5:49:07:cd:92:a6:5a:40:dd:6e:d6:f2:3b:92:70:8a:36:a2:
63:5f:5e:11:d0:33:36:e5:8c:be:c3:b6:7d:cb:46:83:2c:05:
af:2f:b2:bd:9d:16:0f:0a:50:cc:cc:a3:02:8f:f6:21:cf:b2:
d7:6d:f9:55:1f:94:30:2c:79:27:6c:46:af:fd:18:d1:e3:c3:
d1:44:70:05:05:7c:45:ff:af:fb:10:89:31:89:df:f7:1f:e4:
80:f6:a1:c0:d8:2b:e0:d7:6f:03:3c:68:14:3a:4c:93:e7:86:
2b:01:d0:ed:1f:32:e9:87:c8:b2:4d:c8:98:c4:d9:aa:69:7e:
61:45:84:8a:e8:55:50:4c:0d:f1:5f:d0:cb:e2:dc:2d:2e:dd:
be:ac:97:87:70:73:5e:28:37:d6:c5:d7:9f:1f:71:27:a3:30:
28:ef:24:30:f2:77:48:41:dc:7f:55:5e:2a:c7:60:a1:6d:6d:
79:a3:1f:f5:a8:c6:bd:00:e4:a4:c3:4c:b9:ec:59:f0:e9:56:
be:1b:7a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:15:25 2025 by rpki-client