Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19348abd-89bc-4a7d-a55c-15eebb371260.roa
File: 19348abd-89bc-4a7d-a55c-15eebb371260.roa (raw, json)
Hash identifier: PZIVmtFv8hzsPde4v4kYKitpoLEEKQGX9XYNpD8d5xw=
Subject key identifier: 37:AB:F1:0B:C6:83:97:1B:CC:7B:B3:A0:6E:5B:9E:5A:5E:6E:2A:2F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 71DA6C30D98169E7224A0FF8E13413CA7161975C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19348abd-89bc-4a7d-a55c-15eebb371260.roa
Signing time: Thu 21 Dec 2023 00:00:00 +0000
ROA not before: Thu 21 Dec 2023 00:00:00 +0000
ROA not after: Thu 25 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:da:6c:30:d9:81:69:e7:22:4a:0f:f8:e1:34:13:ca:71:61:97:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 21 00:00:00 2023 GMT
Not After : Jan 25 23:59:59 2024 GMT
Subject: serialNumber=5ea1fd3ab827e3ab89706cf76fe1f1f4f5285d47e3d1cc0896bed6b59bd3ab78, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:57:60:f0:b5:07:60:85:22:df:89:df:b9:
04:67:4c:e7:14:5f:77:9a:49:f7:0b:ac:bc:90:6b:
e2:18:88:24:94:d8:e7:a4:52:1d:a0:96:88:3c:f0:
d4:f2:0b:74:86:31:47:3d:d5:b2:af:9d:4e:97:17:
b0:c6:f6:88:9b:36:51:53:3c:6f:fa:03:0d:4e:da:
e6:8e:db:8b:61:62:45:26:c5:26:c7:da:c0:db:da:
47:c8:71:6c:00:53:bf:9f:7d:cf:88:24:12:90:88:
e2:db:7e:97:c7:e8:7e:cd:ef:97:c3:bd:fd:c4:9b:
88:34:8f:0f:9a:41:76:7a:d7:bc:02:b6:3b:be:69:
20:25:72:2d:c8:c5:6f:e3:3f:c3:bf:23:85:88:9e:
0d:7b:8c:47:6e:1e:64:7e:23:d9:96:8c:1a:28:93:
c1:fb:dd:62:86:4f:90:5c:30:b9:94:44:7b:d0:e8:
3b:53:25:4a:d4:00:05:1e:b3:26:a0:b6:b1:c4:1d:
ec:06:64:b9:ee:bc:e3:d5:6f:c2:7a:d7:28:92:61:
24:89:da:57:49:0a:f8:2a:7e:24:c7:7e:32:00:ab:
ca:66:6c:19:20:05:93:0c:19:72:2b:40:96:4d:b1:
6d:bf:68:6e:dc:a0:34:00:1d:42:0c:be:bd:50:2f:
a3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AB:F1:0B:C6:83:97:1B:CC:7B:B3:A0:6E:5B:9E:5A:5E:6E:2A:2F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19348abd-89bc-4a7d-a55c-15eebb371260.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
88:92:59:72:74:55:ae:ba:97:49:49:8b:f3:85:d2:4c:48:c2:
fc:b5:98:c2:22:f6:0d:51:c5:61:0c:83:b9:9a:44:9c:bc:9a:
e1:52:15:6c:b7:16:f8:09:f6:db:4f:fb:75:53:2a:8e:ab:dc:
58:c5:bf:47:97:e2:a0:1c:f2:9e:59:75:aa:8b:92:d1:c3:e8:
61:eb:ee:ca:5c:d6:33:96:4a:50:a5:df:2b:0e:cd:78:ac:a2:
01:b0:39:dd:9f:ee:6c:c4:15:d2:ee:b7:e2:9b:e6:0d:4a:bd:
29:ba:20:ed:78:c7:5b:d9:3a:b7:d5:3a:b7:90:b7:36:c5:bc:
2a:49:6b:01:96:ce:b0:3b:4a:dd:85:be:1a:ac:54:8a:6c:79:
c2:14:dd:b9:09:1d:36:65:eb:a8:dc:da:08:e2:e1:68:2f:b6:
a5:08:5d:44:8c:8f:2a:f3:ed:5d:79:9f:62:19:37:a7:fe:78:
72:a3:cd:b9:38:cc:1a:4d:e8:e6:3e:07:e5:86:be:ea:36:3e:
9b:43:4a:ff:69:24:94:be:05:75:c5:62:46:73:27:b4:02:cb:
76:88:a4:20:9d:0e:13:32:96:35:3a:7e:ce:c3:db:5a:46:84:
5d:33:4e:11:75:cf:d4:a6:f9:57:fd:59:24:05:39:c8:88:aa:
36:07:c7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:19:10 2025 by rpki-client