Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/20a994a2-3292-4598-b598-6797bf76bdff.roa
File: 20a994a2-3292-4598-b598-6797bf76bdff.roa (raw, json)
Hash identifier: iysfNVDbHklr7gXfnyUIAZBPGmMPfxXLjlRTgkrC24M=
Subject key identifier: 61:AA:1D:D6:D4:F7:85:6C:D9:1B:FF:ED:A8:EF:8B:13:05:16:89:23
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7F07F6E2378A1C02CD9A5BEF7A6968ECAA8EBF86
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/20a994a2-3292-4598-b598-6797bf76bdff.roa
Signing time: Wed 03 Jan 2024 00:00:00 +0000
ROA not before: Wed 03 Jan 2024 00:00:00 +0000
ROA not after: Wed 07 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:07:f6:e2:37:8a:1c:02:cd:9a:5b:ef:7a:69:68:ec:aa:8e:bf:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 3 00:00:00 2024 GMT
Not After : Feb 7 23:59:59 2024 GMT
Subject: serialNumber=c1b46f3038c087014be8757cac1cb817629ccae05d667165db2a1b1fe70fa63e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:a4:3c:9f:c5:c8:5b:22:e6:d2:f1:11:32:
34:66:83:78:7e:6b:01:78:a8:6a:4a:67:ab:10:a6:
15:a0:7b:b5:57:50:98:11:78:83:48:07:af:12:67:
cd:41:ba:d4:2e:28:56:ca:40:3f:05:1a:ed:ab:e9:
a1:cb:dc:7b:94:ed:30:0e:da:c5:6f:ca:e4:e3:c6:
4a:dc:62:87:02:1b:f4:f8:2c:d4:95:ed:ce:fc:6b:
1e:f4:76:4d:50:c5:c7:15:79:62:30:92:3a:ef:d1:
eb:f8:63:8e:b4:a9:aa:f9:99:f3:a0:01:08:f4:6e:
75:0c:59:71:96:20:cd:9d:b8:0d:63:f6:1f:c2:2a:
ee:0d:e7:dc:98:2b:51:81:c1:02:25:4e:d5:20:6f:
87:49:d6:21:86:b4:c7:1d:ba:ec:39:59:54:a2:2e:
e5:7e:db:43:6c:eb:7e:74:cc:a8:fe:97:4e:06:4c:
98:c6:3d:04:12:4b:ec:44:ad:2f:72:c6:41:42:bf:
42:ff:ab:fd:97:d4:58:fe:fd:00:09:db:73:ba:90:
2c:16:0e:02:62:c7:3f:cb:bd:8f:7e:c3:2f:6b:89:
b0:64:d8:d8:2b:30:d4:68:47:37:5e:4c:f3:4b:dd:
cc:7d:a8:9f:5a:77:e3:66:fe:98:3b:85:59:14:65:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AA:1D:D6:D4:F7:85:6C:D9:1B:FF:ED:A8:EF:8B:13:05:16:89:23
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/20a994a2-3292-4598-b598-6797bf76bdff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:86:6c:6e:2a:c5:f5:45:b2:22:c7:17:c5:f2:4a:91:e6:32:
d0:bb:c1:1b:69:52:d2:37:fd:6b:79:f1:6c:2c:8e:38:ae:a9:
dc:ce:6c:d6:a4:7f:8a:ac:8c:c2:e9:30:9b:c5:7f:f4:60:48:
44:9e:44:9c:9c:d8:6a:53:5d:e7:e8:d6:3e:e2:c3:22:81:e6:
d5:81:04:7e:75:34:22:50:1d:c5:85:0e:2b:cc:f2:c9:b3:ec:
b6:28:5f:09:71:fa:14:10:34:c5:4c:59:fa:1c:59:5d:85:cb:
22:c4:73:18:96:89:10:59:90:cb:5e:01:ee:67:71:85:5b:37:
9b:c9:b2:06:e4:84:ba:b2:b1:73:8d:07:17:88:cd:64:fd:f7:
af:1f:5e:2a:30:f5:e1:56:f3:36:10:1f:88:7c:26:03:1d:b0:
b5:ef:dc:59:4f:ed:3c:af:1f:81:53:04:ac:e8:88:c6:0e:87:
1c:66:47:14:36:c7:91:8f:d0:a7:e0:13:4a:d0:a4:eb:89:ed:
8d:4e:7c:4d:ac:95:2b:2d:b1:18:9e:00:38:6f:57:44:be:38:
14:05:a7:df:5f:81:e5:fe:d3:cf:3f:41:7d:d3:dc:04:da:aa:
22:bf:3c:29:71:6e:a1:37:8b:86:4f:65:22:1d:fd:f0:54:4b:
32:71:f2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 17:18:10 2025 by rpki-client