Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/222f574d-6511-4e46-bb55-685b7df9baea.roa
File: 222f574d-6511-4e46-bb55-685b7df9baea.roa (raw, json)
Hash identifier: jtZSDv1ZT5ujLkZMTVig4NjXlP0uw3YNLrdQQTvq7YQ=
Subject key identifier: 07:9F:47:69:FD:3C:79:61:17:73:C5:35:82:75:87:61:BC:7E:32:76
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6F23D7D6C1123B6A05D15A265EEFB2CC48C11BA6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/222f574d-6511-4e46-bb55-685b7df9baea.roa
Signing time: Wed 20 Sep 2023 00:00:00 +0000
ROA not before: Wed 20 Sep 2023 00:00:00 +0000
ROA not after: Wed 25 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:23:d7:d6:c1:12:3b:6a:05:d1:5a:26:5e:ef:b2:cc:48:c1:1b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 20 00:00:00 2023 GMT
Not After : Oct 25 23:59:59 2023 GMT
Subject: serialNumber=8309927c426fc2fe21c2fc6349fe731e82069274966a49d3e6b2189557c5507d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:29:b8:66:3b:e3:6c:b0:0c:60:2b:c3:83:
cd:dd:c8:6b:3c:57:ac:05:01:72:09:ca:0e:fc:42:
59:64:30:18:a3:67:7f:e4:dc:b8:9b:29:ef:bc:ee:
14:05:d6:ac:a5:c1:3b:91:ae:6a:20:6c:c9:d4:3b:
26:7a:70:11:81:64:3b:06:f9:fd:a7:f6:07:0c:da:
33:5e:ee:78:5d:1f:a5:65:f2:49:78:cc:4d:86:45:
16:f0:e7:ad:c2:3d:66:e2:2c:b5:e8:c5:76:1f:24:
24:1e:67:3a:2e:4b:9b:bc:b1:5f:3f:ad:93:46:26:
e3:dc:be:80:78:48:4d:5d:07:53:48:97:c3:0d:59:
07:12:ed:30:2b:3f:97:97:01:7f:7f:e0:f6:70:51:
b3:c9:79:96:cc:2f:2a:89:fb:fe:d4:97:28:ef:a9:
a7:f3:3e:48:19:4b:84:0a:7e:12:a3:ad:e7:73:7c:
aa:a4:1e:47:fe:3a:a9:75:d5:1c:dc:1b:68:10:20:
7d:37:70:fc:d1:a7:14:08:86:c4:2c:a5:8e:eb:51:
ec:b1:9f:cf:5d:6a:a2:5a:7d:fa:51:9d:24:35:e9:
0e:d4:5c:1b:21:a6:71:67:a0:fd:50:1d:bf:bb:ce:
f9:41:ab:09:f7:ee:ab:1a:53:91:be:8f:11:60:4f:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9F:47:69:FD:3C:79:61:17:73:C5:35:82:75:87:61:BC:7E:32:76
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/222f574d-6511-4e46-bb55-685b7df9baea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a1:bd:65:19:eb:93:e0:88:f5:f5:8d:37:b3:02:ff:5a:fa:
92:a5:00:b5:95:01:4b:ae:37:8c:5d:4c:9d:ba:22:73:46:90:
27:44:f9:5a:c3:e1:45:2e:e9:b6:cb:b6:5f:e1:b6:e9:44:f7:
3f:55:51:1a:2c:ab:b1:d8:a8:98:bb:0f:1a:c9:1f:16:86:8a:
30:58:f1:6d:d9:2b:a0:7c:6c:24:10:8b:bf:7a:7d:6a:f1:dc:
b7:97:4a:61:95:30:f2:94:6f:99:15:e4:66:5f:f9:d5:be:b9:
54:b4:5a:ea:7a:1d:ad:f7:e2:68:0b:7a:77:3e:ab:07:71:84:
02:3e:d8:4c:ac:54:bf:62:da:e2:ff:d9:70:b2:44:55:fc:1e:
be:32:f7:d8:5f:02:11:d3:eb:3b:f3:99:58:d0:1b:21:fa:98:
7f:00:d3:f9:a5:73:be:80:45:be:0d:10:b6:7a:fa:48:cb:3f:
03:7a:a8:f1:02:49:93:dd:79:54:70:fc:ae:50:4a:6b:65:b8:
d2:d0:fd:08:55:86:31:bb:63:29:09:b5:bd:9d:ee:5b:e4:49:
f4:82:15:ac:29:b7:af:90:32:d4:bd:cd:fa:fa:a3:81:fa:84:
fc:89:ca:55:9d:4f:88:e3:53:e7:9b:03:c4:96:4e:a3:05:ab:
f5:55:0b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:27:51 2025 by rpki-client