Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/28b7c65e-6fc3-4936-9490-f833fd44c228.roa
File: 28b7c65e-6fc3-4936-9490-f833fd44c228.roa (raw, json)
Hash identifier: aww3F//aE+80PtWmIfYJ8Z3zc49wVKiUy4svHDOGK0U=
Subject key identifier: 70:62:71:19:81:30:1D:42:50:B2:E9:18:15:2C:03:94:11:3C:8C:64
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0E0E248401EE59AFB5B1037D1E9094338953BC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/28b7c65e-6fc3-4936-9490-f833fd44c228.roa
Signing time: Wed 18 Sep 2024 00:00:00 +0000
ROA not before: Wed 18 Sep 2024 00:00:00 +0000
ROA not after: Wed 23 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:0e:24:84:01:ee:59:af:b5:b1:03:7d:1e:90:94:33:89:53:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 18 00:00:00 2024 GMT
Not After : Oct 23 23:59:59 2024 GMT
Subject: serialNumber=bb0f6e93a917eb06739cc2ffc781d8c4bc3861ade3513b9efec6b6458473c8d9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bf:24:7b:41:7f:d2:68:f7:fd:64:b4:21:7f:
af:43:16:a8:e2:ea:bb:e3:b7:6a:81:89:13:1f:5f:
a7:d2:3d:ec:d0:2b:c8:c9:ed:6c:d8:ff:f9:48:66:
f5:a9:e6:3f:fa:68:73:bb:3e:db:26:f1:01:aa:64:
6f:e6:73:96:5e:8c:1f:66:63:04:73:90:88:bd:60:
60:f4:51:dc:d0:f3:97:aa:c9:3d:11:19:31:c3:6b:
1b:d0:e8:bf:65:dd:e9:9d:ba:ec:52:34:40:31:09:
a9:2e:3a:8d:ec:05:6d:50:27:34:9c:31:b9:7b:b2:
82:dd:92:89:24:a3:54:f7:88:22:e4:93:1e:bb:fa:
09:1b:d6:9e:6e:df:08:6f:4c:be:64:56:c5:b2:70:
19:c5:b0:02:3e:27:03:0c:24:79:13:60:b1:29:29:
ee:ff:dd:14:5c:24:c3:e3:79:cd:1f:6c:ba:37:17:
ce:b6:01:85:73:78:cf:1d:e6:e5:53:2e:62:f0:21:
7c:98:70:d5:dd:f2:f6:1b:0b:3a:19:73:0e:3f:6e:
2f:18:d4:af:79:df:2f:66:0d:84:35:24:c4:1c:d5:
22:e6:eb:6f:a7:e4:bc:1d:cf:3b:bc:85:33:b8:0f:
d0:78:7c:55:82:f4:86:1c:ed:b4:65:b5:4c:a6:e0:
0f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:62:71:19:81:30:1D:42:50:B2:E9:18:15:2C:03:94:11:3C:8C:64
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/28b7c65e-6fc3-4936-9490-f833fd44c228.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a8:6f:15:61:f1:bc:e9:35:3f:ff:ef:ee:51:d6:cb:bb:14:
7b:fb:6b:75:40:96:c4:75:38:09:7c:a9:ed:01:40:cf:9a:b3:
4a:96:11:a6:c1:30:38:71:fa:70:cd:78:18:a1:f0:b4:8d:ed:
49:ce:be:61:c1:53:d2:27:13:70:a4:0d:99:e1:29:6a:25:68:
8d:6c:1c:d6:e6:0a:86:d4:3c:8e:5d:62:9e:c1:c9:ac:e8:b9:
e8:ae:e0:29:d9:3e:3a:a4:77:ac:be:75:65:6b:e7:1d:3e:fe:
75:97:bb:c7:3a:c9:1d:1d:98:d5:b7:9f:74:02:aa:8b:0e:d6:
4c:7c:7c:f7:fa:0c:9b:d3:21:6a:78:16:a2:c7:ca:e2:0c:3b:
e2:7a:cf:58:a7:ba:8f:e8:78:3a:8d:34:e0:33:bd:0a:c7:7a:
64:11:af:f3:b8:71:45:66:e3:81:4a:71:6f:9c:53:4c:59:17:
fb:f3:c2:62:41:96:88:e9:32:9a:15:a7:d2:1b:06:cc:1c:c6:
62:9d:30:3f:37:01:c7:da:c5:ba:a7:db:e0:98:52:93:6b:c5:
c4:64:84:04:83:28:9a:60:16:dc:66:6a:9f:51:4d:48:66:ca:
ab:72:ae:0f:28:7c:e2:4a:30:30:61:d0:e7:a4:93:5d:22:0d:
80:98:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:17:18 2025 by rpki-client