Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2c47f328-e804-44d5-abd9-f1b4119ac35f.roa
File: 2c47f328-e804-44d5-abd9-f1b4119ac35f.roa (raw, json)
Hash identifier: xNbTLs/jQx0/pp6V9Xg0Kpf4ha5hO1yN6t5gcLEY/c8=
Subject key identifier: 9E:5D:18:DC:FF:14:B2:C2:6A:F2:7F:C7:BC:4C:2F:9B:F3:6F:84:DD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 06957E6C8C666EA7DB4DD8F2422217BA57FFB6F5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2c47f328-e804-44d5-abd9-f1b4119ac35f.roa
Signing time: Sun 09 Jul 2023 00:00:00 +0000
ROA not before: Sun 09 Jul 2023 00:00:00 +0000
ROA not after: Sun 13 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:95:7e:6c:8c:66:6e:a7:db:4d:d8:f2:42:22:17:ba:57:ff:b6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 9 00:00:00 2023 GMT
Not After : Aug 13 23:59:59 2023 GMT
Subject: serialNumber=e8dc540556865f3acf506bc4db1b2447046d1ac9b0f8ac8899be3ca5d3dec05f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:dd:ab:b6:b8:bc:11:5a:52:c5:fe:f0:a3:
4a:11:c7:62:88:86:72:3e:08:36:15:70:61:0d:64:
61:a9:3e:13:bc:70:a7:38:ca:61:06:fb:ec:a8:51:
8b:9f:58:5a:e9:40:77:9a:be:b4:68:20:dd:d5:d7:
2f:b8:e3:48:8a:ca:27:45:92:47:b8:09:5b:21:f0:
a9:13:73:52:76:4d:6b:bb:6c:6a:79:4c:e1:10:d3:
99:ff:76:40:9c:31:10:fd:9d:eb:c8:f9:ca:ec:df:
07:1a:63:89:81:cf:b0:1d:16:e9:01:cd:65:72:b3:
1b:00:5a:87:56:c6:bc:7e:9d:76:86:ef:84:3d:c3:
17:67:2a:bd:b7:53:b5:48:d1:fb:61:8f:2e:af:31:
0a:a0:a1:28:d8:c7:c3:ce:c6:bf:44:c5:f0:79:58:
42:06:de:6b:7f:80:8f:51:54:79:80:56:8b:70:11:
eb:40:aa:09:06:33:7f:44:a1:8b:c0:b8:0f:b0:db:
d8:2d:6e:86:c0:b0:54:f7:81:5f:65:86:37:c4:e5:
f1:13:e3:66:37:16:6d:87:a0:7b:d5:3a:16:c4:4f:
bc:04:aa:40:b4:ce:ff:eb:9f:08:4c:1b:cc:94:e2:
29:34:46:9a:1d:40:56:de:e4:16:c7:d4:4d:d5:6b:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5D:18:DC:FF:14:B2:C2:6A:F2:7F:C7:BC:4C:2F:9B:F3:6F:84:DD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2c47f328-e804-44d5-abd9-f1b4119ac35f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:54:90:37:8e:82:e9:4e:2f:92:2a:4c:40:b9:7b:c0:2d:6b:
44:e7:33:ae:85:79:17:75:b1:86:a0:a0:4b:d7:42:35:a3:9b:
59:80:d6:89:96:ad:9e:e9:24:42:61:d2:58:82:ad:29:78:6e:
99:1b:90:1f:66:5a:90:db:a7:6a:63:dd:4e:3d:bf:a9:3b:e2:
2a:fa:e1:50:eb:1f:74:98:c8:6d:dc:69:f8:2c:9f:50:b4:56:
be:22:a4:eb:06:52:4e:e2:b1:9e:bd:a3:7d:f7:ef:b9:7f:5c:
57:eb:7d:44:1a:29:cb:2d:8c:22:8c:85:a6:08:6e:b0:1f:7a:
31:f8:e8:2c:8d:e7:52:3d:76:e7:dd:b3:29:b6:8a:63:da:3a:
3c:83:39:dd:d4:3d:4c:d1:f3:75:e0:28:88:2a:1c:e7:62:e3:
ed:31:31:64:c7:af:d1:67:37:e1:19:57:f4:7b:10:4f:0d:63:
09:24:e5:5b:ab:14:bc:21:9a:ba:2d:6f:d7:45:fa:07:4b:7d:
5b:b8:06:97:ea:14:74:12:d6:dc:a3:40:74:aa:7e:01:d3:c0:
ca:72:4f:a0:da:ae:27:55:0e:ed:90:23:3d:02:9a:c1:2e:a0:
e7:cd:36:3a:af:3e:62:71:9c:26:45:a7:98:2e:33:4b:f0:56:
29:65:3a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:50:20 2025 by rpki-client