Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/349b76e8-0ed7-4d95-b364-7824bd22ddc2.roa
File: 349b76e8-0ed7-4d95-b364-7824bd22ddc2.roa (raw, json)
Hash identifier: ITMlyicpB1vaTwEEhUKtLJnY+rBrOFEwJgCQvLIikqY=
Subject key identifier: 1F:0A:EA:D3:CA:48:51:C6:31:7C:7E:C7:0F:5A:6B:63:EE:8F:9E:CE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1D3B49233D1E06097110BEB8CC947BF7A6767E52
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/349b76e8-0ed7-4d95-b364-7824bd22ddc2.roa
Signing time: Thu 23 May 2024 00:00:00 +0000
ROA not before: Thu 23 May 2024 00:00:00 +0000
ROA not after: Thu 27 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3b:49:23:3d:1e:06:09:71:10:be:b8:cc:94:7b:f7:a6:76:7e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 23 00:00:00 2024 GMT
Not After : Jun 27 23:59:59 2024 GMT
Subject: serialNumber=81a145edebd1dab958ad3a2f5af986ac6ac1a8bf7d24a05b1f5bd8b239db94db, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:5f:82:60:e4:59:22:ca:f2:32:f7:f6:10:
3f:b2:01:69:49:8a:ec:1c:f8:34:af:2c:9d:5f:58:
b3:a7:41:be:ce:d4:5d:82:35:69:5e:4f:4c:4e:51:
89:f3:aa:98:69:f0:be:95:cf:fd:1f:bf:03:e7:55:
0f:62:5f:3e:d7:d2:3f:ba:dd:ce:ac:07:49:79:05:
29:dd:c9:3c:43:f6:0f:81:19:88:c3:19:02:95:4b:
c4:09:8e:e6:f8:de:3c:a0:bd:25:0b:3b:97:61:72:
ac:75:67:5f:5f:4b:61:0b:6c:6a:99:94:1e:a7:9e:
b4:7a:31:e7:55:bb:34:0e:6d:8f:06:47:db:ab:b8:
92:f2:23:b8:7d:f6:3f:48:72:95:5b:64:d5:62:ee:
93:2f:4b:37:8f:4d:4c:1e:e7:ef:f1:9a:5f:d8:6c:
82:fb:53:27:50:64:00:d9:81:c6:ea:31:8d:3b:fa:
be:2f:e7:ed:c7:db:7e:ee:1d:40:6a:11:ab:8e:7a:
4f:0d:d2:e7:18:d8:9d:25:74:0a:30:c8:2b:b2:b9:
ac:c1:d1:1f:42:1d:ec:a2:49:20:74:43:ef:13:22:
4d:73:66:2d:fc:51:fc:b4:d2:81:36:3c:f3:ba:63:
ba:b2:79:f8:f0:0e:23:60:9c:3b:92:fc:d1:e7:6b:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:EA:D3:CA:48:51:C6:31:7C:7E:C7:0F:5A:6B:63:EE:8F:9E:CE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/349b76e8-0ed7-4d95-b364-7824bd22ddc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:5c:62:9b:7f:b2:08:aa:9e:7d:b8:4f:00:cc:63:b1:d6:0c:
7f:dd:92:84:f1:0b:b8:cb:74:9e:9e:fb:97:7d:c6:91:cf:db:
30:6b:67:ed:fa:6b:c0:e9:a2:fb:e7:75:8e:19:6a:4c:cf:4e:
9c:58:fd:05:2f:60:7f:b5:72:56:f2:0f:b7:e9:6f:58:22:e8:
8f:e0:32:02:b8:d2:22:56:b0:a7:d4:ea:c3:4a:4e:2c:a4:7d:
c1:d4:5b:de:1b:24:82:e2:c4:bd:73:c9:41:0b:99:dd:25:ae:
80:99:30:4c:36:8b:b2:cf:54:80:9c:19:cd:c0:01:a7:fc:8d:
1a:88:06:55:84:c9:87:24:f6:b5:54:e7:e3:cf:d4:4a:24:b9:
a3:b4:47:89:a7:35:23:62:52:8a:68:ff:80:15:20:54:1c:8b:
4a:e3:01:a1:21:b4:70:49:26:81:9d:18:e3:1a:e4:13:84:00:
05:27:df:c1:30:87:6e:f0:47:f7:d9:d4:5b:8c:1f:10:a0:f0:
6f:48:e8:fc:b1:65:6b:67:19:33:57:29:3d:9d:08:d0:0e:ed:
15:ae:75:3e:8a:bf:8d:7f:81:16:e2:a6:3b:6e:9a:8e:53:cd:
8b:c8:0d:5d:5b:a5:dc:cb:17:ab:dc:39:d3:67:57:3e:6a:0f:
34:ae:a9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:18:05 2025 by rpki-client