Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/381ff7e9-4ed1-4d2e-afce-3c8821be02d5.roa
File: 381ff7e9-4ed1-4d2e-afce-3c8821be02d5.roa (raw, json)
Hash identifier: miVEwv6eLYypSWUoO0w19ZEhd7g3Ci991u0wcE2HCuI=
Subject key identifier: CA:F2:70:94:A9:34:03:64:AB:8E:BE:7C:29:BE:95:A7:6D:31:88:D0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1B412B4A42368490B7A09D5058D5F6716024B290
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/381ff7e9-4ed1-4d2e-afce-3c8821be02d5.roa
Signing time: Fri 23 Aug 2024 00:00:00 +0000
ROA not before: Fri 23 Aug 2024 00:00:00 +0000
ROA not after: Fri 27 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:41:2b:4a:42:36:84:90:b7:a0:9d:50:58:d5:f6:71:60:24:b2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 23 00:00:00 2024 GMT
Not After : Sep 27 23:59:59 2024 GMT
Subject: serialNumber=f8a1cc116b0e594eff67416eacf2a61b79917da96d53f339ffac772f8c8a32fe, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:ad:ef:a9:d9:67:0e:24:43:bf:4a:94:88:
3e:cc:b8:a8:23:b6:05:ad:49:c5:cf:a5:90:bb:9c:
a5:11:72:bd:42:a9:4a:7e:83:48:ff:93:9a:32:2f:
67:49:0a:69:fc:db:79:d8:1b:0a:55:28:78:99:6c:
6e:cb:03:19:00:ba:4f:e1:68:f0:d0:f1:02:08:4c:
7a:f1:d0:a2:37:70:52:fe:c7:fe:9a:b7:9b:af:95:
27:0c:73:66:a2:a2:0a:9a:11:c0:82:7f:7a:22:00:
17:45:63:10:78:28:58:5f:46:e2:d3:f5:36:2a:9b:
ec:52:49:47:0d:04:a4:f7:c6:1c:be:2d:45:48:a7:
e6:ac:7a:32:96:3d:80:40:86:2f:15:02:89:03:f3:
b7:63:a7:b0:d6:a9:6e:e4:8e:09:a5:8c:24:14:56:
1e:d8:6a:95:0c:06:9b:28:44:02:6c:11:d3:4b:2c:
e0:02:9b:6f:1f:02:55:a6:f9:c7:d7:64:85:97:c0:
6d:e6:a3:31:c2:b7:1b:62:08:0f:c4:e5:52:48:87:
45:4e:8f:11:84:21:f6:4b:45:c6:90:96:64:3f:83:
03:2b:46:9f:19:24:54:f4:b6:29:84:94:b0:ad:82:
92:f8:52:9b:ad:0a:a0:55:18:2f:c4:08:df:47:37:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F2:70:94:A9:34:03:64:AB:8E:BE:7C:29:BE:95:A7:6D:31:88:D0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/381ff7e9-4ed1-4d2e-afce-3c8821be02d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ac:3e:13:c4:85:0c:ec:2d:b3:2f:5b:9d:5b:d7:ce:a5:b2:
b0:c6:a3:6a:31:3c:31:c4:8c:d8:b9:f8:94:65:68:30:ee:c5:
fb:3c:be:ae:c5:cf:a5:95:58:4d:0c:88:34:4c:4d:75:5e:3f:
45:b6:86:2a:84:91:7e:34:be:9f:27:58:2a:98:20:f1:cb:65:
79:1d:bd:21:04:69:5d:56:df:38:a9:13:ce:e4:b8:e6:95:4e:
f9:7c:24:e9:4f:1d:f5:0e:c7:ec:34:95:50:d2:51:96:d1:7d:
33:d1:0e:92:62:0b:dd:64:01:a4:93:48:f9:57:6e:e8:78:15:
c4:3b:bc:f9:9f:34:60:5f:e5:cc:49:4b:8a:16:76:09:26:a4:
d1:7d:ff:db:16:ec:7b:0d:3e:0e:e9:c7:39:54:87:5e:5d:aa:
b6:9a:18:f1:fa:bf:cf:82:9a:89:8c:bc:e1:00:07:b0:70:14:
ed:b6:ac:2c:9f:67:8f:95:4e:e6:fe:d2:55:b8:d7:d9:77:38:
41:c2:35:38:ac:85:69:ad:d9:3d:12:a6:bf:12:d4:06:2b:52:
3f:d1:78:33:c5:6e:48:93:08:c2:35:c7:03:b7:80:c2:01:7c:
77:4d:03:25:3c:40:b9:73:40:d9:a4:2a:21:74:b6:5b:34:9e:
15:f3:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:46:50 2025 by rpki-client