Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44efeb3d-d302-47d8-b2a0-38331dd0f583.roa
File: 44efeb3d-d302-47d8-b2a0-38331dd0f583.roa (raw, json)
Hash identifier: 3C87PtVBCerDzsI3/ZcNcNfXgcZoYmDMznLLCF4Tco4=
Subject key identifier: 60:E3:9D:15:40:7A:86:B1:8E:72:0D:D0:D8:E8:E5:20:9C:87:0B:2D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 05D4F102517F271E469B33DAACCF456EF210DE58
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44efeb3d-d302-47d8-b2a0-38331dd0f583.roa
Signing time: Wed 26 Jul 2023 00:00:00 +0000
ROA not before: Wed 26 Jul 2023 00:00:00 +0000
ROA not after: Wed 30 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d4:f1:02:51:7f:27:1e:46:9b:33:da:ac:cf:45:6e:f2:10:de:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 26 00:00:00 2023 GMT
Not After : Aug 30 23:59:59 2023 GMT
Subject: serialNumber=5e0aa476e18c8235009209982f4c827d1633308a1811056c1e5b6cb5b1ed4480, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f9:5a:af:9f:f4:8d:3d:29:26:1e:0d:0a:47:
a4:cb:0e:a0:80:f5:26:1b:15:be:15:70:bc:de:29:
55:01:64:8c:1d:90:03:63:02:30:07:46:0d:3b:5a:
7c:ba:b4:39:39:b9:80:6a:17:b1:3e:10:a6:68:68:
dc:23:a6:b9:bc:5b:9f:9b:58:1d:4e:4a:34:73:8c:
56:81:4f:37:4d:05:3a:84:14:7d:78:28:a8:fa:c4:
9b:33:24:59:ed:4c:f4:a3:8f:12:92:58:36:fc:e9:
62:cc:06:46:00:dd:aa:49:31:b5:56:5c:ac:d6:6b:
74:b2:6d:8b:6e:54:ef:5c:99:d3:df:9b:73:12:a6:
5f:17:8c:47:ed:71:22:46:80:23:63:07:c2:ca:70:
12:70:c1:98:f5:a2:4f:05:f9:4b:70:53:35:8f:22:
0b:f3:fc:5c:37:ab:be:a9:77:2a:ec:9c:ed:f2:b5:
cd:34:fe:d3:bf:06:95:b6:ea:e8:66:c9:f0:2b:bd:
b4:59:09:fe:3d:1d:ff:78:78:a8:35:6d:2c:b4:df:
a1:9a:db:71:0d:ef:e2:a0:71:51:63:0e:2b:d3:c0:
e2:db:23:a0:72:7e:01:9b:e6:70:28:e1:4c:3c:84:
23:b7:d8:ce:3b:60:33:fb:3d:70:2d:55:05:33:ac:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E3:9D:15:40:7A:86:B1:8E:72:0D:D0:D8:E8:E5:20:9C:87:0B:2D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44efeb3d-d302-47d8-b2a0-38331dd0f583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
36:01:da:21:d4:60:4e:7b:99:63:1a:d1:02:46:36:81:26:55:
91:48:4b:c1:22:b0:8d:b7:70:f1:e2:ff:f6:97:13:1b:2d:b0:
d0:fc:a2:c6:84:e5:bc:15:4d:7a:a5:80:f7:c7:05:b1:f6:79:
54:46:c1:88:b6:92:5c:d8:c3:46:34:59:df:f0:ed:0c:01:c1:
2e:8c:75:d1:69:c2:99:17:e2:3b:5d:40:57:15:23:5f:cb:a7:
c1:f3:13:a9:69:0d:27:ae:a5:91:55:13:e8:cf:ec:95:24:a2:
06:76:cc:44:74:be:13:fa:00:54:58:2a:41:9d:fe:af:68:8b:
09:88:c3:1e:c7:9f:98:f2:93:bf:5f:dc:77:77:aa:b5:ea:17:
d4:17:c7:94:dd:c4:7e:ed:8b:ca:c1:ea:aa:0c:07:66:01:72:
7a:d5:52:c6:68:fd:bc:b8:6c:b9:de:7b:15:ed:2f:ab:47:8a:
64:ff:b1:91:cc:c2:d3:c6:65:c0:8a:e8:7d:c2:5f:58:48:55:
db:59:11:c4:01:a2:9c:dd:a7:52:51:5b:1a:e0:af:af:b7:11:
0a:9c:62:73:7d:41:73:ef:8f:04:e5:5b:aa:fe:37:0c:b9:54:
ef:52:cf:1d:be:a5:8e:7f:1f:30:17:40:72:a4:9a:42:f4:de:
95:7c:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:06:26 2025 by rpki-client