Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/48474e36-a706-4fd9-84f5-9e5b82fe4a9b.roa
File: 48474e36-a706-4fd9-84f5-9e5b82fe4a9b.roa (raw, json)
Hash identifier: NuqRMzZxOyDuXkwHIBXovuKGurupdOPQj23oQqXN9zk=
Subject key identifier: FC:43:DF:B9:1A:27:9F:6F:FA:F1:D1:48:78:8F:2F:4F:23:27:2B:B6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1C4BBB78BDF272E4988713FD4F093E6794D3E2F9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/48474e36-a706-4fd9-84f5-9e5b82fe4a9b.roa
Signing time: Thu 08 May 2025 11:13:18 +0000
ROA not before: Thu 08 May 2025 11:13:18 +0000
ROA not after: Thu 12 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:4b:bb:78:bd:f2:72:e4:98:87:13:fd:4f:09:3e:67:94:d3:e2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 8 11:13:18 2025 GMT
Not After : Jun 12 23:59:59 2025 GMT
Subject: serialNumber=068f2c2cde95bd1f48fbb3666a8bbb3abff039f28b9512f1d4879c6c6c1b1be0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:85:4e:3a:0c:f3:27:b2:e4:0a:49:ba:a0:
7e:6a:23:07:bc:11:23:25:61:af:f9:b9:68:98:89:
f9:fc:6b:c9:5c:db:45:30:8c:64:6b:56:0d:0a:97:
59:68:56:4f:c8:bd:27:e2:8d:f3:9f:3f:72:ba:92:
e5:a8:b8:55:27:7f:1c:c9:c7:52:32:86:ae:97:41:
0f:cd:ac:fd:c1:91:f8:d7:ab:ef:82:36:d7:f5:bf:
b5:7a:3c:84:5d:2e:04:a1:e2:1c:09:60:b7:d9:0a:
72:25:ea:99:73:00:57:b8:34:a2:b0:af:99:67:c1:
83:45:83:86:5d:74:f0:a9:d7:1b:5b:3d:f5:41:28:
85:47:62:4d:68:db:c7:ab:38:59:72:fe:45:65:d7:
ab:8c:d0:f5:be:bc:4f:08:40:e0:d7:e7:d8:30:e5:
85:bc:d6:d2:6a:dc:2e:9f:87:cf:15:3d:e9:66:6f:
63:7d:d2:cb:2d:bb:9f:15:24:39:48:82:04:a1:6d:
30:4a:76:a7:cc:9a:6c:f5:a6:92:fb:b7:64:38:6d:
b1:20:d5:52:09:72:36:94:6a:65:ac:48:8f:bd:85:
75:02:9c:b3:17:78:71:ad:03:8b:4a:1d:cd:4b:b7:
4c:3d:3f:71:48:a8:09:7d:8c:37:f0:5d:9a:9c:0d:
7b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:43:DF:B9:1A:27:9F:6F:FA:F1:D1:48:78:8F:2F:4F:23:27:2B:B6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/48474e36-a706-4fd9-84f5-9e5b82fe4a9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3e:7b:67:36:3f:42:41:a9:f7:ff:03:2f:7c:6a:50:0f:89:
36:f9:8b:4b:ae:e5:f1:bb:27:b2:33:c5:0a:9c:fb:42:ad:c3:
97:d4:24:e4:87:5d:12:5b:f7:74:aa:1d:13:a3:31:82:bd:d1:
51:be:5b:b1:4f:19:d7:c9:f9:8d:b8:6a:3e:6a:82:af:5c:47:
0a:66:e8:00:d8:69:66:7a:8d:e7:25:71:37:bd:88:f8:eb:8e:
b1:a0:aa:33:2b:4d:0e:35:45:84:ac:3f:49:e9:66:3c:a9:49:
a4:99:e5:53:5e:80:35:c3:82:fd:1f:59:ac:92:2c:ef:58:55:
0a:e3:fc:dd:59:94:96:31:21:f6:60:bd:49:aa:49:66:20:28:
0f:c6:69:a2:d6:a1:c5:ef:72:a9:fe:ca:a9:19:43:dd:45:78:
1f:dd:9a:02:a4:70:5a:69:9d:29:55:36:76:e0:81:42:fc:de:
75:66:4f:bd:ac:ed:15:60:a9:3d:60:9d:73:90:57:f4:8a:3c:
86:3b:a7:25:93:dc:24:ca:ac:83:f2:b8:5f:e8:8b:bb:a1:fd:
90:2d:3e:6d:bd:ee:4d:c9:ed:8b:7d:8c:26:c4:f5:5e:38:36:
be:f3:b4:96:2a:67:e1:da:f4:1d:1d:8f:78:f8:72:9e:d9:87:
1d:f2:16:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:18:28 2025 by rpki-client