Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4b40b6c7-82a9-4f69-bbbf-36f1e9383f3d.roa
File: 4b40b6c7-82a9-4f69-bbbf-36f1e9383f3d.roa (raw, json)
Hash identifier: ZDntZ5+zyJkUfsAocGTEZjhYNbTNbzbw660/s15FYFc=
Subject key identifier: 77:49:B9:E6:31:30:23:4A:A1:07:6C:15:F1:47:CC:E0:DD:83:83:77
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 55D474F9AF6DA07A887E5958CBA8B141DA3D2210
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4b40b6c7-82a9-4f69-bbbf-36f1e9383f3d.roa
Signing time: Wed 02 Aug 2023 00:00:00 +0000
ROA not before: Wed 02 Aug 2023 00:00:00 +0000
ROA not after: Wed 06 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d4:74:f9:af:6d:a0:7a:88:7e:59:58:cb:a8:b1:41:da:3d:22:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 2 00:00:00 2023 GMT
Not After : Sep 6 23:59:59 2023 GMT
Subject: serialNumber=d71d1ea037d47bcdf6089bec0bf4aea3b6d8cd3b591dcb9b3005668e5b92a878, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:6b:0c:bf:77:af:57:4f:1d:b8:ca:c7:7e:
cb:92:ff:8b:08:a2:88:7a:f7:73:f7:4b:9e:c1:1f:
17:02:fe:d1:23:49:dd:63:87:ae:f0:6d:ef:e9:59:
44:26:6e:82:16:9e:7b:46:a7:a3:a8:b4:b4:2f:7e:
9d:38:e7:38:2e:60:0a:37:c0:2b:51:c4:46:81:42:
87:d0:0c:b9:75:1c:92:22:e5:08:9d:07:25:f1:ba:
7d:c6:a7:3b:6f:07:28:83:c7:86:47:a4:74:04:27:
34:1b:87:1e:fa:39:5c:35:f7:cb:af:2a:15:a7:5e:
e4:e4:25:da:d6:1c:26:39:6c:97:5d:3d:3c:0b:a8:
77:c4:72:75:34:0e:65:20:b9:68:f8:16:92:43:03:
6f:9a:ac:65:e0:7e:57:82:66:e1:8a:43:99:7e:b9:
68:0c:15:9c:08:22:3a:1e:66:db:4f:c6:26:a3:08:
cc:08:ec:13:61:07:68:de:f3:3f:e5:8e:05:77:6c:
d1:b8:32:5b:dc:05:72:2e:c8:7f:2f:19:6b:97:8c:
69:a2:16:19:82:57:18:44:8c:d9:fe:70:7c:02:da:
bf:de:34:25:3d:43:a3:58:97:41:cd:9b:e5:72:5a:
90:e4:36:d7:77:9b:f7:00:af:79:76:00:72:e5:1b:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:49:B9:E6:31:30:23:4A:A1:07:6C:15:F1:47:CC:E0:DD:83:83:77
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4b40b6c7-82a9-4f69-bbbf-36f1e9383f3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
04:42:c6:31:d2:4e:1f:07:1f:2d:3b:71:3a:01:43:73:90:d5:
5b:6c:83:7f:fb:8f:2a:05:15:34:4a:9b:0e:49:c2:a5:3d:17:
94:d3:8c:74:34:bd:bc:df:a4:01:c0:8c:10:f7:33:08:ca:1a:
58:12:35:da:d2:d9:66:0c:87:60:12:43:37:46:d2:6d:94:3e:
ed:91:fc:94:41:1a:d7:b0:43:4c:ad:1a:79:4f:e5:a9:12:3b:
8a:9a:29:21:b8:9c:a9:7f:a6:b4:e0:b2:02:d2:5b:1f:28:95:
37:9d:3e:aa:bc:62:5f:1f:ae:19:1a:c9:74:ed:6d:e8:a9:37:
ff:13:f7:75:f5:43:76:d9:08:96:1c:27:9b:82:cb:b6:10:5d:
03:1b:c5:ff:8d:68:14:80:fa:5f:f0:2e:d0:55:2c:cd:ad:55:
71:65:73:f4:81:92:1d:13:cd:5f:6d:b6:88:e7:f3:11:49:e3:
dc:79:bf:af:f5:f2:9b:1e:dd:83:f0:29:96:f0:f6:d5:83:88:
c5:5f:a2:92:47:ca:bb:f4:62:3e:2d:f9:a9:88:cb:8a:22:aa:
a5:1e:d0:77:2c:f3:71:9f:ef:b7:73:6f:16:24:7d:15:2c:1c:
18:0f:60:75:48:8c:da:10:bf:4a:39:17:94:b6:e8:8a:35:3f:
db:a1:55:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:20:09 2025 by rpki-client