Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4c403d66-7e3e-46d8-9841-d736273ac979.roa
File: 4c403d66-7e3e-46d8-9841-d736273ac979.roa (raw, json)
Hash identifier: bC0xfXIPmBGSeXk23tV32KafhActh5RWGqaosfD2UiQ=
Subject key identifier: 43:EE:AF:95:C1:7F:5E:4B:93:16:0D:7F:67:8B:48:F6:AA:6E:AC:5C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 650810F0D7A10B57FA480B4C23B452C8CD7FAA2C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4c403d66-7e3e-46d8-9841-d736273ac979.roa
Signing time: Fri 26 Jul 2024 00:00:00 +0000
ROA not before: Fri 26 Jul 2024 00:00:00 +0000
ROA not after: Fri 30 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:08:10:f0:d7:a1:0b:57:fa:48:0b:4c:23:b4:52:c8:cd:7f:aa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 26 00:00:00 2024 GMT
Not After : Aug 30 23:59:59 2024 GMT
Subject: serialNumber=9c72a509f94dbb282813202fc46fc917fa28b2df16895151b70263e9c612ba5c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:45:18:85:d4:6c:55:4a:49:a0:f6:f9:5f:97:
32:03:71:41:71:61:52:f5:ae:9c:76:df:60:eb:fb:
85:5a:ea:b3:02:96:ba:12:65:75:9a:3f:db:f4:7d:
d7:d9:17:48:d3:eb:10:3f:4c:23:3a:65:af:82:e9:
f5:4f:fe:11:ab:04:79:bd:aa:33:62:ba:20:66:eb:
d7:4b:64:27:a8:63:2c:ca:36:73:14:47:02:ba:00:
b6:15:9d:60:c2:fd:79:f9:ea:46:00:28:a2:4f:f4:
32:f5:8d:dd:13:8b:6d:e2:42:09:9b:e3:f4:0d:6d:
a9:ea:c1:00:d0:a6:05:1d:ad:10:57:9d:75:3f:7a:
1e:fe:09:49:d9:0c:84:6e:4d:9a:a7:20:7b:aa:60:
1d:d7:29:08:c7:15:7a:70:75:03:e6:d9:4a:92:3a:
c9:c2:f8:98:cb:ef:96:a2:3e:5f:8a:2c:d7:0f:32:
f2:fd:12:d6:6d:fe:53:84:29:33:71:be:d7:26:08:
0f:61:ad:ab:bf:47:6a:cb:73:65:0d:a2:f1:4d:af:
91:2e:60:f1:12:3f:6c:6e:98:c2:76:b6:f0:12:78:
f4:a8:65:1d:14:a3:1c:af:3f:02:34:30:ff:d4:f0:
97:76:94:a6:16:9b:27:fb:8c:d4:90:65:c7:a2:9c:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EE:AF:95:C1:7F:5E:4B:93:16:0D:7F:67:8B:48:F6:AA:6E:AC:5C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4c403d66-7e3e-46d8-9841-d736273ac979.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
83:da:13:6b:f0:a3:45:10:33:10:99:3c:ef:cc:03:22:af:8a:
69:00:3a:bd:c6:af:ef:25:be:05:34:d0:2e:21:57:4e:11:02:
76:ee:ce:63:87:a8:fd:4e:56:5c:f8:aa:30:e2:33:9d:ce:98:
ef:b0:d2:9d:35:40:c3:5a:0b:a2:dc:c8:50:cf:4b:56:25:86:
c2:d2:45:18:a8:42:8b:76:54:5e:a4:f8:57:dd:21:fc:f9:3f:
fc:c3:cf:e3:57:89:da:3e:64:16:ce:26:c7:b4:45:9c:b2:8e:
a6:8a:eb:1c:06:73:fa:b2:a1:65:92:96:36:82:94:62:a3:55:
34:c1:e4:06:6f:55:a4:09:59:cc:f8:c1:31:52:11:81:33:f5:
a7:33:00:cc:f5:61:99:3e:4d:5b:97:a3:3e:d8:35:0f:d1:a9:
21:3c:4e:61:de:56:72:17:44:5e:a1:89:63:59:83:b2:19:b4:
8c:80:1a:0f:9c:98:32:68:a1:d6:ec:a7:25:4c:40:16:79:dd:
38:17:09:bd:44:fc:99:14:3b:5c:02:28:b9:e7:db:6d:63:10:
6b:bd:74:ea:ee:cd:8e:50:b2:71:46:0c:46:fb:a8:b5:9d:f6:
08:52:a4:a1:29:8c:13:2f:75:5d:3f:b4:b5:e0:49:2d:95:48:
35:7d:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:39:25 2025 by rpki-client