Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4ec1f284-51dc-4b64-bbb6-b5f213724f55.roa
File: 4ec1f284-51dc-4b64-bbb6-b5f213724f55.roa (raw, json)
Hash identifier: hx9vBdLDAhtOoOqZxu7cSkttD7f8CGyntkYMeUr3BDQ=
Subject key identifier: 40:C1:1E:6A:38:C4:4C:FB:BB:FA:B8:F4:46:CF:0A:08:F7:15:48:D9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4BA6BDE9F639F5A32D8D11BF43256E48B0B2FAB9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4ec1f284-51dc-4b64-bbb6-b5f213724f55.roa
Signing time: Thu 03 Oct 2024 00:00:00 +0000
ROA not before: Thu 03 Oct 2024 00:00:00 +0000
ROA not after: Thu 07 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a6:bd:e9:f6:39:f5:a3:2d:8d:11:bf:43:25:6e:48:b0:b2:fa:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 3 00:00:00 2024 GMT
Not After : Nov 7 23:59:59 2024 GMT
Subject: serialNumber=ae8713c0cc3ffeb48c9a859913276c1794879ca7965a833c7a00ef2bb0c0552f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:a9:69:30:60:22:8d:f2:f9:aa:aa:82:f2:
f0:6f:ec:98:de:e9:2e:0d:91:3d:74:3b:f4:e6:97:
07:f1:df:a4:3f:28:d1:18:fd:c6:09:b2:5a:97:3b:
de:0c:cc:96:4e:74:5a:23:9c:8c:c6:22:74:4b:76:
8b:c6:99:b1:99:50:04:d2:75:f1:60:35:dc:f8:cc:
12:0e:d9:a3:a1:cd:bf:b1:17:b5:7d:1f:16:b2:af:
ed:d5:ca:61:3f:4c:df:bc:6a:f6:f8:cf:48:54:97:
88:40:2e:6e:38:32:dd:05:e0:21:21:87:92:a8:7f:
ff:54:3e:d9:20:41:34:47:b9:31:47:cd:fe:a8:09:
82:59:6b:2e:f3:48:22:c0:d0:75:15:12:a7:09:fb:
8e:4c:3b:c9:46:85:f2:51:60:48:05:44:8d:61:12:
56:07:49:c4:f1:31:e3:53:7d:1d:bf:84:36:52:14:
2a:c1:c0:ba:dc:9f:ca:d3:51:fa:e2:9d:31:b2:48:
43:1a:63:dc:13:0e:85:12:8b:c8:ad:c9:1e:a5:7d:
39:19:97:27:e9:e4:3e:66:a9:d1:67:f2:ec:d7:d8:
e5:14:89:54:01:be:dc:98:54:4e:9f:0c:7a:c0:78:
f0:76:ce:c9:fe:cf:8c:10:52:02:45:ad:33:67:96:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C1:1E:6A:38:C4:4C:FB:BB:FA:B8:F4:46:CF:0A:08:F7:15:48:D9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4ec1f284-51dc-4b64-bbb6-b5f213724f55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:45:d7:5a:9d:a4:9e:ce:8b:89:46:56:77:50:a1:98:07:a1:
0f:99:5f:7b:bb:b0:ee:b3:a6:ba:a6:2a:9d:18:04:74:10:c6:
a1:d7:50:12:18:ae:3e:3f:fb:81:8f:43:68:76:8f:06:73:0a:
dd:b4:fe:80:7b:01:a5:a1:67:13:fc:e1:13:f4:f1:33:fc:93:
53:9e:c1:d3:c2:9d:90:ee:75:71:7a:98:0a:86:51:2f:ea:be:
ef:a4:59:d2:64:19:26:e2:49:08:c7:db:cf:89:22:e1:28:b0:
b2:f6:e5:2e:0c:e7:99:fa:25:fb:d3:04:4e:f1:cd:5f:ee:ea:
38:37:6f:d6:7d:8b:1e:44:a8:ad:a2:b4:eb:bf:1b:ee:7b:98:
61:ee:e2:db:46:d2:4b:c1:ce:56:83:d4:5b:1c:9e:72:5f:c7:
69:e8:dc:08:16:9c:94:1e:7d:b2:87:59:bf:49:28:ef:7a:52:
11:e9:07:d5:3a:1e:1d:31:29:e2:e3:1c:57:ba:f3:41:7f:ef:
8a:e1:48:a4:cb:b6:e8:31:43:d5:b4:dc:6a:6a:1e:27:5b:42:
35:b8:96:14:9e:20:b3:4c:cd:74:78:eb:bd:30:f7:f0:61:26:
6a:ff:ba:d4:b2:7f:65:84:61:60:78:18:a9:64:ec:fb:10:9a:
4e:d6:ff:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:00:18 2025 by rpki-client