Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/593fc67e-53fe-48e0-96f4-fc419d215de9.roa
File: 593fc67e-53fe-48e0-96f4-fc419d215de9.roa (raw, json)
Hash identifier: T/W7XWqz96dQJdffLmzPeIzjeTxw206lAf5mbPx2kZM=
Subject key identifier: F5:99:D3:ED:EB:15:EB:65:72:D3:58:F5:95:C3:30:E5:77:48:BD:62
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1D1EA31540F01EFA9CE0876A94ABCE6215110CAB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/593fc67e-53fe-48e0-96f4-fc419d215de9.roa
Signing time: Fri 29 Sep 2023 00:00:00 +0000
ROA not before: Fri 29 Sep 2023 00:00:00 +0000
ROA not after: Fri 03 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:1e:a3:15:40:f0:1e:fa:9c:e0:87:6a:94:ab:ce:62:15:11:0c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 29 00:00:00 2023 GMT
Not After : Nov 3 23:59:59 2023 GMT
Subject: serialNumber=2dc4aa5648cffc940827b0d916ef949227133220489b7e7669f1eafb2448260f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:97:97:15:fb:57:91:42:43:80:d4:77:bd:
a1:0c:b1:d4:b4:c6:3f:b7:e7:34:dd:22:29:ba:04:
01:d4:6a:69:f9:f6:b0:bd:bd:35:fa:44:60:6d:e9:
53:d2:4c:ae:d1:2e:3d:fb:d4:4b:47:4e:34:3a:f7:
94:e4:fc:6c:93:98:c9:b4:bb:7c:3a:5e:8b:64:19:
b3:d3:b8:fc:df:00:df:0f:d1:56:81:32:3f:6d:a9:
3d:41:88:3e:bc:23:c6:ca:f3:9a:e9:83:0c:cf:6c:
e0:1d:51:c2:45:c6:a3:b3:5c:c5:19:4c:9c:ea:7b:
14:09:a6:d6:7c:fd:08:68:ac:0d:06:c0:92:11:67:
ee:6d:ae:38:09:35:4d:da:fb:fb:7e:20:50:40:d8:
d9:68:e9:03:b5:69:b9:90:92:d5:4d:45:53:1c:c7:
93:45:18:36:ec:14:e4:85:a8:58:11:b2:c0:bf:cd:
80:4d:0d:c6:c4:7e:06:7b:99:17:00:0a:96:2f:80:
0a:1f:ee:45:95:56:69:e6:19:4c:ed:32:49:5e:80:
7f:fa:06:d2:59:96:a0:fe:34:53:c6:1e:a9:56:1a:
a6:77:9a:c6:2b:e1:74:e6:a2:13:dc:89:3d:56:5f:
41:d8:50:65:f0:f9:23:2f:d8:17:e5:31:39:51:1c:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:99:D3:ED:EB:15:EB:65:72:D3:58:F5:95:C3:30:E5:77:48:BD:62
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/593fc67e-53fe-48e0-96f4-fc419d215de9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:db:14:70:67:8e:7e:d8:6d:f4:d3:04:e1:ff:f8:3b:34:df:
73:20:33:3e:b5:97:1a:ab:6e:9e:36:5d:e7:20:94:f3:e4:ac:
b6:83:e4:24:3d:a4:78:ec:51:cb:42:2d:5b:0b:1d:c0:2d:a6:
fe:d7:49:31:56:e7:9d:32:ab:ca:25:57:eb:88:79:cf:92:e3:
8e:b4:df:35:b1:05:05:59:b5:f3:a7:15:17:81:71:81:a3:8e:
01:1a:b4:7c:f4:87:55:04:a8:35:99:9c:b9:14:3e:d8:04:d0:
7e:99:9e:f6:fd:ae:16:3c:0b:7e:c8:44:19:11:07:8c:6f:e1:
a7:e1:d5:1e:8c:9d:a4:26:8f:c8:cc:f9:3e:1c:e5:cc:58:62:
58:80:c7:d9:31:ed:67:71:71:b4:6b:83:3c:b0:7c:16:62:62:
78:44:71:bf:8a:48:fc:7a:42:2d:97:69:50:e4:5b:db:5c:60:
a1:de:ed:a1:2f:21:13:50:64:79:d3:8f:9a:d6:b8:cc:98:41:
d2:84:98:3e:1b:da:32:78:65:be:b6:b1:aa:06:28:80:1e:cc:
f0:21:f9:50:fc:c3:16:8d:65:31:8a:6d:68:91:92:a0:73:5c:
16:6c:18:86:c2:10:be:0a:45:98:19:81:54:39:13:f1:5e:23:
97:aa:5b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:04:37 2025 by rpki-client