Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6629c524-63ee-426e-a780-60a0b2ecbcf7.roa
File: 6629c524-63ee-426e-a780-60a0b2ecbcf7.roa (raw, json)
Hash identifier: meQz1O+MN2kSll/WwniAMMyYjbn7tcLFLSi1u3uPSNQ=
Subject key identifier: 4C:69:4B:DF:C8:22:A5:7E:E3:C0:8D:7C:22:15:E3:00:72:13:28:36
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3C77ED8ED103AFE509952EFEB84DA6621163FD89
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6629c524-63ee-426e-a780-60a0b2ecbcf7.roa
Signing time: Fri 27 Oct 2023 00:00:00 +0000
ROA not before: Fri 27 Oct 2023 00:00:00 +0000
ROA not after: Fri 01 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:77:ed:8e:d1:03:af:e5:09:95:2e:fe:b8:4d:a6:62:11:63:fd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 27 00:00:00 2023 GMT
Not After : Dec 1 23:59:59 2023 GMT
Subject: serialNumber=0a65d13d788e72a64246d71456e7f033403b1653c79e2fd2af934e8f998bda36, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:9a:93:ab:a9:61:a6:69:8d:ed:41:a2:2e:
0f:cd:9d:97:d8:72:c8:40:1b:58:18:f6:d1:07:ef:
c1:db:77:22:9d:34:04:3f:a1:f5:0b:bd:c1:58:cc:
97:f3:25:90:35:eb:fb:c4:59:c1:42:c5:0d:17:c9:
10:fb:24:4f:22:a0:ac:e8:01:f2:00:79:6e:5d:7a:
93:d5:ae:cb:71:55:87:bb:ed:a2:57:6e:82:c7:a2:
a6:6d:12:6a:83:94:75:b2:c4:2d:ef:bb:6b:e4:8b:
68:36:2b:1d:12:3b:5c:6c:c6:46:50:5e:4a:8b:7a:
0c:81:81:57:c1:40:a4:cd:f6:f9:43:17:d2:82:2b:
7a:1e:d0:41:0e:60:a8:17:7c:76:a6:0d:81:94:0e:
13:0f:23:a2:e7:64:ab:78:af:d4:f2:72:c0:f5:6b:
73:3a:92:11:96:62:00:45:36:1a:46:91:47:a6:0e:
99:fe:c5:fb:05:ef:b1:8f:64:fc:e9:30:b2:9b:bd:
d8:ad:70:b1:98:8a:8d:9e:e4:a9:38:a9:45:6e:00:
24:39:3e:ec:0a:19:35:ee:99:a5:46:55:37:3b:d3:
02:5a:84:8e:87:57:10:22:3d:2c:5b:25:74:3d:14:
62:51:08:2d:26:67:51:63:48:4d:7e:fb:5d:29:54:
dc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:69:4B:DF:C8:22:A5:7E:E3:C0:8D:7C:22:15:E3:00:72:13:28:36
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6629c524-63ee-426e-a780-60a0b2ecbcf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:68:e6:f0:f0:96:bd:8a:3d:2a:4a:23:54:c2:75:b4:34:84:
21:ab:0c:a7:77:4c:fc:3f:a5:f1:47:ef:10:b2:61:d3:6a:6f:
01:22:f7:7b:a6:40:95:0c:f1:50:43:0c:70:7c:e5:77:2a:3c:
eb:55:96:62:fb:9a:6b:3e:27:1a:66:9e:61:66:e7:08:82:0d:
2f:b0:11:a5:0d:8c:c8:dc:35:54:a1:d4:22:92:1f:90:5d:52:
2f:82:08:76:00:a5:cd:67:1a:81:ca:52:ce:5c:73:eb:68:fe:
0a:5a:23:6d:36:57:bd:dc:83:b0:47:4c:32:8e:dc:dd:f2:4f:
6d:8c:b9:b1:49:f0:8f:54:89:b0:9d:75:d4:9f:ad:7f:2c:ab:
b1:93:e3:fb:31:ff:54:6b:70:bc:6b:32:32:63:38:0f:bd:c3:
42:fb:b9:f5:20:7e:17:3d:0e:1e:2f:d5:38:39:d6:c3:4a:5d:
be:a9:0c:87:92:20:92:3f:d6:ed:12:7b:4e:50:89:53:82:cd:
68:7b:df:9d:42:2d:79:f7:5b:4d:8c:ae:52:b5:56:2d:ec:2f:
01:d0:19:72:87:68:8d:f2:90:1d:4d:85:af:02:8d:de:99:9c:
31:49:6c:d6:dc:27:ce:42:f1:35:31:e1:c2:09:d6:61:ce:75:
0d:dc:74:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:26:17 2025 by rpki-client