Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/674ff6de-59e2-4f0b-a0b8-d03b27dd9e30.roa
File: 674ff6de-59e2-4f0b-a0b8-d03b27dd9e30.roa (raw, json)
Hash identifier: gG6Ts+Czv4S+ETfWao8qQAW+VbVZM0H9UdF07YvHRh8=
Subject key identifier: 4B:ED:DB:B3:4D:ED:70:54:28:0D:C7:E7:41:93:7D:DF:DE:FB:38:BF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4C98600079EFB7FD761249A11D27599A3BC6DCA8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/674ff6de-59e2-4f0b-a0b8-d03b27dd9e30.roa
Signing time: Sun 11 May 2025 05:18:19 +0000
ROA not before: Sun 11 May 2025 05:18:19 +0000
ROA not after: Sun 15 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:98:60:00:79:ef:b7:fd:76:12:49:a1:1d:27:59:9a:3b:c6:dc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 11 05:18:19 2025 GMT
Not After : Jun 15 23:59:59 2025 GMT
Subject: serialNumber=d3bee93859af7fff6b3e3d376eb50219e28d426949d10cae9e66fd573ca0bfdf, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:c9:f2:05:54:c4:b9:42:3e:c4:b3:cc:17:
30:01:a6:4d:83:19:a1:4e:a7:74:2a:f8:00:f5:2c:
72:74:85:e8:a9:89:a6:59:7d:f6:da:0c:df:56:3c:
03:f3:9f:2f:09:6c:3e:c6:53:50:01:b5:0f:17:87:
7f:b7:bf:74:2b:f4:33:e7:ff:93:b9:01:4f:5a:5a:
d9:09:d7:f9:b5:4e:d3:b6:d9:71:5c:b9:e4:4e:af:
c1:c8:2f:d7:80:c4:a4:56:a3:af:9c:9c:d1:57:d9:
30:18:77:7a:5e:d4:9c:21:f3:6c:aa:52:8b:61:be:
e0:dd:b1:d6:52:76:29:24:6c:74:76:80:f7:91:12:
4b:6d:57:7e:ff:18:70:f2:f2:c1:76:7b:cb:58:29:
e3:a8:37:51:61:cb:40:54:d6:92:c7:8b:b4:e9:d7:
bb:7f:0b:0f:81:71:68:c2:98:68:a9:8a:71:20:b1:
bb:a9:7c:fd:25:ab:ec:27:f3:88:b2:d9:15:71:0f:
1f:16:7a:d1:63:86:17:3a:32:f0:de:3b:bb:7b:94:
32:a3:cc:32:2a:8e:45:74:1d:44:de:65:4c:ce:3f:
b9:92:40:20:48:00:95:55:0a:fa:21:78:4b:eb:fd:
90:57:18:c2:26:d8:79:8f:fa:39:33:3a:96:07:ec:
11:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:ED:DB:B3:4D:ED:70:54:28:0D:C7:E7:41:93:7D:DF:DE:FB:38:BF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/674ff6de-59e2-4f0b-a0b8-d03b27dd9e30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:df:e6:bb:31:12:61:88:5b:a8:11:29:76:18:05:6a:7c:fc:
eb:30:c6:40:f2:8a:65:d3:1f:30:3b:e9:f6:59:c2:a9:98:76:
10:a0:de:2f:10:75:9f:2f:46:41:da:5b:07:e3:59:66:6a:8e:
85:d3:ed:dd:45:8f:eb:3f:42:45:75:3f:e9:71:e2:24:6b:a2:
d1:14:15:35:95:81:1d:da:28:51:c0:e1:c6:e3:9c:b3:ff:99:
6f:59:96:d3:56:46:15:9c:f8:5c:3c:c7:d2:6a:71:62:1e:3a:
82:8f:56:d5:49:ef:09:8c:ad:12:d7:ad:c6:82:8e:e3:fc:65:
cc:38:29:a9:2c:0c:79:75:27:db:0d:d0:b6:d5:66:59:50:71:
70:27:38:2d:01:2e:52:66:32:90:ee:a1:8e:54:80:a7:0c:78:
c4:56:7f:32:79:01:11:02:5d:b8:a5:51:cb:68:96:2f:54:9d:
6e:99:d7:68:1f:37:16:40:cd:55:51:66:98:3a:38:5e:6b:b0:
1c:2e:7e:91:c4:7e:5b:14:f5:e2:7b:41:12:07:74:36:2a:8f:
8d:47:ba:f5:db:cb:e1:42:be:a0:07:be:e8:07:39:78:f5:6e:
a0:07:b9:73:4f:e4:75:9e:7f:08:43:e3:c9:9e:06:0c:03:51:
9e:6c:6e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:17:32 2025 by rpki-client