Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6b6a3b8f-07d2-48c5-b8d6-76cf871a17f2.roa
File: 6b6a3b8f-07d2-48c5-b8d6-76cf871a17f2.roa (raw, json)
Hash identifier: Ka1rHpY454CI16/UZ25LWowcgoJE2I3I1ddVoyJVIPk=
Subject key identifier: F5:5E:74:68:A7:7B:94:09:CD:BF:49:ED:9A:8E:BF:04:6C:69:91:0D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 74D7BAAFB0E42F67AB5EA771E46FE086AC47F4CC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6b6a3b8f-07d2-48c5-b8d6-76cf871a17f2.roa
Signing time: Thu 10 Apr 2025 16:23:20 +0000
ROA not before: Thu 10 Apr 2025 16:23:20 +0000
ROA not after: Thu 15 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d7:ba:af:b0:e4:2f:67:ab:5e:a7:71:e4:6f:e0:86:ac:47:f4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 10 16:23:20 2025 GMT
Not After : May 15 23:59:59 2025 GMT
Subject: serialNumber=d67ddd3c19d7bbd7f4b6e03284f6985e641e06223a96cd2d93c403fdbb3270d1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c5:03:d6:2f:06:04:1e:54:ff:f0:c7:81:93:
31:8d:c9:5c:05:92:b2:bc:72:17:07:fb:2b:07:5a:
bb:04:39:a1:aa:8c:c9:bf:58:5e:d7:d1:f8:9e:c6:
4c:2a:50:4b:ac:18:99:10:6d:ba:8c:6b:0c:f0:c4:
eb:cb:eb:d7:94:04:37:81:14:d9:d0:7c:7e:d5:a4:
07:d9:64:59:59:82:f0:fd:d4:56:8f:3b:06:e3:1b:
ed:44:d9:ce:02:13:51:9c:ab:79:c8:40:0a:11:5a:
b6:22:0a:11:7b:83:b0:d5:39:c1:4a:d7:22:9a:8d:
f5:9c:5e:b8:b2:dd:c5:da:72:79:95:9f:d9:10:d3:
b5:8a:9e:f7:8f:5e:2c:97:9d:e3:77:9c:15:5d:be:
ee:14:b6:06:38:8e:35:57:ca:74:61:24:d4:18:e6:
12:93:e8:7e:99:1f:27:23:de:cc:5c:07:d3:b7:f2:
ff:68:8b:01:20:ac:54:4e:23:3a:5d:00:c2:e0:2e:
d7:e1:11:69:8d:ae:ff:78:f6:e0:39:21:10:a6:fb:
22:73:b5:ce:06:c2:90:5a:1e:c6:f4:5b:1d:dd:61:
14:b5:0f:da:68:03:6f:15:dc:d6:e0:1d:96:7b:a3:
59:7c:9f:07:8f:93:b7:5d:b9:04:70:b8:7e:fc:00:
02:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5E:74:68:A7:7B:94:09:CD:BF:49:ED:9A:8E:BF:04:6C:69:91:0D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6b6a3b8f-07d2-48c5-b8d6-76cf871a17f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
66:79:d2:48:22:f8:6c:c3:a9:e2:da:eb:ac:6b:d4:f8:9f:67:
84:22:aa:69:4c:4b:e2:fd:6a:38:0d:dd:7f:0a:2e:54:fc:a3:
7a:7a:7e:31:a4:cf:ae:30:a0:ac:4b:e0:e3:6c:11:d9:2c:2c:
ac:13:6c:f7:b2:68:c1:0b:1a:47:fd:74:18:5e:6e:50:7a:7b:
5e:53:1e:56:11:43:04:2f:65:fe:b1:20:38:a1:ae:2c:02:58:
65:ba:d6:92:c6:c9:fc:01:61:ce:41:fa:34:ee:d8:b7:6d:5e:
e3:63:10:b2:ac:a2:48:6d:1d:90:53:10:a9:5e:9f:1a:57:20:
08:a3:54:60:5e:fe:ac:af:4a:48:64:5b:09:d6:8c:61:5e:d6:
cd:33:10:e2:4d:d7:ef:ad:a8:de:5b:ad:0d:3e:fb:fc:ea:8d:
8d:c3:4e:17:06:5d:b8:49:6c:7d:c7:e4:28:00:fe:b5:c0:47:
37:d8:ce:81:00:f8:d4:a1:2c:45:f0:9c:4b:c6:82:1c:41:fc:
5c:b2:48:f2:d8:cb:8a:39:b6:94:81:e2:6b:1c:8f:b5:d9:a5:
2a:d9:8c:b9:ca:f9:9f:fb:1b:cc:36:02:73:d3:d2:6f:79:ca:
f3:a6:41:1d:15:b4:f8:b4:94:59:0c:3a:05:07:f9:0c:ef:ad:
69:14:9e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:36:11 2025 by rpki-client