Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6fc57f2a-33f1-48fb-992a-9af97f124ae3.roa
File: 6fc57f2a-33f1-48fb-992a-9af97f124ae3.roa (raw, json)
Hash identifier: /2UfQ0DtDvOf0MIow8q2++qWXFZSiIrdc3kMWKjC81o=
Subject key identifier: BA:FD:77:65:E9:01:34:0E:AA:FB:5B:29:14:36:9B:CE:DC:C9:3C:7D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 66A7711B7C914D07C0865486095F2F7B2880A81D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6fc57f2a-33f1-48fb-992a-9af97f124ae3.roa
Signing time: Mon 06 Nov 2023 00:00:00 +0000
ROA not before: Mon 06 Nov 2023 00:00:00 +0000
ROA not after: Mon 11 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a7:71:1b:7c:91:4d:07:c0:86:54:86:09:5f:2f:7b:28:80:a8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 6 00:00:00 2023 GMT
Not After : Dec 11 23:59:59 2023 GMT
Subject: serialNumber=13f743520f86e3a40bcb68d67d2deed2e71b4cc77d26ca744f251ca67aa19dbe, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:e6:e0:a4:b7:cc:d9:a2:e5:97:20:c8:cc:
3f:27:12:00:79:8e:ac:3f:6d:d2:f3:1a:8e:3f:60:
1b:07:91:64:01:de:1c:92:a4:8e:1c:e3:8d:1a:87:
71:1c:88:64:ad:a3:c1:c3:0f:b5:ad:77:de:fd:be:
5d:b6:cc:ac:cc:7d:b5:de:46:9d:d7:67:f5:96:b6:
62:d2:d8:47:7c:71:16:cc:99:9e:85:25:a6:ee:cb:
f8:af:ef:6c:37:9b:32:26:3f:d9:4a:f1:46:ed:2c:
20:52:97:ec:3a:ca:12:2a:a7:07:fe:86:45:40:b3:
25:de:df:a0:eb:a8:ce:be:0b:22:f0:41:da:5c:58:
b1:24:64:51:ca:e8:db:c0:a4:fa:37:cd:e3:62:65:
bc:42:9b:d9:8d:ee:5e:9e:34:e5:85:24:8f:d1:81:
ed:e7:62:2f:23:ef:14:f7:2f:0d:2c:83:6d:69:91:
44:de:ff:cc:32:27:55:06:41:79:85:df:f0:68:7e:
9f:78:ad:6b:12:0d:94:91:d8:a0:2a:08:54:79:a3:
37:7d:cd:37:1b:0d:1c:b0:e8:a4:85:1e:de:56:3b:
59:b7:e1:8c:6f:06:9b:df:2d:ce:89:e0:85:be:bb:
6e:1b:cd:03:53:b8:51:e1:e2:9a:98:82:56:ed:47:
8d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FD:77:65:E9:01:34:0E:AA:FB:5B:29:14:36:9B:CE:DC:C9:3C:7D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6fc57f2a-33f1-48fb-992a-9af97f124ae3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
85:31:16:25:46:dc:11:07:47:66:97:6f:96:ac:66:ba:89:ab:
6a:a5:96:23:76:88:90:ea:2b:75:04:7c:f6:dc:d9:b6:1a:63:
1a:8a:5d:4d:16:bf:e0:30:f8:e9:53:2f:95:fb:db:4e:b4:61:
12:4b:a6:83:b9:91:77:54:6a:d9:b6:1f:3d:43:61:1d:c8:25:
ec:5f:0b:46:65:3c:72:98:a1:3c:08:c0:c2:16:f3:b6:ad:08:
01:f5:4f:ea:3e:fe:d0:3c:b5:17:25:3b:b4:7e:9a:2e:66:d5:
ec:25:b1:4f:19:66:98:64:0d:28:6c:97:50:52:07:96:31:56:
c1:98:db:54:0f:2a:49:74:9e:4b:66:8a:db:97:40:77:3a:2f:
dd:f9:4e:24:0e:63:7b:9b:74:6d:56:71:e0:c3:29:83:61:bc:
b7:25:6d:41:a2:d2:49:f3:17:35:4f:eb:5f:e3:64:5b:d0:a1:
7c:03:df:1d:2b:14:a6:f4:46:4c:39:fe:0c:2d:74:d2:a3:3a:
59:08:9b:92:5e:87:1e:07:a6:b4:fb:ed:86:da:bc:53:60:81:
69:04:c7:f8:d9:2c:37:eb:39:b5:5c:93:c0:c3:7b:d3:0b:84:
74:7a:f9:6e:d7:06:d9:d7:81:bb:e8:ba:b0:88:e1:19:76:96:
83:0a:b3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:41:15 2025 by rpki-client