Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/73be840d-ea50-4124-8551-03a47f3d0758.roa
File: 73be840d-ea50-4124-8551-03a47f3d0758.roa (raw, json)
Hash identifier: LNhn3Ti/cYqKuwmO3G5h6rfCfLZ9W+5oMNbxM55e/gA=
Subject key identifier: 2E:DE:29:FA:7A:3B:85:93:CF:AD:6D:DD:3C:0F:EE:C7:A5:F4:D8:3F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1D30443313B79528593B8DAB95B7D92E58206E1D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/73be840d-ea50-4124-8551-03a47f3d0758.roa
Signing time: Tue 27 Aug 2024 00:00:00 +0000
ROA not before: Tue 27 Aug 2024 00:00:00 +0000
ROA not after: Tue 01 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:30:44:33:13:b7:95:28:59:3b:8d:ab:95:b7:d9:2e:58:20:6e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 27 00:00:00 2024 GMT
Not After : Oct 1 23:59:59 2024 GMT
Subject: serialNumber=5b8899574c913426df2cae87e1e37dd33ace03747eb538582a48df618bd2a9f1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:92:36:c5:75:98:dd:6b:78:fd:7b:db:dd:
d8:d9:f2:28:b6:dd:85:29:03:03:33:75:90:a7:cb:
1e:14:44:d9:c6:8a:32:59:04:71:24:74:eb:b5:7e:
0e:5b:3a:f7:71:dc:f8:b4:88:c2:d3:78:85:2b:ef:
a0:71:67:f7:f2:9e:71:1f:33:ed:2b:3b:3b:ca:f1:
f9:15:8a:a9:1c:a4:84:28:e2:db:f7:76:68:94:a3:
bb:45:61:80:fe:5b:c5:45:e1:40:f1:84:69:e5:3b:
fe:5d:df:d3:d4:6c:ad:55:62:42:47:44:3d:cd:c1:
c3:a7:d2:af:1a:91:21:8b:b1:0d:fc:0c:6f:ef:0e:
d6:78:c2:ee:04:2a:73:6f:d0:62:35:28:ba:6b:1b:
70:eb:52:c5:9c:20:c5:a5:67:fc:2a:24:54:27:c4:
5e:8a:2a:7e:d5:c5:97:3f:78:5d:b2:26:01:2f:64:
47:4d:0c:fe:d6:fd:33:80:b1:e1:c2:78:2f:89:0d:
47:7d:28:37:28:1d:ae:9f:54:a7:3e:ec:ec:f7:34:
e1:5c:38:ea:68:1d:1e:06:5c:a2:f6:d7:a6:71:f1:
5b:a8:fb:f8:eb:ee:7c:d7:a1:82:4c:d4:3b:2d:57:
ee:98:af:34:52:97:71:36:5c:33:f2:bd:70:ca:d3:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DE:29:FA:7A:3B:85:93:CF:AD:6D:DD:3C:0F:EE:C7:A5:F4:D8:3F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/73be840d-ea50-4124-8551-03a47f3d0758.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:50:0e:93:c5:fc:21:76:fd:04:31:01:58:aa:45:7d:65:40:
ef:7e:b7:6b:a3:c8:0a:a0:dc:05:0e:13:62:48:d5:70:9a:a7:
9d:d5:34:cc:e8:b0:fa:b8:de:f6:d1:c6:78:be:58:d6:0a:c3:
97:be:c7:01:7f:33:62:d7:5f:de:f0:3d:98:2b:9a:6f:81:71:
30:ed:54:13:81:22:e2:f9:01:01:2e:27:84:95:38:5a:23:06:
41:a9:b9:d3:93:9b:a3:65:66:cd:ac:25:f3:e8:3f:dc:b4:ef:
5a:c1:5b:c9:5a:56:41:cb:6a:19:eb:3e:fa:87:d0:67:05:41:
8a:5f:0a:08:4d:68:a9:c9:b6:50:0a:63:84:1c:e6:80:47:e0:
0f:d7:cb:2a:a6:5c:8f:a7:c9:1e:eb:a7:bb:8b:01:4f:63:82:
11:8d:9f:30:6c:37:e6:4e:2d:da:c8:bd:91:7b:34:a9:6f:ea:
d7:8f:79:37:08:64:82:24:dd:36:37:dd:87:4b:9d:a8:f8:e1:
5b:1e:eb:20:1d:5f:47:46:08:79:a9:12:93:12:4c:2f:9b:87:
42:dc:20:01:99:95:ac:e1:af:15:90:20:ab:0d:32:01:23:c0:
9d:43:fa:60:c0:0d:c9:d8:a5:f8:8a:6c:42:e2:07:8b:ab:1c:
1f:f0:6a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:29:55 2025 by rpki-client