Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7889314a-dc7a-4f44-b0b6-ab3f6e383f28.roa
File: 7889314a-dc7a-4f44-b0b6-ab3f6e383f28.roa (raw, json)
Hash identifier: lg6LQtWPv7eRlxREwuscQEz0rpUmxLSzk+QDZwwFclM=
Subject key identifier: EF:10:81:A5:6A:39:09:E1:BB:BB:13:5F:CD:38:82:B2:B7:1E:7F:94
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4EE6632E8041D2436DDAE792F4A729188180A389
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7889314a-dc7a-4f44-b0b6-ab3f6e383f28.roa
Signing time: Sat 25 Nov 2023 00:00:00 +0000
ROA not before: Sat 25 Nov 2023 00:00:00 +0000
ROA not after: Sat 30 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e6:63:2e:80:41:d2:43:6d:da:e7:92:f4:a7:29:18:81:80:a3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 25 00:00:00 2023 GMT
Not After : Dec 30 23:59:59 2023 GMT
Subject: serialNumber=414e72c96f31bef1d2517d7b3b9ba3f2b8bb1a67815465edad30a101c79baa0d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:14:5e:9a:bf:c7:82:83:b4:0b:ba:20:d0:
b5:4e:41:0c:69:cf:28:de:69:71:46:a2:49:84:31:
38:34:17:a4:f5:82:e1:cc:f3:28:b0:77:65:0d:be:
5c:e2:7a:f0:83:c2:46:72:92:8d:a4:e0:cb:aa:b9:
6c:ad:fe:55:15:cd:67:8d:6c:a8:47:79:f4:8a:0d:
2a:e7:1c:db:c1:47:53:6b:94:9f:c8:91:1f:64:a8:
74:60:bf:55:85:98:1b:25:a9:00:06:1a:ce:7a:7c:
da:bc:48:f4:6c:33:b4:97:68:15:5a:0f:1f:cb:63:
d8:3a:14:34:34:fd:c6:7d:cc:56:e0:66:e9:8c:be:
3a:b9:b5:2b:70:a9:0b:7b:a8:ba:88:72:71:53:ef:
33:a9:ab:a6:f8:79:07:0b:1d:a2:9b:ea:5b:64:bc:
88:9a:2f:8c:97:94:f2:4c:24:ff:f2:ba:d5:1b:50:
26:10:ae:ab:6a:4d:db:e8:73:ca:e9:91:74:4e:2e:
69:ed:17:e5:ba:8a:f1:ea:cc:ad:77:1a:9b:46:b7:
fd:a5:cd:f9:8b:c5:ea:f5:96:d3:48:2e:99:14:ea:
3f:17:cb:50:68:28:9d:2e:b0:b1:4a:cf:41:de:dd:
1b:a6:41:61:40:48:ca:15:72:6f:76:05:cd:b3:68:
42:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:10:81:A5:6A:39:09:E1:BB:BB:13:5F:CD:38:82:B2:B7:1E:7F:94
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7889314a-dc7a-4f44-b0b6-ab3f6e383f28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
96:7e:62:16:da:74:13:07:92:11:88:c5:48:12:f5:10:4f:b4:
f9:ec:01:8c:2e:5d:dc:e4:e6:be:6c:22:57:7e:54:bb:e1:4e:
8e:fe:ea:fa:54:63:a8:4e:b7:c2:6a:8a:5f:e7:4c:19:b8:4d:
9c:49:1e:24:c9:58:ae:2b:56:ce:b4:46:26:64:2c:07:e8:90:
9c:b1:0d:a7:d4:31:7d:25:34:12:9d:d2:c9:0b:3f:18:74:6a:
16:b3:c3:fb:57:53:a7:42:8d:9d:fe:53:2d:1e:d7:2a:a6:42:
b0:c3:ea:8d:2f:a4:50:df:f4:ca:23:de:7b:94:88:5a:90:fc:
93:92:25:6e:1d:c6:3f:44:c9:7e:90:47:28:db:8c:b3:5e:c4:
77:48:b1:32:9f:cb:78:6c:ea:3a:f0:bd:c2:7c:c3:7f:4e:d1:
b8:98:d5:32:dd:9d:0f:94:3d:38:38:52:78:7e:41:2e:1c:4e:
48:29:ce:9d:f3:8f:fe:b8:ba:7b:4a:89:3a:9f:44:f1:66:ef:
66:b7:49:28:64:e5:cb:2c:94:38:8f:27:b0:dd:8c:a1:4e:45:
ab:f9:76:ce:07:24:4b:fb:90:8b:66:4a:f4:95:96:8b:2a:5a:
8a:59:70:3f:e1:10:76:a7:2b:b7:46:6d:a3:af:88:80:ba:99:
c4:ef:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:06:40 2025 by rpki-client