Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f563c52-d93c-4d4b-b4f9-342a1fc7c900.roa
File: 7f563c52-d93c-4d4b-b4f9-342a1fc7c900.roa (raw, json)
Hash identifier: mp0DTxcMG9OWUQE23r3SgMO+pfhAsRXKM33hhDnIJQA=
Subject key identifier: 43:14:95:27:9D:F2:54:63:01:EE:9B:70:25:56:17:E6:09:04:EF:28
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 075251B72540D940E4D72BC05FD3109C6CA42922
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f563c52-d93c-4d4b-b4f9-342a1fc7c900.roa
Signing time: Sun 04 May 2025 05:03:19 +0000
ROA not before: Sun 04 May 2025 05:03:19 +0000
ROA not after: Sun 08 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:52:51:b7:25:40:d9:40:e4:d7:2b:c0:5f:d3:10:9c:6c:a4:29:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 4 05:03:19 2025 GMT
Not After : Jun 8 23:59:59 2025 GMT
Subject: serialNumber=3a22d2470a62c30e5c0a51edbd2ca95438d18c7fa67b4487c1b82e6ba41368cb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:11:f3:29:90:ac:bf:b1:ad:77:da:c2:46:
3b:f0:d2:2c:47:b1:fe:29:e2:66:5e:a2:77:06:2f:
f2:de:d0:97:b8:00:be:bd:af:d2:11:54:80:fd:02:
71:6f:38:c0:97:1b:62:0f:ba:6e:13:cd:a8:c8:be:
3a:df:e3:af:07:46:6c:2a:aa:c2:85:bb:a3:fc:13:
ba:4f:ea:06:94:f6:10:19:a5:5e:36:51:36:99:86:
3c:be:6e:3c:f9:46:b5:8e:2d:4f:6f:57:4e:01:6d:
a5:0b:79:b0:32:f9:6d:0f:c4:7a:ec:00:b2:4f:64:
fa:5b:2a:d9:32:36:48:78:82:00:cf:b7:82:ef:5d:
fc:5f:b0:6d:86:76:88:6c:ad:ec:59:cc:c0:9e:1e:
36:1e:0b:16:d5:80:74:95:52:ba:01:a0:8c:bd:fe:
73:4e:d4:5a:3b:af:82:61:18:db:06:37:95:5f:55:
19:5a:74:8d:0b:b3:3b:82:25:ce:fe:1a:7c:59:b4:
b0:57:25:f5:71:fe:29:75:82:1b:24:43:ee:48:bd:
2d:6e:6d:b1:56:ad:d8:3f:c3:ce:cf:72:1b:eb:f8:
90:56:01:a0:20:33:61:d5:fa:23:da:30:96:99:77:
5b:9f:ad:9d:ef:eb:7e:f9:66:ba:93:ee:a4:03:43:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:14:95:27:9D:F2:54:63:01:EE:9B:70:25:56:17:E6:09:04:EF:28
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f563c52-d93c-4d4b-b4f9-342a1fc7c900.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:83:cc:70:2f:cf:5a:02:75:a6:cb:d4:2a:7d:6b:52:49:4f:
39:5b:8b:a0:be:9a:9d:ad:93:84:2f:e5:d6:f8:53:f3:ef:6b:
d6:8a:03:db:52:59:39:c3:da:16:c0:67:df:a1:c4:4d:4e:64:
89:ac:f6:4d:cd:8e:8f:ab:61:9e:e6:dd:a8:86:80:69:3f:72:
86:f2:73:ba:04:a9:ef:5a:65:c4:29:ec:55:38:e0:7f:29:2c:
f0:7b:9d:2f:6d:51:f9:33:b3:a7:3f:fa:d7:af:01:ef:ad:de:
e5:cc:3a:04:79:de:20:32:15:1b:a7:6a:b5:1b:52:ed:3d:74:
4d:50:37:67:96:79:cc:06:9e:9c:a7:b3:15:72:df:b5:26:cf:
5e:65:ae:73:af:f4:01:d6:74:47:89:00:ff:80:64:dd:26:03:
24:04:b8:15:cf:0c:3f:3d:d9:88:48:b2:37:82:f4:16:dd:40:
05:4c:80:d7:26:8b:1d:95:14:af:38:84:84:d1:c3:06:7f:15:
49:51:e8:d6:9a:c9:38:a6:72:a5:4b:56:5a:e3:54:7e:95:9a:
34:79:8d:d9:40:c7:e9:e4:61:80:d5:fd:e2:b4:d4:fb:1e:a4:
b2:e3:fb:ac:fa:90:0f:bd:d7:43:ed:df:db:b3:27:fd:8d:03:
7c:7b:20:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:27:13 2025 by rpki-client