Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81e5611b-fccf-45a4-a2ef-3aee22749790.roa
File: 81e5611b-fccf-45a4-a2ef-3aee22749790.roa (raw, json)
Hash identifier: jtVQXst0Z453wFME0RGAJyTzATrtk2kIRvqQfClW2Nk=
Subject key identifier: FD:AA:25:C7:BF:57:BD:5C:C2:A6:92:4E:ED:37:04:51:E4:BD:14:4D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 34354122F8451C3D55B065682213063952A9A110
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81e5611b-fccf-45a4-a2ef-3aee22749790.roa
Signing time: Sat 08 Feb 2025 00:00:00 +0000
ROA not before: Sat 08 Feb 2025 00:00:00 +0000
ROA not after: Sat 15 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:35:41:22:f8:45:1c:3d:55:b0:65:68:22:13:06:39:52:a9:a1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 8 00:00:00 2025 GMT
Not After : Mar 15 23:59:59 2025 GMT
Subject: serialNumber=0812d34df2053cfa0df658c7c98a07b5d403e3460ae2ec427408255fd99b5e38, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:cd:e9:05:5c:da:a2:9e:80:59:1a:08:59:
91:29:aa:e1:38:89:69:af:af:e7:e8:ea:87:7c:6e:
c9:54:22:fe:60:b8:89:ce:88:6d:cf:f4:33:3e:00:
78:c3:a3:a7:fe:56:bd:60:f4:1e:44:89:3d:c8:80:
7f:f9:b1:6b:a1:77:8d:78:4f:76:ec:1a:ff:2b:98:
ba:21:a1:9d:a5:ed:b9:1d:dc:9b:a0:7a:27:69:26:
76:72:de:ab:ed:17:44:41:dd:2e:b7:b6:0c:11:4e:
40:90:c6:52:f0:d0:e8:18:5c:5d:6c:8a:d6:2e:84:
bd:fa:a5:b9:3b:82:be:76:40:4d:15:cd:f7:12:d3:
a0:99:60:cb:43:b9:cd:7e:a0:ac:e4:be:d4:ed:df:
ce:74:a1:e5:f8:af:de:09:0d:0c:4a:6d:a2:42:d4:
b1:ad:31:f0:d5:a4:b1:26:62:4d:4b:71:a9:22:2e:
45:82:e3:ba:64:7a:f7:46:4b:6a:b8:7b:98:a8:45:
8b:75:15:e8:aa:fb:7d:15:16:db:cc:fb:ea:7e:73:
18:f8:b9:4a:d3:5e:5e:2f:77:d4:0d:a9:c0:d4:aa:
37:06:76:b0:d0:15:31:31:e7:41:fe:73:45:bb:b0:
fa:48:c3:6b:59:3d:d0:39:6e:33:6a:1f:3c:8b:68:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AA:25:C7:BF:57:BD:5C:C2:A6:92:4E:ED:37:04:51:E4:BD:14:4D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81e5611b-fccf-45a4-a2ef-3aee22749790.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
21:bc:12:74:69:6c:ec:2a:51:3a:03:29:4e:d6:26:18:b0:f1:
e3:e6:c9:8f:3f:6b:ae:85:f2:89:e1:33:5c:e5:3f:8d:a3:56:
62:c5:f3:be:77:7e:e2:40:06:2f:7a:0e:03:93:31:b4:ff:f5:
97:ec:c8:2f:88:45:ee:a1:34:80:8c:2b:fd:bc:bd:46:a3:79:
f8:63:97:f1:0e:3b:4f:3a:65:b5:8a:ab:26:c0:89:d5:5d:fb:
23:b1:6c:fb:39:08:43:08:50:c6:c0:bc:ac:b0:8c:31:53:7b:
b4:be:5f:92:72:e5:c6:84:72:3e:d8:72:66:59:17:de:ee:60:
1c:3f:54:e5:21:5c:a0:c8:a4:61:ed:b3:a9:30:38:92:3a:ac:
d8:10:b0:8a:b9:ba:fc:df:c3:f5:59:0e:da:5e:8c:8d:09:13:
67:5e:d8:f5:df:d3:e5:cf:bf:61:0c:b1:31:d6:20:8e:91:66:
24:45:cc:f8:07:57:a7:15:b6:d3:31:81:87:3a:40:f6:f7:4d:
5f:bc:1a:2d:b5:4c:c2:5a:07:f8:2a:9c:4a:93:86:0e:54:77:
f5:82:1c:7b:84:21:5a:28:0b:da:bd:51:ab:cf:08:22:93:e1:
45:46:31:19:02:11:84:0e:ea:0c:de:59:43:ba:12:db:64:99:
1e:aa:8e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:06:41 2025 by rpki-client