Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/822908e6-46dd-47d0-b3cf-b743a9f02b67.roa
File: 822908e6-46dd-47d0-b3cf-b743a9f02b67.roa (raw, json)
Hash identifier: 6x8l4MrwP2hvlbfuCrZz62NLK3rZYti+Bj0jfkA8mwA=
Subject key identifier: 2F:39:A8:AA:FF:A1:90:2F:B8:56:FF:06:BF:B5:19:0B:2D:E8:88:3D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 40C297DE424F47995BA8FA065103A83413D0FCCC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/822908e6-46dd-47d0-b3cf-b743a9f02b67.roa
Signing time: Thu 28 Mar 2024 00:00:00 +0000
ROA not before: Thu 28 Mar 2024 00:00:00 +0000
ROA not after: Thu 02 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c2:97:de:42:4f:47:99:5b:a8:fa:06:51:03:a8:34:13:d0:fc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 28 00:00:00 2024 GMT
Not After : May 2 23:59:59 2024 GMT
Subject: serialNumber=523294ff09f7ea987371687d720fe54f2766f5124748bf2bc7fb9b9094aef33c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:a1:00:88:8c:19:d7:19:18:d0:eb:d6:dc:
c0:72:6d:49:ec:de:62:87:d5:ec:e8:6d:06:f4:be:
e2:d6:ef:3c:f1:97:ce:c3:45:55:73:7f:2c:7f:a7:
0e:ab:9e:af:bd:f2:a2:4a:6f:bb:61:74:3d:ef:df:
87:31:e5:f6:cc:79:7c:1d:3c:7c:80:68:63:b0:5a:
86:3f:5f:5a:eb:1e:eb:10:00:a5:f4:bb:df:4c:e5:
34:7c:a1:53:47:ef:d1:8c:88:b8:8c:2b:56:91:ea:
1c:56:1d:79:41:1e:b2:96:35:fd:36:ae:b3:0f:b5:
0d:b1:1b:dd:70:ae:4e:63:84:dd:56:22:10:ec:76:
32:62:97:b0:f8:8e:30:b5:de:22:72:5e:66:b5:10:
26:67:32:f8:e2:9e:f6:31:5f:b9:9e:6d:1f:eb:37:
c1:01:2e:8f:f2:5a:ea:6c:34:db:04:f4:35:10:6e:
e7:43:be:d0:1c:51:e2:f5:5d:36:ec:62:81:ee:35:
d0:f5:d4:04:ff:a6:3c:a4:eb:20:b2:31:cc:57:02:
3b:aa:dd:f5:f4:dd:a7:6f:5b:09:ad:0c:58:f3:89:
56:b5:4e:d5:c0:dc:e1:61:95:87:01:7d:ad:c4:99:
78:0f:27:68:67:53:90:0b:12:bd:f3:4e:b3:b1:c7:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:39:A8:AA:FF:A1:90:2F:B8:56:FF:06:BF:B5:19:0B:2D:E8:88:3D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/822908e6-46dd-47d0-b3cf-b743a9f02b67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
13:41:3f:61:e6:89:90:6d:9c:79:27:6a:9a:37:54:94:27:ec:
c9:f2:c5:0c:bf:a4:3a:65:64:db:6d:c2:af:a2:88:57:e3:50:
06:f2:77:95:1c:5b:ba:c1:3e:8a:d4:e8:54:db:20:69:79:bb:
1e:00:9f:4a:ec:f1:2c:da:f7:a6:b1:f4:e8:0f:c5:71:1a:50:
a4:18:6b:a1:68:bb:2a:b0:1b:cf:a3:57:e1:37:a8:2c:9e:cf:
06:cf:20:b6:51:c9:e7:d3:5c:cc:05:ef:1b:9b:b0:bc:fc:7e:
54:dc:15:39:4c:47:3e:1d:d2:90:74:72:69:c8:f0:57:ce:41:
dd:cc:fc:4d:54:7e:23:57:70:e9:b7:c8:c0:7a:6b:f7:1d:e9:
e8:4d:9f:80:5e:a5:79:1a:a2:72:ac:08:ee:74:f6:de:c6:bd:
91:9e:98:3e:9d:eb:58:bc:04:ea:14:67:28:0c:cd:00:93:3e:
03:96:ba:f4:e1:1a:8c:86:2d:0f:fb:83:c7:35:b8:8d:5c:f0:
29:c0:a7:a4:ed:eb:ba:7d:3f:41:49:e6:c9:4c:73:c3:46:c8:
0e:9e:19:da:3a:2d:bf:ce:94:f7:e8:20:17:41:44:4b:3d:c3:
65:b3:f2:9e:71:ea:76:44:28:61:c5:c6:e9:46:9e:8d:0d:c9:
b4:4c:7b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:49:57 2025 by rpki-client