Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b23d3fb-85d3-4a0c-b846-1037bda0200d.roa
File: 8b23d3fb-85d3-4a0c-b846-1037bda0200d.roa (raw, json)
Hash identifier: W9WavkrOXDu19KqbFAHLlFEQLTwpuxduGUKl3L/Q5Jk=
Subject key identifier: D0:BA:F4:63:9A:A3:20:5C:08:BE:21:D5:64:08:1E:03:E6:10:59:D9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 45498A2EB84B2C389534770AEB95D18C375FBC3C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b23d3fb-85d3-4a0c-b846-1037bda0200d.roa
Signing time: Fri 18 Oct 2024 00:00:00 +0000
ROA not before: Fri 18 Oct 2024 00:00:00 +0000
ROA not after: Fri 22 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:49:8a:2e:b8:4b:2c:38:95:34:77:0a:eb:95:d1:8c:37:5f:bc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 18 00:00:00 2024 GMT
Not After : Nov 22 23:59:59 2024 GMT
Subject: serialNumber=99e07ba65b5f5e16490ab4374e34b0b98189caa4583f3fb8f9b30c1e073f535e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:c7:3b:f5:07:c8:ee:21:c4:1a:57:8f:ce:
b4:32:9a:6f:fd:77:8f:d5:35:b4:39:98:26:b6:b1:
2e:a9:57:53:08:df:d5:6c:2f:5f:5a:72:3a:09:ce:
6e:f8:3d:35:eb:a5:b7:ca:d2:4b:59:44:d5:e0:16:
f7:d5:bb:a9:d0:29:f2:e3:68:8c:17:49:56:40:94:
98:74:ad:69:5d:73:ac:b2:77:ca:51:fb:9c:ae:46:
6e:b2:61:c4:97:5e:05:79:cb:16:84:4e:f6:14:43:
67:e1:f6:8a:40:63:78:6e:15:7f:d2:b6:45:db:84:
df:0c:b9:58:c0:2e:12:22:6e:a6:58:bd:7a:9c:7b:
40:b2:2f:50:13:56:46:56:f6:b0:5c:1a:c5:9f:74:
05:fd:a4:7e:17:50:e2:f4:96:76:9b:34:03:90:68:
36:97:7e:f4:74:d7:ee:70:6e:87:a8:7e:65:9c:70:
38:d0:45:07:6c:e1:7e:c1:0c:06:e9:fc:73:f8:d0:
51:7b:0e:b0:1e:88:fd:36:ab:3d:5a:8d:84:b6:15:
5b:a2:cc:44:d0:7e:4f:6e:8b:00:1b:db:f0:b8:07:
72:ef:51:08:e2:fe:28:93:b8:0c:bd:75:f7:89:03:
41:70:ee:08:46:af:34:40:be:02:9e:da:e1:05:cf:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BA:F4:63:9A:A3:20:5C:08:BE:21:D5:64:08:1E:03:E6:10:59:D9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b23d3fb-85d3-4a0c-b846-1037bda0200d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
52:84:93:34:d5:5b:10:7f:3f:66:7b:83:85:3b:b5:a2:1f:4a:
5c:44:be:8f:fd:80:7b:3a:cd:c9:2c:43:20:d9:cc:d7:a9:30:
58:5e:a8:73:ce:61:04:3d:33:9e:23:3e:a9:7e:58:1a:a5:fd:
c6:74:fb:b8:95:7f:71:0c:d4:5f:b6:7f:8f:f9:1d:2d:35:8d:
3f:a0:20:5e:d2:6e:79:d8:cb:51:63:41:75:b4:1d:7a:68:6a:
c9:71:e7:c9:f2:0a:56:64:40:95:09:6c:35:87:86:18:be:9a:
4e:ea:00:60:8e:d7:83:44:cc:ec:4a:c8:77:03:9c:bb:54:1e:
ae:32:7c:74:c2:19:5a:a7:95:c5:6b:70:af:26:f7:88:ad:d6:
2b:89:b4:b9:63:ac:74:e9:24:38:d8:a2:a2:89:c2:f9:7f:f2:
9c:c8:7c:b0:f2:da:44:34:29:3e:6c:b9:fd:95:4e:fb:fb:17:
e5:0b:34:a4:76:7e:aa:5b:d7:3f:ad:60:e2:ca:d9:9a:7e:0a:
73:81:24:fc:75:d3:91:11:a2:30:ce:0e:fd:ad:b6:dd:41:e2:
45:fb:73:54:b7:dd:b6:b7:f6:2d:ee:22:b2:86:9c:0a:3c:04:
6b:a6:2c:00:5a:09:cb:be:80:ae:aa:d7:10:2b:64:ee:8a:45:
2f:58:24:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:26:26 2025 by rpki-client