Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93c1cf11-0400-4439-bb3a-e2e9955dc3b8.roa
File: 93c1cf11-0400-4439-bb3a-e2e9955dc3b8.roa (raw, json)
Hash identifier: KGaO6Ai0aKPsGl5LnkK+yLAEFfHkPnNAixEctNv28T0=
Subject key identifier: 4F:F4:1E:EA:CF:00:67:D2:CC:BC:8B:96:A4:B4:5F:19:E0:8D:29:85
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0C49217E977EC0440A2880627B5F5B5CD06D43D1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93c1cf11-0400-4439-bb3a-e2e9955dc3b8.roa
Signing time: Tue 24 Oct 2023 00:00:00 +0000
ROA not before: Tue 24 Oct 2023 00:00:00 +0000
ROA not after: Tue 28 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:49:21:7e:97:7e:c0:44:0a:28:80:62:7b:5f:5b:5c:d0:6d:43:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 24 00:00:00 2023 GMT
Not After : Nov 28 23:59:59 2023 GMT
Subject: serialNumber=f7436f79882e73e04bcb5ab46f068275457dd3e01b061360abea39185567a0d7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:42:dd:24:5a:39:46:71:41:a8:54:c3:93:
49:fa:6f:7a:3c:6d:aa:b2:e1:fc:12:04:d0:7f:5a:
53:58:8a:d3:f7:e3:3f:6d:90:0e:7b:c0:a7:a2:4d:
91:be:77:52:1f:2f:8f:c4:be:4c:09:51:54:7b:ad:
dc:23:b7:8e:eb:36:51:3c:9d:58:9d:00:de:94:8a:
c0:fa:eb:36:b9:a2:b7:1e:fb:3f:f6:13:30:99:fb:
c0:9e:b8:65:84:bf:66:08:18:0b:a7:4e:22:98:b6:
9e:f8:06:6d:75:b9:0e:5d:a9:6b:f5:3e:5a:9c:0c:
48:a7:06:17:13:9c:38:6b:8c:48:a3:c9:65:34:5d:
bb:11:80:66:c4:6a:51:03:89:f7:d0:49:c6:2b:9d:
c8:0c:95:e5:41:37:56:87:d3:b6:35:3a:a6:3b:e9:
f0:55:bd:ee:fc:f6:e8:94:77:02:79:93:ab:e3:cb:
75:17:0b:e7:aa:30:ed:0c:46:19:8b:6d:af:5b:93:
a3:77:38:5e:10:03:ea:b3:45:b8:f1:fb:e9:52:bb:
c4:7e:10:45:a3:b4:58:fc:5a:c4:f2:c8:01:4a:0b:
b5:e6:b8:cf:78:3a:4d:56:ea:58:a0:2a:be:fe:05:
d8:a2:de:94:a1:d3:3c:a2:e0:82:c1:27:2c:22:d9:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F4:1E:EA:CF:00:67:D2:CC:BC:8B:96:A4:B4:5F:19:E0:8D:29:85
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93c1cf11-0400-4439-bb3a-e2e9955dc3b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:5d:10:2d:af:9d:5d:67:3b:22:53:2d:f5:ba:ea:7f:73:f1:
4e:55:9f:34:0a:62:f1:0b:41:31:4b:d9:65:48:02:08:4d:f6:
cf:42:a0:d6:81:00:c4:16:2c:2f:a3:13:8c:78:02:15:15:21:
f5:1e:85:4a:de:1c:23:63:51:53:c8:c1:61:fd:d9:4e:ac:4a:
0b:fd:7f:fd:76:15:ef:cd:79:5e:08:30:8d:7d:84:46:d1:d0:
c7:02:cf:b0:96:92:71:22:34:7a:97:e4:d4:fd:ed:ba:3c:47:
07:fb:ea:9c:dc:b0:6c:f5:b9:27:a9:5c:c5:a2:6e:4b:92:eb:
44:98:02:73:f1:b3:c6:e6:09:75:d7:cf:7d:74:1e:f3:f7:5f:
8f:05:f0:69:54:f3:25:d7:b4:43:2e:e6:26:b9:6a:59:55:e0:
9e:15:88:8f:92:b6:1a:d4:1b:cf:e1:b4:6f:1b:66:09:58:05:
af:38:5c:95:08:08:28:89:79:69:2a:0b:83:e4:00:61:19:42:
8b:9f:e3:8b:aa:f8:7a:d7:0d:32:87:3e:85:04:d1:b1:ee:11:
88:68:49:13:3f:79:8a:17:8d:ea:d9:0b:46:d2:20:70:fa:cc:
55:93:a3:3c:10:03:2f:ff:39:03:bc:9e:7b:81:b1:a6:dd:5c:
43:d5:e1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:49:04 2025 by rpki-client