Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/98a75b70-cba3-4612-a18a-00d47df7a9e3.roa
File: 98a75b70-cba3-4612-a18a-00d47df7a9e3.roa (raw, json)
Hash identifier: gp+88WoNbWoKmRPM5hYyQpZkeDlftHYHjnqsnZiJIdM=
Subject key identifier: 9D:0E:9E:31:83:E6:FE:69:BD:1F:0A:67:16:25:0D:C0:D8:BD:59:D7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0CA0A4A20F88E953CA940FE866828FCAC61A87FF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/98a75b70-cba3-4612-a18a-00d47df7a9e3.roa
Signing time: Sat 01 Mar 2025 07:38:17 +0000
ROA not before: Sat 01 Mar 2025 07:38:17 +0000
ROA not after: Sat 05 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a0:a4:a2:0f:88:e9:53:ca:94:0f:e8:66:82:8f:ca:c6:1a:87:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 1 07:38:17 2025 GMT
Not After : Apr 5 23:59:59 2025 GMT
Subject: serialNumber=7a6a226a9e3386fa6a607cd61fa10ac2ed4edc2b49b8b7d0774b4504b73e316a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:d4:c6:3c:9d:c8:23:01:7a:95:80:a3:c8:
b0:26:6d:34:9d:59:d5:09:40:41:55:92:9f:83:bc:
02:53:1f:13:f8:15:99:6b:5d:e3:32:93:08:61:8c:
51:c8:27:d8:a1:bb:c3:c2:05:5c:58:c7:8e:33:0d:
29:53:29:b2:79:10:63:25:8d:20:5e:59:ec:64:07:
6d:27:e6:80:5b:f7:36:04:c8:09:e6:b6:1a:35:97:
5d:1c:bb:77:c1:46:9c:c2:68:76:4b:36:12:b0:42:
87:53:c7:cd:4c:52:d0:24:46:8b:18:a2:10:ea:45:
c1:8f:8e:af:3d:d4:c9:6d:67:2f:aa:c9:eb:37:f5:
b5:30:38:3f:9f:ad:ad:31:f2:2c:d8:64:68:3f:29:
0d:a8:f7:e2:af:1e:40:15:39:ac:f7:54:d8:68:93:
fa:11:03:5f:ce:09:c4:8f:66:14:3c:96:c1:a4:7f:
d8:ce:a0:32:2d:ba:52:2e:1e:ec:10:86:e5:0d:3e:
64:69:06:3f:04:59:dd:79:26:79:ad:53:a5:0e:a4:
22:73:1c:7c:de:2c:71:58:00:fe:5b:1a:2c:de:47:
48:85:6d:3c:b2:07:86:df:c1:4a:b3:65:90:0f:37:
6f:b5:c8:69:39:ee:ab:3b:34:5e:27:5a:7c:3a:6b:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0E:9E:31:83:E6:FE:69:BD:1F:0A:67:16:25:0D:C0:D8:BD:59:D7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/98a75b70-cba3-4612-a18a-00d47df7a9e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1f:66:ed:34:3c:8b:99:56:1e:a4:0f:8e:ac:ce:79:a2:7c:
1e:fe:bd:a8:b6:8a:92:71:31:63:04:46:b1:ec:43:c4:ee:b8:
4c:de:5b:16:98:56:7c:af:9f:43:9c:38:da:65:8a:0f:12:7b:
bf:be:52:3a:b4:8c:07:87:ec:c8:1a:70:9b:7f:9e:af:15:a6:
88:bf:16:11:9c:6a:f4:bd:69:c3:ce:e6:26:11:c9:48:19:dd:
6e:e1:14:b2:51:2b:14:f2:e8:64:fa:9e:bd:f0:7f:77:cf:ad:
b2:27:3a:5a:8a:d6:55:62:6b:a1:d5:ec:a2:f4:c5:51:fb:d5:
07:26:ac:27:e0:8a:87:31:21:8f:59:20:f0:f1:36:70:52:33:
32:ae:c4:35:61:25:e6:27:52:14:75:04:27:91:49:fb:fc:21:
8c:b7:22:0b:71:80:3a:e0:a2:62:2f:58:85:f1:20:5d:4f:d6:
00:b3:a8:7a:8d:e6:76:ac:b5:d3:2c:df:a2:da:c0:79:0b:2b:
eb:ac:55:b8:bc:7a:34:c6:3b:1e:e0:6f:fc:30:a7:33:d1:ba:
e6:87:04:59:5d:c4:64:8d:99:a5:ca:36:e1:6f:b8:cf:d8:ea:
32:dd:43:79:65:36:27:31:f9:3b:22:bc:2e:f9:b5:3f:93:47:
31:88:11:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:32:27 2025 by rpki-client