Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9baf466a-fdc9-41b6-b517-77cc22bbf601.roa
File: 9baf466a-fdc9-41b6-b517-77cc22bbf601.roa (raw, json)
Hash identifier: CrOfBOekskpSYWwVAq8Yhb0EeTn2dz85wsO2bN0EhmQ=
Subject key identifier: F8:C2:DA:2B:26:A6:E2:59:B3:B4:0B:6D:F6:AB:1B:2D:92:CE:CD:97
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 523B4920C1325CA4E64B2D3CEEB9E3106345C004
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9baf466a-fdc9-41b6-b517-77cc22bbf601.roa
Signing time: Mon 17 Mar 2025 20:23:17 +0000
ROA not before: Mon 17 Mar 2025 20:23:17 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:3b:49:20:c1:32:5c:a4:e6:4b:2d:3c:ee:b9:e3:10:63:45:c0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 17 20:23:17 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: serialNumber=36355a67e7037608ef4aafe9684a3b27dab2cc525df2e0207931bea0a836c77c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:89:fe:3a:1f:2f:b1:e8:f3:3a:30:fd:fc:
2e:a2:3f:43:67:32:cb:bc:5a:58:7d:e8:cf:ee:5f:
de:d2:cf:47:68:e3:c3:31:2f:cc:d6:a0:9b:17:55:
b9:a6:2d:07:72:8a:d2:d5:29:e5:5c:2d:47:8b:e5:
0a:14:44:fc:9a:3e:95:19:7a:b4:7b:17:75:f8:dd:
8e:7b:e4:94:cc:bb:fb:c9:da:46:b9:7f:54:9a:43:
13:74:7b:5b:7e:23:8c:4b:7c:81:ed:05:94:5b:0e:
39:7d:09:52:68:3e:2b:9b:c0:ef:b4:a8:ca:06:dc:
4a:ae:5d:29:b2:03:1f:17:29:e0:e2:52:4b:19:79:
89:a1:90:50:29:ba:3f:69:ff:1d:3b:e7:a7:6b:f5:
e2:0d:2a:2e:18:47:b4:b8:95:4f:1b:aa:23:f5:cd:
39:73:be:a9:50:05:7d:6c:4b:5e:e7:ce:19:bb:80:
ef:96:67:cc:df:e0:43:20:d1:c7:ae:3f:4e:be:71:
a2:6a:22:c4:ab:33:ad:80:64:3d:a7:e3:de:a9:be:
50:d3:91:1d:26:3c:f1:e6:79:76:63:00:f7:08:f5:
95:f4:57:9a:16:b7:f3:10:5a:22:d4:8f:63:2f:81:
05:d5:fd:ab:c1:19:e0:06:e6:97:ca:7f:d2:0a:9a:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C2:DA:2B:26:A6:E2:59:B3:B4:0B:6D:F6:AB:1B:2D:92:CE:CD:97
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9baf466a-fdc9-41b6-b517-77cc22bbf601.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:7f:2f:f7:41:4b:05:20:3f:83:c0:65:59:ac:4b:03:cc:36:
a1:da:f1:2c:e6:d6:4d:29:a2:8e:66:ca:75:fb:b2:cb:e8:5b:
d2:d0:0f:62:c1:26:a4:53:6c:86:c3:49:10:3a:6e:d3:51:b7:
31:13:66:1c:b5:d3:36:fe:14:6b:c4:5b:ac:6e:f8:fb:e7:37:
c2:33:65:ea:6f:55:da:eb:f1:a2:f9:81:0d:f4:66:9c:c6:f7:
87:1d:34:b5:52:fb:d3:69:d8:3b:f7:18:0e:c7:44:1a:5b:61:
9d:46:00:eb:16:82:02:00:02:67:15:10:ae:2a:a0:e3:8d:81:
2a:ca:c8:c6:bb:87:ef:3b:24:83:c5:8b:77:79:92:3d:f9:b7:
a1:f8:e5:b0:d2:28:d0:2b:f9:d1:12:e4:a9:e8:80:3b:22:78:
04:ee:f6:4d:9d:77:0c:cb:36:db:d5:bd:a4:6f:97:3b:fe:95:
72:54:fc:d4:61:ea:d2:d9:7c:50:7d:8f:d9:6b:26:ef:6e:f2:
61:6b:a1:86:a1:e5:d7:e4:27:66:e9:10:99:6e:a2:9e:b7:5a:
66:e3:16:e6:f7:a3:61:f1:58:b6:dd:b1:87:e3:d5:42:7a:2b:
c2:48:26:c1:0d:0c:c1:96:68:25:ab:f4:35:07:45:ee:10:7c:
bf:9b:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:04:15 2025 by rpki-client