Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a183dd97-b60c-4e2f-82f8-91979bd00cf9.roa
File: a183dd97-b60c-4e2f-82f8-91979bd00cf9.roa (raw, json)
Hash identifier: oRVkm1dFScpAlp6dqNG7dGtaikdgYQcw7B8JolPwaeY=
Subject key identifier: 5A:39:98:32:87:B7:DE:32:22:AF:8D:2D:7D:D0:CA:04:B4:96:14:7D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 010212B7940DE52112078E55EBCA5ABC4DDE0E98
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a183dd97-b60c-4e2f-82f8-91979bd00cf9.roa
Signing time: Tue 29 Apr 2025 06:53:18 +0000
ROA not before: Tue 29 Apr 2025 06:53:18 +0000
ROA not after: Tue 03 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:02:12:b7:94:0d:e5:21:12:07:8e:55:eb:ca:5a:bc:4d:de:0e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 29 06:53:18 2025 GMT
Not After : Jun 3 23:59:59 2025 GMT
Subject: serialNumber=98b8270d20fa9c651bd2771cb9aff2ffb59ebf643a4366e4bec037cf25b988cb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:57:4c:43:19:31:f3:df:91:28:82:5f:c6:
07:4f:79:42:b9:24:0b:25:6a:1a:a6:dd:08:32:1d:
58:63:b8:cc:9c:64:96:11:08:e3:6a:f9:e3:33:ff:
2d:61:be:a8:06:c0:6d:84:27:37:02:99:36:e1:34:
bb:a1:4b:d2:05:4b:84:d9:d7:6a:4c:4b:b7:13:38:
87:ca:a6:70:7d:e1:fc:60:5c:b6:6d:72:f1:0c:9d:
dc:b6:7e:fe:54:53:0a:21:e4:3e:2e:0a:da:b2:8c:
28:0e:50:99:bb:01:72:0e:5f:44:02:87:1b:1a:6d:
71:75:c6:62:2f:f9:95:6b:61:0c:ed:85:81:53:7c:
8d:6e:8d:23:fc:7f:58:97:12:82:f5:6b:6f:2f:1c:
ac:80:07:13:98:b6:c2:b3:32:c1:1f:cd:4a:b3:cc:
09:06:3e:c8:2b:46:da:c8:be:a2:4c:fe:5c:aa:ea:
ad:ed:bf:fd:9d:47:3b:89:f5:0d:83:16:f7:67:3b:
49:a7:8b:55:f7:79:26:e7:9e:66:91:f7:4a:10:2a:
61:de:a2:eb:b9:cf:df:c5:21:2e:9c:be:d9:d8:f5:
83:81:6b:ef:bc:0e:f0:9b:f0:6e:d8:44:64:70:92:
21:15:30:f8:4c:c8:6a:69:06:4c:f1:50:06:22:aa:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:39:98:32:87:B7:DE:32:22:AF:8D:2D:7D:D0:CA:04:B4:96:14:7D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a183dd97-b60c-4e2f-82f8-91979bd00cf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
23:26:20:58:36:d6:9a:d8:21:d6:23:ee:78:4d:d4:f9:7a:7e:
f9:89:74:a3:53:49:91:51:e3:19:80:61:51:6b:92:7d:f1:74:
3d:6f:dc:70:68:a1:df:53:0a:76:8b:e4:f0:0a:4a:69:69:98:
b2:a0:ec:98:c3:64:d2:c1:52:b8:c7:72:97:f6:aa:80:83:ca:
95:97:bf:5c:e6:c8:f2:f7:c4:d0:8e:7b:53:f8:37:f0:8d:5a:
1e:6a:0d:9f:fa:84:0c:42:d6:38:8f:c4:0b:df:89:72:af:2e:
09:b1:35:cf:44:c4:72:6a:12:ba:9f:08:14:ff:4d:ff:8a:91:
92:1f:e2:20:27:9f:52:01:83:6f:aa:31:ec:7e:06:fe:d7:ad:
6a:26:cb:a8:84:80:99:d5:bb:58:1f:e8:1e:21:29:0d:ca:a4:
28:cc:c6:ff:fb:8a:3a:ab:b3:83:be:14:43:fe:4d:67:84:0f:
fd:e9:4f:ae:68:db:8d:8a:d1:8e:77:38:7a:52:4a:21:f3:97:
7f:b5:c3:7c:7a:a1:29:30:4f:1c:0c:d0:a4:0e:81:ee:0f:f2:
6a:2a:d4:79:ac:0a:e1:bc:d5:2b:57:13:d7:0f:12:76:93:c7:
c9:b6:83:23:db:b7:de:c0:0d:8e:98:85:1d:f6:d0:d7:16:6b:
8b:db:a7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:42:01 2025 by rpki-client