Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7d87084-f13d-4f2c-a77f-3d4862c6bcba.roa
File: a7d87084-f13d-4f2c-a77f-3d4862c6bcba.roa (raw, json)
Hash identifier: Z9LZkMCcU+bSJesFyPyUUY+CEz5yyU4VlYfIvW2nhWE=
Subject key identifier: 72:8B:EF:A3:DB:A0:A6:92:FC:C9:14:DD:96:7D:F8:19:A4:10:41:2E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 512685B96C3FDE46D14D5A40A9E339C6E9CB3761
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7d87084-f13d-4f2c-a77f-3d4862c6bcba.roa
Signing time: Fri 06 Sep 2024 00:00:00 +0000
ROA not before: Fri 06 Sep 2024 00:00:00 +0000
ROA not after: Fri 11 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:26:85:b9:6c:3f:de:46:d1:4d:5a:40:a9:e3:39:c6:e9:cb:37:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 6 00:00:00 2024 GMT
Not After : Oct 11 23:59:59 2024 GMT
Subject: serialNumber=911a36283dc1b66fb4c0b7120671536f1d24137066f4ded6367a4dd567cbd4ec, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:62:ae:f2:ee:d5:62:2e:7b:74:65:fe:ff:
b1:8e:36:f8:be:ad:e0:a7:97:d3:d5:de:f0:f8:12:
48:24:31:ad:d9:b4:83:3b:d9:38:2e:8a:a4:3f:f9:
4e:7d:30:61:d8:69:00:26:51:93:a9:1d:41:36:cb:
76:02:14:a8:5a:b4:2f:89:79:e5:f7:50:e4:ac:2b:
6d:42:d6:80:4a:30:84:7a:12:b0:54:75:93:51:e5:
0e:3a:3f:1f:a0:28:d5:6d:6c:2a:71:32:dd:a2:fc:
e9:e3:84:63:85:93:81:16:11:b1:38:fc:dc:ad:56:
72:66:5a:58:67:c0:03:87:b3:e4:b5:f2:4a:ef:d9:
99:1d:80:b6:bd:61:1d:eb:20:34:c3:e3:cd:b9:24:
d4:67:bf:6d:5a:35:33:b1:37:88:55:fa:11:26:04:
76:e4:5d:0e:44:af:1b:96:b9:9f:90:12:28:8f:e8:
b7:48:38:25:da:33:b6:bc:c0:2c:14:0c:c1:57:a2:
4f:ce:3d:7d:eb:98:af:94:47:67:ab:4c:1e:9f:33:
3d:32:f6:48:fc:96:31:a6:7e:6a:88:56:f6:76:5d:
5e:c5:ca:d1:82:d7:6c:aa:d6:02:cc:5a:a3:f9:ec:
6b:4a:47:77:b9:90:fb:21:a8:28:23:23:d6:12:1c:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8B:EF:A3:DB:A0:A6:92:FC:C9:14:DD:96:7D:F8:19:A4:10:41:2E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7d87084-f13d-4f2c-a77f-3d4862c6bcba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:05:21:2e:f3:d7:2c:78:f7:54:99:fd:be:a1:b0:29:e8:68:
ed:53:5f:62:4e:4b:0b:29:fb:0f:5d:3d:0e:40:e2:cf:00:df:
e4:6f:4a:b9:0b:37:9a:a4:7a:e5:e3:86:f1:4c:a8:a1:7c:3a:
f0:48:7a:1e:a4:8a:00:fa:19:41:be:c4:9c:d7:1d:00:31:42:
c3:57:01:99:5d:ac:d7:fb:2f:9a:df:8f:d4:46:e8:96:ba:c8:
ed:6b:f1:89:5f:d7:96:47:8a:b1:d7:2b:e1:e6:92:b3:98:7e:
af:e1:0a:0d:21:ce:e5:cf:c0:59:43:8b:44:a2:2e:07:6f:4e:
e0:37:a6:bc:8d:e0:99:73:39:1c:26:d2:44:88:92:a9:35:30:
ad:da:83:38:f3:02:b8:7a:95:0f:92:bb:d4:51:cc:e4:a5:11:
86:57:e1:91:e9:9e:cd:dd:d5:5d:1f:b9:cb:d3:35:76:f9:a5:
a4:cb:a1:5c:59:b5:2e:a8:23:04:ba:1a:2a:89:ff:fa:96:2c:
bb:72:93:5b:21:56:7c:a1:be:b2:3f:ae:da:07:58:e4:17:73:
de:e7:07:95:8d:40:02:4d:5b:fc:7c:80:d7:e1:e7:fe:ad:0c:
f1:31:64:58:33:26:22:ba:82:9a:9c:ef:d5:66:c1:12:9a:2a:
b5:86:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:34:36 2025 by rpki-client