Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7f9d9e7-5c00-4e0f-a5e1-0cc0e739ca73.roa
File: a7f9d9e7-5c00-4e0f-a5e1-0cc0e739ca73.roa (raw, json)
Hash identifier: XG6l7scNfozC9QWcqIN9Bx2Lpv/Q22lUFw7Qz268/wg=
Subject key identifier: 85:64:67:69:62:90:71:C8:0D:43:F7:72:98:31:DA:72:29:22:7D:41
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 25CECE6CA537AB9AEB47C4CBF1B72399A86F3775
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7f9d9e7-5c00-4e0f-a5e1-0cc0e739ca73.roa
Signing time: Tue 31 Oct 2023 00:00:00 +0000
ROA not before: Tue 31 Oct 2023 00:00:00 +0000
ROA not after: Tue 05 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ce:ce:6c:a5:37:ab:9a:eb:47:c4:cb:f1:b7:23:99:a8:6f:37:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 31 00:00:00 2023 GMT
Not After : Dec 5 23:59:59 2023 GMT
Subject: serialNumber=c19606d7a1359fdef86b687c00e1481e83db28a867647b8f912832e05a339517, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:fe:fc:0c:0a:4d:85:61:b6:07:3b:d6:ef:
25:a0:f9:5a:a7:78:21:cb:27:37:25:22:4d:a5:f6:
3f:b2:95:7f:d3:91:b4:33:6a:d7:b1:71:eb:5c:58:
2e:ff:31:fc:bd:ff:dc:4f:51:48:53:79:23:3f:44:
b1:68:aa:5b:66:d3:b7:13:5e:7f:1d:9c:f1:ab:ec:
52:22:87:6b:c4:6d:4e:0e:73:0d:99:8d:13:b4:b0:
8f:9e:e0:c5:05:90:7a:0d:f8:85:a0:4a:1f:52:8b:
32:fd:2f:ed:7f:89:5f:14:80:ed:fa:71:ce:20:a3:
40:a2:2b:c0:ad:b8:1d:70:e9:b9:8a:c7:b7:81:35:
f0:9e:19:e8:1a:15:e1:61:ad:3b:4c:83:38:e8:9c:
9e:de:fc:05:4a:69:e3:ea:0f:c7:4b:3a:c1:0d:b3:
c1:2e:82:6f:9d:78:f4:a6:2b:05:f8:32:b4:f0:9a:
5d:3b:48:4e:a7:84:8a:bb:d7:79:6d:da:12:a7:fb:
4c:74:81:b7:e6:04:db:4c:6a:1b:df:e5:64:88:f3:
9e:18:c5:74:ca:4b:15:db:ea:a7:bf:6b:c9:cd:aa:
16:34:19:c6:c5:98:6b:aa:e0:35:5c:35:bb:a9:13:
b2:a2:6d:08:f2:ce:15:08:72:52:49:51:73:43:7f:
ce:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:64:67:69:62:90:71:C8:0D:43:F7:72:98:31:DA:72:29:22:7D:41
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7f9d9e7-5c00-4e0f-a5e1-0cc0e739ca73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5e:b1:2f:22:78:55:65:99:7c:df:b5:6e:d4:8d:28:51:53:
fe:ce:67:e7:de:f5:97:47:eb:34:34:91:97:6a:26:09:af:19:
fd:3a:dc:22:15:86:a5:c0:cd:73:10:70:01:85:2b:d1:5d:d0:
a1:9b:a3:86:42:28:75:41:d8:bc:c3:fd:7b:11:39:e2:5e:36:
08:10:04:dd:c0:0f:14:79:3c:78:25:3d:99:34:88:54:68:e9:
52:88:f9:bd:b3:d9:b7:44:f4:0d:fb:8d:86:d0:30:a9:59:43:
3e:c5:ac:21:6b:f3:d6:f4:7a:2d:46:32:4b:03:7e:f2:8b:1b:
b2:a1:18:89:2c:ed:f1:7e:50:85:d5:9a:ad:2d:ed:57:d6:29:
3e:b5:93:b3:4c:0e:61:ed:ca:d4:e0:46:59:08:24:c9:8b:74:
b9:05:fa:8a:36:5b:e7:12:05:f3:56:00:5e:a3:71:e8:f2:0c:
c0:6c:73:24:49:c0:3c:b0:e9:96:ae:56:33:78:f6:32:b1:d1:
3a:cd:a0:c9:69:b8:88:da:a9:61:fc:38:49:fb:c8:10:df:56:
f9:3a:d3:e4:30:52:19:2e:bc:41:8f:2d:45:d9:6a:0d:15:51:
b0:8b:a0:c9:09:29:43:3a:d9:e0:3c:72:6a:b1:29:4f:f3:99:
f7:1e:77:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:20:22 2025 by rpki-client