Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab4727ad-154b-494f-8a91-9cf4ed9ab200.roa
File: ab4727ad-154b-494f-8a91-9cf4ed9ab200.roa (raw, json)
Hash identifier: s+9UZexYg5tikinIqLdtu0hJVkoO6Qou28R6CO+2V24=
Subject key identifier: 0C:DA:28:FB:30:00:22:37:23:B6:C2:90:DF:B8:DA:C0:35:9A:59:7F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6BF830887A0C804AA20592C234C4AA7CBC2F2298
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab4727ad-154b-494f-8a91-9cf4ed9ab200.roa
Signing time: Fri 11 Aug 2023 00:00:00 +0000
ROA not before: Fri 11 Aug 2023 00:00:00 +0000
ROA not after: Fri 15 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f8:30:88:7a:0c:80:4a:a2:05:92:c2:34:c4:aa:7c:bc:2f:22:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 11 00:00:00 2023 GMT
Not After : Sep 15 23:59:59 2023 GMT
Subject: serialNumber=60f2884085ec2de60bcff5b04280884cb368b7391768484a45a521968acfaeb5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:ff:b0:7f:4c:5c:bd:9d:75:8e:7a:02:8d:
9f:e1:a6:98:a0:64:59:93:3a:bb:1d:cb:0c:6f:04:
fa:9f:e3:75:d4:7d:16:e3:96:75:c9:36:a2:6b:e5:
fa:5a:5e:c7:c5:2a:b3:e1:fb:79:75:cb:ce:b3:37:
53:3d:6a:49:c3:f4:63:73:c5:da:c0:64:cc:86:3a:
32:89:07:12:5b:43:99:9c:0e:c3:b1:28:90:a2:37:
5c:7b:83:af:a9:53:5d:7b:97:e9:4b:83:c4:de:cf:
12:00:d2:1b:37:38:af:76:14:ea:69:72:7b:2f:86:
ee:a4:0d:d5:97:ef:44:88:11:5c:b4:45:1a:1f:16:
96:e6:88:ca:09:a6:87:65:14:45:cb:2a:6b:d2:80:
1a:ab:9a:07:3c:f2:52:06:e9:29:25:3b:de:bf:f4:
cf:d7:2b:85:e7:d0:ad:c4:bd:d3:ad:95:e0:75:5c:
72:c0:80:f5:a1:25:3e:b0:67:b9:15:c3:1c:88:06:
73:ac:38:91:7a:53:e5:f6:74:44:58:65:8b:21:77:
05:fe:29:44:0b:65:29:80:b2:e3:70:ee:54:22:bb:
b3:c4:99:ec:6b:e7:81:5d:1f:e8:13:80:6d:e5:19:
fe:c4:45:56:5f:64:ff:6d:2e:51:14:70:1c:c3:fc:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DA:28:FB:30:00:22:37:23:B6:C2:90:DF:B8:DA:C0:35:9A:59:7F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab4727ad-154b-494f-8a91-9cf4ed9ab200.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
99:8b:f4:22:b4:24:da:b0:3d:fc:7b:ea:e2:dd:be:20:80:94:
9a:78:f5:ff:32:c9:38:63:41:76:ba:24:f5:a9:50:b9:52:24:
50:11:ce:31:a6:c8:48:f4:f6:af:f9:46:da:5c:67:a5:cd:c1:
d0:b5:d7:28:46:de:1c:9f:20:08:fc:22:3b:ef:d5:77:72:69:
9b:b2:97:98:60:8d:98:5b:13:61:36:ea:69:6f:ca:9b:c7:89:
3d:3b:a8:b3:67:49:49:de:91:e2:78:b6:86:4d:e2:16:ee:61:
c6:a4:63:e2:93:d2:df:6c:3e:9a:60:16:c7:db:4f:70:9c:7b:
ad:13:f8:b3:1f:71:7a:de:1e:8b:27:07:9c:a6:1d:20:ee:ff:
b5:81:14:14:ce:c9:c9:98:1e:c2:2f:7a:eb:7e:d4:ce:e5:2f:
2b:cb:9b:fe:60:78:f9:20:6a:8f:d7:f5:6f:88:3c:95:9e:9c:
3c:3b:90:58:66:31:5b:67:51:f2:07:3e:43:69:f4:b1:18:66:
0e:1d:e1:db:d3:32:24:46:9c:48:77:35:6c:48:e0:d0:8d:52:
2f:14:5c:24:5e:15:fb:07:c6:be:c6:6e:74:9c:a8:41:b7:db:
a7:6d:65:41:ae:72:32:f8:fb:c9:0d:8b:62:73:16:f5:f8:7b:
e2:db:ee:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:29:34 2025 by rpki-client