Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5bfd9e5-6d82-469c-8baa-4471605f1cf4.roa
File: b5bfd9e5-6d82-469c-8baa-4471605f1cf4.roa (raw, json)
Hash identifier: BXkKITyLW+eu1N3vXHWjfToKWQQ6sxocsGy0MZQcMhw=
Subject key identifier: 68:52:45:91:06:1E:B5:4A:65:94:D4:C7:17:59:F4:6A:A2:C8:24:8A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 59D699EA128E5AAFC858885CE6A60FBD0BC7EF4C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5bfd9e5-6d82-469c-8baa-4471605f1cf4.roa
Signing time: Tue 29 Apr 2025 05:33:16 +0000
ROA not before: Tue 29 Apr 2025 05:33:16 +0000
ROA not after: Tue 03 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d6:99:ea:12:8e:5a:af:c8:58:88:5c:e6:a6:0f:bd:0b:c7:ef:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 29 05:33:16 2025 GMT
Not After : Jun 3 23:59:59 2025 GMT
Subject: serialNumber=bf518d536515e0662b247cc0d737ba5fe7df76d3bd2da12f37f87012665bb9d1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:68:89:ea:bf:bf:de:bf:c2:04:6c:8c:9d:
d9:32:98:d6:65:e0:29:0a:b3:1e:2f:db:fb:fc:c5:
01:13:3b:a7:6c:9a:3a:c0:31:dc:8f:ed:b6:f8:3f:
79:ac:e5:2b:58:55:37:4a:58:89:0b:a3:0e:74:da:
a3:ac:4f:87:c0:61:87:2f:66:cf:8e:4f:c0:49:d7:
f4:5e:a3:b7:d1:52:42:c4:11:9b:1d:2d:94:c2:bd:
07:42:8e:59:92:54:32:14:5f:46:b4:16:9d:88:88:
35:0e:fb:1a:8b:32:ba:7c:56:01:4f:77:0f:86:41:
ba:ed:d4:b3:2f:95:af:d4:2a:89:87:98:19:c9:75:
67:88:64:0e:8d:06:b5:07:84:09:e3:4f:84:2d:ff:
26:b4:a8:0d:28:14:cf:3d:56:57:72:0b:3b:f6:7c:
26:9d:62:91:e8:6c:36:2b:f5:7b:23:16:cd:ae:86:
1c:d9:9e:34:78:09:f4:80:19:9e:52:55:e4:6e:25:
af:64:b5:58:c5:5a:2a:66:63:6c:45:08:93:f2:b4:
50:5e:55:69:16:7c:01:e7:f0:bf:1c:5c:d9:24:e1:
01:bd:c6:c1:16:92:5e:19:4c:c4:93:10:a2:33:09:
6d:91:58:d9:35:3e:1a:24:e5:8a:90:d7:ef:21:43:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:52:45:91:06:1E:B5:4A:65:94:D4:C7:17:59:F4:6A:A2:C8:24:8A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5bfd9e5-6d82-469c-8baa-4471605f1cf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:39:d9:25:68:b4:88:98:bb:da:a1:6f:29:ac:ff:ed:11:5b:
86:bd:be:8c:d0:7d:21:71:ef:15:c1:1e:58:be:28:93:5c:02:
95:63:f5:b1:c4:65:ca:6a:7d:b8:d6:ba:79:80:94:4c:44:d4:
09:6e:05:1b:57:26:03:4a:00:fc:62:92:c2:29:c0:81:99:cc:
b0:f3:e7:b6:56:84:2d:26:01:44:59:fd:24:aa:da:ec:c7:67:
c1:34:57:44:6c:76:f7:70:fe:c6:b4:27:d5:d4:ac:86:de:3e:
ac:b8:35:51:fe:1e:f4:72:6c:ec:b3:cc:53:22:d1:bf:f3:15:
e6:ae:d6:76:1e:3f:0b:39:0d:0e:25:52:ba:69:5c:9e:66:77:
58:a2:a1:7f:7f:a5:58:df:81:03:df:65:fb:fd:b7:c9:77:e3:
6b:ea:89:93:58:c4:de:24:51:0d:9f:86:b1:7b:88:a7:70:2d:
a3:de:b7:00:87:8b:50:29:bd:13:02:f1:34:66:65:30:76:f2:
0f:42:b4:6d:6f:f7:0a:5e:77:43:b0:b6:74:3e:58:aa:e1:9d:
ba:74:79:b3:eb:74:fe:06:e6:93:f9:36:00:9f:fc:ed:c3:48:
10:86:86:a4:7e:6f:96:0b:ce:75:39:07:ef:1c:5d:ac:0b:54:
a9:56:e1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:35:38 2025 by rpki-client