Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cce838c8-046e-4f5c-936d-2e0af0202bde.roa
File: cce838c8-046e-4f5c-936d-2e0af0202bde.roa (raw, json)
Hash identifier: e4j5RDI6uFRMzoTYaGqFDbI40zlgDPqJNFpWZR3qJX4=
Subject key identifier: DE:5C:4E:C6:39:55:DE:C8:88:1E:9C:BD:B9:27:90:6F:7C:09:12:74
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 66211B3FA11736F7976367FFB352D47441FFB323
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cce838c8-046e-4f5c-936d-2e0af0202bde.roa
Signing time: Sat 05 Oct 2024 00:00:00 +0000
ROA not before: Sat 05 Oct 2024 00:00:00 +0000
ROA not after: Sat 09 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:21:1b:3f:a1:17:36:f7:97:63:67:ff:b3:52:d4:74:41:ff:b3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 5 00:00:00 2024 GMT
Not After : Nov 9 23:59:59 2024 GMT
Subject: serialNumber=51b6fede031d6d34f3d5d044c7090c14f0664fc6ead31ae7fff6e9a9b3381b4d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:eb:17:3f:26:23:e1:a5:51:d8:70:40:2b:
b0:42:20:9d:5e:bb:b2:e4:5f:5f:f7:f0:aa:36:a6:
e5:dc:36:31:b0:db:d6:38:26:cc:42:20:c5:77:a5:
00:5f:19:28:a2:a9:16:5e:3b:81:47:1a:4b:29:2d:
9c:19:4a:38:87:c0:70:d6:a9:e7:43:e8:b3:6a:3b:
e6:15:3f:ee:07:49:d9:b2:30:5d:60:b9:97:f9:04:
0b:77:1d:00:db:d7:27:8c:fb:33:59:7b:2b:6a:61:
b2:5a:e5:07:f4:bc:f3:ed:b5:03:5e:99:4f:ba:0c:
56:ef:7a:c8:09:93:54:7c:a3:c8:24:2b:cb:cd:7f:
a1:c1:c2:1e:3b:ba:1f:44:af:d1:73:b6:74:3c:d4:
c8:2b:a3:56:21:99:f7:f1:38:39:15:1c:f6:4c:8d:
2c:fd:1a:9e:dd:27:88:42:a5:9c:a6:88:02:24:f4:
a8:ca:f9:88:0c:49:39:8e:b9:bd:c8:6f:75:6a:05:
17:ba:f3:0c:ce:dc:f7:26:be:76:67:44:53:89:9b:
06:88:ae:eb:cb:52:fd:5c:97:28:ef:7a:5d:fc:de:
cf:f4:b6:aa:fe:98:55:31:ae:9f:2c:ee:85:73:8f:
6a:ef:b8:af:b0:d2:53:8b:be:a6:fc:b0:07:c0:a2:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5C:4E:C6:39:55:DE:C8:88:1E:9C:BD:B9:27:90:6F:7C:09:12:74
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cce838c8-046e-4f5c-936d-2e0af0202bde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:46:e4:9d:f7:9a:8e:19:05:1c:03:37:fc:89:47:b3:18:29:
f1:18:3b:be:1a:c6:27:68:ea:81:b2:a5:25:54:24:a7:2e:67:
50:0f:99:6b:b8:36:72:de:17:e8:15:03:44:21:7c:72:64:02:
5c:0b:0c:a4:99:9e:0b:78:ca:b6:c1:87:26:33:04:e8:a2:0c:
ee:ca:f7:2f:6f:62:45:d4:75:b2:ac:5f:20:1d:a6:8d:f5:66:
19:21:b3:cd:e8:38:64:b1:c5:7e:a0:01:19:ba:15:1e:98:5d:
d0:bc:fc:de:aa:bb:ab:20:30:05:28:82:f6:26:b5:86:c3:d8:
67:39:b6:2c:93:b5:73:4c:2a:c3:62:a8:e0:7f:a2:d6:90:1e:
ae:54:a1:f1:d8:44:a5:8c:88:a7:b7:61:c8:6b:01:a0:bd:8d:
26:c6:2a:ad:cb:55:1e:94:b1:f2:96:4d:62:88:ca:f3:e6:07:
6e:84:a1:59:f6:e8:ba:82:64:f4:8f:b6:a6:0c:12:6a:21:08:
4b:0a:f9:17:1a:d2:67:03:7d:fe:89:30:c4:16:a5:c7:c3:52:
bb:54:ad:15:88:5e:b5:93:63:75:6b:06:8a:07:b5:d0:08:1e:
cf:87:eb:1a:26:96:6f:30:fa:31:cb:a4:5c:53:57:b9:57:0e:
7e:3b:a9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:34:30 2025 by rpki-client