Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d8b4cedd-99d2-40e5-8ff7-61c86a013202.roa
File: d8b4cedd-99d2-40e5-8ff7-61c86a013202.roa (raw, json)
Hash identifier: Woo+1I5kK5ratmTWThxKQ68mWmQdQRqmhqFzj8lhjvg=
Subject key identifier: 7F:8F:26:D6:9F:8C:CB:C4:8B:F4:65:1F:F8:75:42:34:3B:62:BE:8C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 350074E6E274204AC73EB062307A35A1DF9DBA7F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d8b4cedd-99d2-40e5-8ff7-61c86a013202.roa
Signing time: Sun 11 May 2025 03:58:20 +0000
ROA not before: Sun 11 May 2025 03:58:20 +0000
ROA not after: Sun 15 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:00:74:e6:e2:74:20:4a:c7:3e:b0:62:30:7a:35:a1:df:9d:ba:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 11 03:58:20 2025 GMT
Not After : Jun 15 23:59:59 2025 GMT
Subject: serialNumber=2ff161f2308d2ca22105edf1639064021f10a13934abe430f08b4f4052391c27, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9c:89:18:ff:42:77:27:2d:d6:7e:3e:73:b6:
13:ae:f4:b8:25:ea:d3:e7:fd:e6:cb:88:22:de:81:
64:ad:04:2f:79:23:1e:97:12:69:6e:da:6e:36:87:
c0:5e:32:5a:39:bd:d0:5a:d1:ca:e2:2a:d7:c4:9c:
40:dc:b4:0a:00:bb:41:d7:41:0b:b5:8d:26:c8:02:
df:87:6e:38:c6:5b:cd:be:f1:11:39:ef:9c:a9:34:
ee:01:d4:64:72:be:41:93:b5:43:79:fa:68:61:bc:
6f:d1:29:b3:09:da:08:c2:95:75:63:80:02:81:cb:
4f:b7:54:dc:9e:38:f7:b1:da:53:3b:b3:68:3e:2a:
84:39:6c:13:23:55:d9:8f:50:18:58:33:d5:c4:94:
28:8c:8b:6f:6f:f4:3a:f2:a4:3a:fd:ad:d0:cc:9b:
60:a8:ae:98:c4:55:aa:51:62:63:c1:9c:32:bb:ee:
a6:50:d1:18:b4:ba:08:9f:c0:78:62:c4:76:f7:99:
4e:6f:20:d8:01:d7:a9:42:84:ba:04:6b:d6:52:cc:
bf:ca:01:89:18:09:0f:b2:0e:ca:73:07:73:36:e9:
85:97:31:a3:88:be:b3:5e:07:30:8a:55:fc:62:64:
dc:89:4e:00:6a:1c:57:97:7b:c6:0d:c9:16:3d:15:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8F:26:D6:9F:8C:CB:C4:8B:F4:65:1F:F8:75:42:34:3B:62:BE:8C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d8b4cedd-99d2-40e5-8ff7-61c86a013202.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a2:b1:f1:c0:08:5c:ea:9a:af:e1:1d:bf:ac:d3:9b:67:fb:
39:2e:04:d6:d0:21:dc:e3:34:7f:b7:fa:8e:04:b5:48:06:a7:
62:39:b5:e7:6b:f5:fb:9f:76:b6:a9:bb:1d:27:a9:13:ef:23:
c6:23:7d:7c:b1:91:b4:a8:98:bc:9a:9f:a5:8c:ce:29:f7:b4:
73:c3:fa:d9:b1:4b:68:20:d8:c2:79:45:2e:11:fc:e3:f7:fb:
e6:b9:41:64:4c:73:3c:59:b0:26:ad:17:18:51:11:1c:ed:46:
5a:9e:35:08:77:ac:23:49:4f:d4:a9:3d:33:60:24:40:17:55:
c2:91:e9:8e:72:09:84:f3:28:f8:41:15:f2:7c:63:62:5a:94:
c6:8d:e5:a8:08:49:71:0e:44:34:59:35:59:3f:1e:2a:28:76:
58:07:c7:24:9d:a0:c7:54:bf:0d:11:75:b0:48:35:6a:f2:22:
7b:3d:13:74:75:26:52:74:c1:08:4f:22:87:5d:08:f1:65:77:
e4:8d:92:57:cb:ea:58:ed:41:d0:d7:b2:ad:01:ab:c4:c4:68:
51:87:8e:fb:a2:23:32:e5:59:aa:d2:fb:ad:10:26:b2:24:d6:
c4:59:58:7e:ae:a1:a7:9a:5e:42:04:5d:80:ae:de:0c:61:80:
13:74:57:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:37:27 2025 by rpki-client