Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e6c26f6c-25e4-4ca0-9285-4bcac496b142.roa
File: e6c26f6c-25e4-4ca0-9285-4bcac496b142.roa (raw, json)
Hash identifier: rhOH1qlelkV7ezCGbZxoDJKbnzjbbgeZsxticXNmdZY=
Subject key identifier: 1E:4D:BB:29:5F:76:81:23:0E:83:C0:08:C4:72:F7:E0:AE:50:BF:86
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7D885DE67A8B4B69DD479C4D08484F08A0955EA7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e6c26f6c-25e4-4ca0-9285-4bcac496b142.roa
Signing time: Fri 02 May 2025 07:18:18 +0000
ROA not before: Fri 02 May 2025 07:18:18 +0000
ROA not after: Fri 06 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:88:5d:e6:7a:8b:4b:69:dd:47:9c:4d:08:48:4f:08:a0:95:5e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 2 07:18:18 2025 GMT
Not After : Jun 6 23:59:59 2025 GMT
Subject: serialNumber=861cae805f5b1164aaa6fbbda7d9a324f7ba4662106af9558dbb549e658d0cc6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:d3:dd:ee:7a:44:3f:43:c3:85:62:b2:7f:
78:e2:4c:95:90:5b:3b:e1:b9:01:27:0d:4a:2e:67:
fe:ef:5a:8e:61:96:e0:0b:98:e0:85:68:5e:ce:ba:
ec:c0:5c:cf:fd:62:54:df:ee:d5:fb:1d:be:1e:af:
9a:5b:93:7d:86:3d:eb:e0:a1:1d:65:85:e3:50:d4:
24:66:e5:f0:5d:1e:21:dd:5f:8c:c8:bf:a2:10:90:
04:b1:2e:a6:fd:96:b0:ed:c0:e3:35:9f:76:5d:2b:
41:46:cd:48:b7:48:d5:bf:f7:2f:00:26:fd:0a:86:
78:f9:e6:db:55:73:e0:34:58:5e:e6:dc:cd:d0:92:
06:9d:ca:e7:77:34:3c:68:49:c2:d1:4c:27:fc:0a:
51:ae:1d:8d:03:bb:e1:2e:24:9b:0d:7b:bf:19:3f:
d3:6a:8f:72:51:be:d0:af:0c:05:10:77:94:b2:be:
a4:f4:65:a7:2b:e3:eb:ba:a4:4f:a8:9f:a0:7c:06:
5f:b2:fa:3e:0d:b7:47:ff:75:0d:8d:ea:19:1d:51:
62:cb:93:13:ce:f2:bc:74:c9:17:21:76:e5:2b:2f:
41:16:db:1c:fa:e5:13:88:75:1c:f4:22:82:3b:f4:
29:22:3d:4d:cf:4e:91:4c:05:a1:d9:a6:1e:f0:0a:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4D:BB:29:5F:76:81:23:0E:83:C0:08:C4:72:F7:E0:AE:50:BF:86
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e6c26f6c-25e4-4ca0-9285-4bcac496b142.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ca:7e:83:bd:8c:78:aa:47:3d:75:27:c9:35:e4:30:c2:91:
72:f5:bb:b4:c0:6d:47:7d:49:76:fd:b2:36:82:9e:25:bb:6e:
8a:54:7c:80:81:f4:64:7f:17:d6:27:fa:81:53:ef:d9:99:55:
5c:14:10:bd:b3:f9:ca:43:13:73:02:2a:28:a0:d8:21:63:2e:
cf:33:9b:83:74:ee:6e:dd:ca:db:b8:4f:2d:6c:9f:81:6e:3b:
41:44:56:35:93:b7:56:e3:0a:46:cc:80:f0:0e:21:b8:ce:03:
7d:e2:80:dc:90:70:83:a7:71:24:25:56:65:2d:1d:25:b0:0b:
93:43:b8:49:16:b7:91:bb:76:2e:98:da:fb:01:ce:65:00:16:
bb:e0:98:aa:4d:05:b3:17:3e:72:bc:cc:37:3d:72:9f:ad:75:
f1:23:54:ca:f9:73:c8:91:5a:c8:79:f3:52:1f:3e:17:f4:b3:
06:90:67:cd:01:c0:d8:68:c4:eb:bb:96:1e:11:ba:cf:58:6c:
36:6d:26:12:eb:96:10:39:57:bb:a9:86:be:bf:f1:45:96:cf:
06:45:ed:21:87:f7:d5:44:ba:37:b2:a3:b4:76:7a:11:a4:23:
13:97:d3:1b:14:b6:39:01:65:4e:4f:43:93:ff:60:01:ac:f2:
b9:b7:2d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:08:14 2025 by rpki-client