Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ea011753-c1a4-43ad-b1db-2b617324afe7.roa
File: ea011753-c1a4-43ad-b1db-2b617324afe7.roa (raw, json)
Hash identifier: eQR7LgX9SXvxLgAPKRWc6tI+avy5ylOxoAyqBcZ/4vA=
Subject key identifier: 24:4F:2F:41:33:B9:43:24:73:B9:7C:5A:39:89:D9:A7:D1:D5:EB:17
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 166B28277FA11DF76CCBEE898FC4E650DF8CA85F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ea011753-c1a4-43ad-b1db-2b617324afe7.roa
Signing time: Tue 27 Aug 2024 00:00:00 +0000
ROA not before: Tue 27 Aug 2024 00:00:00 +0000
ROA not after: Tue 01 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:6b:28:27:7f:a1:1d:f7:6c:cb:ee:89:8f:c4:e6:50:df:8c:a8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 27 00:00:00 2024 GMT
Not After : Oct 1 23:59:59 2024 GMT
Subject: serialNumber=b86174e80b29e2763107ffbd5449e511de335cdbc342778b02260f755eb85ea0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:1d:0d:fd:e6:37:1f:8a:60:2c:a1:85:68:
dd:e5:24:29:ad:9f:96:4d:99:01:2b:5b:12:41:24:
b7:e8:b2:92:30:7a:6a:5a:05:4e:f9:10:de:e8:58:
ad:20:7b:1f:57:b0:04:8b:12:a1:90:a8:80:74:b4:
ad:5b:bf:1c:eb:d6:bd:25:28:ac:f0:fa:d1:63:90:
c7:3c:4f:e0:b3:57:98:12:de:b5:5d:ec:fe:cf:94:
97:21:d4:bf:a9:1e:98:bd:65:1f:a8:1d:05:45:5a:
d7:1d:01:c9:d3:5e:74:50:25:5e:60:51:90:28:5f:
e4:56:05:ba:c4:88:59:7f:0f:83:59:be:e0:2e:7a:
2c:ee:ef:39:65:1f:f7:08:cc:7e:08:1b:e4:a4:7e:
80:ed:fb:07:8c:72:ad:9e:32:c2:1e:78:bc:fd:13:
ec:69:09:0f:5c:dc:04:28:8c:b6:58:65:59:16:9b:
53:72:5b:65:c7:80:64:08:a8:9d:02:1f:6a:86:3f:
e8:5e:6b:77:0a:fa:59:33:7a:d4:e1:ae:f4:8e:d4:
de:c3:62:38:a4:0c:7d:f3:99:06:b5:06:05:30:d6:
02:75:14:ed:89:a8:73:13:fa:9c:be:dc:44:26:51:
2d:3c:a0:86:96:ad:9f:7c:56:33:78:31:7b:62:f1:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4F:2F:41:33:B9:43:24:73:B9:7C:5A:39:89:D9:A7:D1:D5:EB:17
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ea011753-c1a4-43ad-b1db-2b617324afe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4f:60:25:ba:1c:cc:b4:fc:0e:f7:16:1c:5d:2e:5d:2d:a5:
92:33:af:24:8d:bb:66:b7:dc:9c:69:0d:fa:19:1c:75:54:98:
0b:21:15:4f:0e:35:92:e9:f5:53:8a:6b:32:94:aa:ce:1e:00:
9e:01:48:9e:fe:f2:7d:f7:2b:81:e8:aa:14:e5:fa:7d:dc:85:
15:0c:21:ed:a9:32:0a:82:fb:28:bc:5e:06:9b:26:67:86:4c:
c9:36:3c:c9:43:47:ee:b6:17:e2:32:d1:dc:42:3c:8c:37:7b:
15:27:90:34:ee:65:7b:71:2c:73:7d:1b:0a:ed:7b:2f:b6:10:
34:6b:b7:38:64:e4:d3:50:0c:11:ca:5c:d3:7c:8e:95:ec:0b:
9f:1f:3a:c3:08:69:e0:91:14:34:27:e0:6e:7f:d7:84:4c:57:
d0:5d:b5:7b:77:f8:a8:08:80:b2:bb:ed:16:e3:cb:5c:9a:3c:
63:77:6e:b0:e0:79:86:0d:36:fa:72:4e:27:2a:7f:ed:53:9b:
a6:e4:db:40:1b:a4:4e:bb:2a:b8:3e:88:40:c6:88:d6:52:0c:
52:62:f8:f3:71:01:08:15:df:05:c0:16:69:cd:7c:74:b9:16:
c5:b1:89:98:5d:c0:ad:21:ee:a9:3b:8a:38:8d:cf:c1:8e:80:
1c:bb:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:40:58 2025 by rpki-client