Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f2095c1d-63ca-4ac7-adbe-b40d89349593.roa
File: f2095c1d-63ca-4ac7-adbe-b40d89349593.roa (raw, json)
Hash identifier: PDJY1M74TF63c6BFk8auYK1+asAwIpMRAjbQ3NipItI=
Subject key identifier: 62:F4:3E:06:E0:CA:0F:BC:EC:AE:FE:D0:1C:93:68:E6:D2:C4:C7:94
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 21C21A98167520BF4779E82B29D4ECF1C4A1EF70
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f2095c1d-63ca-4ac7-adbe-b40d89349593.roa
Signing time: Sat 10 May 2025 20:53:16 +0000
ROA not before: Sat 10 May 2025 20:53:16 +0000
ROA not after: Sat 14 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c2:1a:98:16:75:20:bf:47:79:e8:2b:29:d4:ec:f1:c4:a1:ef:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 10 20:53:16 2025 GMT
Not After : Jun 14 23:59:59 2025 GMT
Subject: serialNumber=f6c87a638b0c44fe7483f7acbebb8d8764519dad234937f2453fd7ec2f2cb8b2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:86:a8:d0:6a:5e:aa:79:29:f0:b8:d9:b2:
23:9a:61:8f:8c:29:70:20:cc:6e:2f:b4:b5:25:4a:
f6:98:db:e0:93:d4:25:83:b8:4a:f0:ee:37:b3:f5:
ab:f5:da:cc:20:fb:83:50:31:89:d2:c7:ec:8e:af:
1e:ed:b2:e4:21:0e:4e:c2:93:cd:71:78:2b:ee:2d:
6c:2e:85:06:51:f3:cb:cd:4d:0f:14:0e:09:cc:8b:
24:0e:e3:c0:6f:db:25:fd:5c:2d:cc:ed:b5:2d:b4:
25:d2:13:69:50:85:2d:a3:0b:2c:9c:66:8a:73:a7:
21:22:62:a7:a8:51:06:07:c5:06:62:f9:a9:fb:b2:
fc:3f:97:38:9e:9b:ca:ee:72:bf:45:ce:e7:02:7a:
b3:c1:fb:f7:5e:b8:fc:95:3c:01:a2:10:d3:aa:1d:
bc:a0:50:30:de:f1:39:c2:b1:f5:45:41:7c:20:7b:
62:91:f4:ed:1e:0f:67:8f:29:6b:80:6a:82:f6:db:
92:f1:2c:7b:f3:40:d1:09:49:bc:63:c4:fa:6c:9f:
df:95:5f:32:5c:58:24:c2:44:54:b7:87:d1:b1:65:
04:e1:4b:f7:71:02:bd:8d:91:db:a3:f7:e6:77:1e:
0d:0b:ec:ee:8d:e2:3f:2d:43:de:07:4d:38:65:5e:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F4:3E:06:E0:CA:0F:BC:EC:AE:FE:D0:1C:93:68:E6:D2:C4:C7:94
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f2095c1d-63ca-4ac7-adbe-b40d89349593.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:93:95:8e:10:56:30:6d:05:d6:c1:a3:88:e9:02:21:1b:99:
b8:11:52:2b:47:fd:24:c4:ac:18:d6:b3:5b:76:0b:e3:00:9b:
b3:29:5d:9e:e9:5e:69:a0:27:3b:9b:72:1d:cb:c2:4c:95:53:
48:4b:4c:ac:6a:ba:85:19:c9:00:a4:70:ce:a0:b7:da:04:1e:
a0:09:66:e5:94:ea:87:31:6e:3e:4f:8a:51:62:7f:eb:9a:89:
5c:60:e8:1a:47:01:7a:9e:14:75:f6:d4:62:ce:97:e2:fe:77:
d4:bd:f4:0f:38:fa:dc:5c:d1:6c:ac:20:5c:6a:d5:e2:3b:e8:
88:27:b9:f8:d2:f9:e4:57:b3:31:95:9a:92:1c:74:da:ef:44:
24:e4:25:6d:62:17:e5:b7:e2:51:8e:2d:b8:bc:f1:52:26:0d:
e0:6a:01:cc:d4:db:07:cf:8d:88:9a:ef:69:d3:45:0c:11:6b:
29:ed:8e:bc:7a:96:bf:28:f7:f0:24:42:e4:1e:c0:b2:e8:b5:
ee:54:35:cf:81:d2:10:ed:0f:3c:3c:8e:0c:18:20:cc:c1:fe:
41:74:eb:ea:c9:49:1f:ab:ac:c5:1b:26:bf:9d:09:80:fe:60:
e8:c1:6a:bf:f3:9a:25:88:4b:3b:38:47:c2:b6:a6:69:30:a5:
53:b6:fd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:08:10 2025 by rpki-client