Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f6e53b13-fc5a-4d50-8737-62d3b45a9ec2.roa
File: f6e53b13-fc5a-4d50-8737-62d3b45a9ec2.roa (raw, json)
Hash identifier: iwYuL4hr5I65yXUUBhSCq8511rrdrRfx2Uogi0XsLKA=
Subject key identifier: C2:12:8E:74:49:9B:5F:E3:BF:E6:77:85:4B:39:7F:35:29:B3:8A:9E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 289167F4509296512DB9ACF75E5CDC8FC06EDDE7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f6e53b13-fc5a-4d50-8737-62d3b45a9ec2.roa
Signing time: Fri 20 Oct 2023 00:00:00 +0000
ROA not before: Fri 20 Oct 2023 00:00:00 +0000
ROA not after: Fri 24 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:91:67:f4:50:92:96:51:2d:b9:ac:f7:5e:5c:dc:8f:c0:6e:dd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 20 00:00:00 2023 GMT
Not After : Nov 24 23:59:59 2023 GMT
Subject: serialNumber=212db261294e3f5b1164fa2cfcfc7a8eac67f6931a2bd87f2f333f128ccec24a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:95:ca:ff:14:c1:c0:7c:72:99:5a:68:9d:06:
f7:97:1b:03:a9:ee:7b:30:e3:9c:5e:5f:df:b6:db:
ae:33:0a:06:ed:ec:b4:ec:43:ec:c4:73:75:e0:cf:
f6:4c:fa:c5:1d:df:76:5e:b6:d3:72:18:e8:09:dd:
06:1f:c7:6f:5e:cc:28:4c:7f:37:5a:86:33:ce:3a:
4b:05:db:ca:54:1f:8f:3c:e3:88:6e:64:0d:3f:76:
82:62:c2:81:97:b5:e6:ce:90:4b:ad:c1:2c:2a:79:
1f:71:61:0a:df:42:ec:a4:35:00:c0:ae:25:c1:d6:
60:cb:89:03:d3:13:3d:8f:10:f0:41:7d:96:76:73:
b9:03:e3:4e:dc:e9:26:97:4a:c7:69:dd:27:a8:b1:
89:e2:c3:5a:c6:dd:54:2c:b8:1f:e2:21:4e:63:da:
7b:cb:c2:d8:54:cf:d8:1c:7d:4e:54:4f:ae:8e:42:
3a:d6:67:f6:34:84:1b:74:c8:59:11:14:86:46:c1:
e8:5f:2c:dc:7b:83:b2:c2:02:a9:ed:9d:12:59:0c:
fc:9d:ce:8e:bf:bc:eb:c5:70:f5:91:56:9e:27:15:
d4:d1:de:3c:bf:41:eb:90:6e:69:76:b4:c1:f6:68:
ab:b4:13:0c:02:ca:33:d7:bd:94:75:74:bf:c4:e6:
57:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:12:8E:74:49:9B:5F:E3:BF:E6:77:85:4B:39:7F:35:29:B3:8A:9E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f6e53b13-fc5a-4d50-8737-62d3b45a9ec2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b1:05:30:9c:16:c1:34:2e:73:9e:4a:db:39:74:b1:f5:ac:
77:5b:d7:a1:74:1c:87:3f:28:38:3f:cb:c8:75:06:0c:b2:7e:
4a:0a:7c:bd:e4:ef:82:5d:3c:35:31:7d:e3:f3:b0:75:97:0e:
62:84:ee:a7:cc:26:8c:55:7c:5c:b0:77:3b:66:69:29:4f:83:
bd:06:15:16:a2:d5:56:76:3c:55:5a:ed:a6:ef:98:90:9f:a1:
e2:a0:f6:78:86:56:70:5b:4e:e0:02:03:4e:4f:e2:42:5f:0a:
b3:44:cd:db:33:85:ff:11:e8:ad:c5:24:ed:72:67:d1:49:4f:
7c:37:b5:ec:11:f9:f4:2e:54:a3:54:90:72:f3:ab:d3:57:dd:
37:6d:96:f1:41:bd:4c:96:52:b5:e5:1f:5c:1d:10:97:1b:11:
7f:f0:99:a0:15:81:8f:2c:fb:31:d5:1b:97:85:0f:36:96:9b:
ef:f5:42:4a:79:11:40:41:88:01:5a:6a:65:59:08:d6:9d:c5:
db:6a:18:92:aa:d5:4c:08:9b:6a:46:78:d1:17:9c:18:24:1a:
d0:b8:06:1d:cf:70:9e:9a:bb:37:58:59:92:e7:1b:fd:d7:4c:
35:0b:3e:c4:1a:08:e9:8a:c4:ee:00:80:31:f2:d2:8e:3e:14:
7a:c9:46:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:48:32 2025 by rpki-client