Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe08b186-0aa4-4fd0-a6f5-6bc673cb3b57.roa
File: fe08b186-0aa4-4fd0-a6f5-6bc673cb3b57.roa (raw, json)
Hash identifier: Xp5Vmx0QR3R7nMTAbZNKNmMhVcSdO8pTGpbfZKQPBb8=
Subject key identifier: EE:69:7E:EA:67:90:82:0F:19:17:2B:B3:97:02:01:3A:77:08:A4:C0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 631C43757C33FEC8B012B3C84DA4A797C570037E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe08b186-0aa4-4fd0-a6f5-6bc673cb3b57.roa
Signing time: Wed 06 Dec 2023 00:00:00 +0000
ROA not before: Wed 06 Dec 2023 00:00:00 +0000
ROA not after: Wed 10 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:1c:43:75:7c:33:fe:c8:b0:12:b3:c8:4d:a4:a7:97:c5:70:03:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 6 00:00:00 2023 GMT
Not After : Jan 10 23:59:59 2024 GMT
Subject: serialNumber=36fc6f9057c804f58645dfec602c422e248f349111f5d1a99b93a51b1b02877c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a1:27:4d:6d:7a:ba:82:05:57:ed:75:f3:80:
2a:db:cf:cb:68:3c:ca:98:8b:a0:71:6b:39:a0:c7:
56:11:2a:d4:a1:48:6c:91:9e:6e:2d:4a:d5:49:0d:
9d:f7:88:23:8c:f8:ab:bf:6e:27:3f:52:14:24:fb:
3c:4c:1c:91:ef:0b:75:84:4b:ed:f3:61:35:86:3d:
66:8c:c2:f1:69:cd:a5:fc:02:f2:41:53:5c:59:d3:
94:7f:0e:b3:66:67:d0:d6:ec:47:d6:3b:71:5c:10:
4e:eb:5a:af:44:e5:52:8c:43:5b:f0:ab:2a:e3:e5:
75:67:38:94:f0:e2:a5:d1:0e:3b:0b:7e:9e:5e:ab:
b8:66:ba:d4:cc:80:91:d8:80:cb:eb:00:6f:dd:92:
9d:81:25:12:69:81:ba:aa:48:bc:78:e8:42:0e:74:
2a:3f:dd:24:c7:26:3d:e4:0a:88:6d:ce:a3:84:2e:
25:bd:ec:d2:71:c3:89:52:f8:05:fb:01:9d:ed:5d:
2b:a4:5d:b6:1b:1f:33:56:b5:1b:9b:75:d0:76:f9:
3a:4f:34:77:e6:7b:ee:0b:8b:41:72:d6:f9:69:5f:
f3:7b:4d:d0:d3:06:64:36:91:eb:e6:6c:08:0c:42:
73:0d:47:40:e8:99:f3:2e:32:81:d6:bd:86:8f:4d:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:69:7E:EA:67:90:82:0F:19:17:2B:B3:97:02:01:3A:77:08:A4:C0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe08b186-0aa4-4fd0-a6f5-6bc673cb3b57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
26:94:27:50:87:27:10:62:ee:b3:ad:d9:5b:2f:77:78:7a:db:
f0:80:77:f6:bc:ea:47:1c:3c:8c:02:68:d7:4c:71:2f:0b:e6:
df:98:25:bc:e1:24:06:87:54:d8:a9:a2:8a:ce:d1:4c:b5:fb:
ff:df:79:7e:f3:04:ee:28:d7:61:5f:fd:88:57:03:d4:3a:05:
e2:4f:68:28:f5:05:f7:13:0b:c5:41:d6:8e:9d:0d:61:40:2d:
19:6e:5a:b2:f3:e3:57:10:d5:ab:36:ad:25:a6:14:b2:e5:7e:
7f:79:27:6d:06:17:c3:6b:7e:23:26:2d:16:43:78:7e:0b:c6:
14:a3:d4:d8:b3:a6:63:26:f4:ee:26:97:23:86:32:08:66:9d:
51:6b:7e:09:08:fe:73:52:6a:af:22:54:db:ed:15:c0:66:0a:
da:5b:50:1f:90:e5:e1:6a:95:e5:45:76:9d:98:90:48:50:67:
1e:69:ac:33:69:b4:a9:9b:38:c1:0d:c4:65:d2:44:db:15:47:
20:94:f8:d0:2a:b9:8f:10:49:4b:41:c4:0b:56:b9:45:1d:bd:
a7:bc:7d:e5:21:12:65:bd:e4:73:61:82:5b:a6:91:99:20:a7:
9f:f8:e2:68:81:78:b6:84:d4:14:3a:bc:c6:77:d4:f4:3e:4b:
5b:78:d8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:50:40 2025 by rpki-client