Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ff60ee52-e2e4-4eb0-af50-ac29e16d6bbf.roa
File: ff60ee52-e2e4-4eb0-af50-ac29e16d6bbf.roa (raw, json)
Hash identifier: V92V5r/xsx++y0eZGwFQQV6fbH/vO9WfLm+BQ5lwsAQ=
Subject key identifier: 4E:41:54:80:BB:34:79:2A:3F:6C:DF:FF:E8:11:BF:F3:9E:C0:0E:64
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7E433F83FAE9F17CBBF6DA24C5F73E62B68FC546
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ff60ee52-e2e4-4eb0-af50-ac29e16d6bbf.roa
Signing time: Sat 03 May 2025 16:58:19 +0000
ROA not before: Sat 03 May 2025 16:58:19 +0000
ROA not after: Sat 07 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:43:3f:83:fa:e9:f1:7c:bb:f6:da:24:c5:f7:3e:62:b6:8f:c5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 3 16:58:19 2025 GMT
Not After : Jun 7 23:59:59 2025 GMT
Subject: serialNumber=b7c36be8a198bcd1549c818005fc64ca7230ce7c84c2b997f4c39da1f7178529, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0e:e2:3d:77:c6:66:10:58:5c:e7:b9:53:8a:
77:d5:66:af:08:05:af:0a:81:80:f6:2f:56:e2:c2:
0e:1f:c6:33:6c:f7:b1:ff:0e:5e:aa:0c:c1:11:11:
bd:67:ee:da:fa:9d:2e:e7:3b:6a:74:ba:57:47:cd:
07:9a:2a:ae:69:96:68:98:dd:b4:6e:79:16:d9:23:
ab:71:bd:14:06:67:92:98:fd:b9:8e:81:e3:e8:a8:
68:5c:3b:fb:15:b4:da:c4:9f:01:cb:e7:7f:b5:a9:
ff:1e:30:36:eb:dc:17:45:1a:b7:05:ac:d9:9b:83:
e6:a4:61:ae:9e:b0:ba:31:d6:0f:4c:7f:23:78:2a:
4a:2b:fd:61:92:97:30:15:81:36:5c:d7:4b:e8:33:
68:74:b3:01:f8:d9:41:2a:94:31:2a:41:0b:b9:8e:
9b:46:89:15:8d:e9:1c:f3:05:3b:4b:1d:06:55:bb:
da:6c:b6:fb:e0:01:fa:dd:12:23:1c:f9:70:1b:8e:
4c:3c:e2:ea:47:45:5d:97:a0:81:62:f2:12:ee:4f:
39:73:4a:6c:31:8a:7a:80:15:1f:28:54:99:32:82:
06:74:86:9d:5c:a6:91:26:12:c6:53:15:1f:55:c3:
f0:22:f1:2f:7d:48:a0:aa:cc:ce:c1:78:da:33:10:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:41:54:80:BB:34:79:2A:3F:6C:DF:FF:E8:11:BF:F3:9E:C0:0E:64
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ff60ee52-e2e4-4eb0-af50-ac29e16d6bbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:3c:c3:16:53:54:bd:6e:79:ff:02:21:36:91:70:94:61:8b:
ec:85:e2:56:dd:8d:36:52:67:ea:b8:71:61:c5:f6:a8:8e:dc:
93:0f:38:61:91:b2:91:4c:6d:e8:38:2b:56:3d:57:b2:fa:81:
4f:9f:73:a1:ef:85:dc:e8:a6:91:59:09:99:1e:07:42:95:72:
ae:70:7b:4e:aa:6a:06:88:98:5b:0d:bf:6f:22:a6:74:46:b2:
05:36:5c:e1:a5:f5:fd:c2:8e:b0:6c:72:3f:fc:21:3b:79:c7:
90:39:0a:ef:54:18:38:21:9e:0d:d7:9b:52:f1:77:b1:54:c6:
08:48:89:63:bf:e7:c6:71:87:4e:63:d8:dc:30:af:0a:64:17:
f2:19:70:e5:16:bf:8b:f3:7d:63:2c:3f:50:31:b3:5a:9b:24:
91:87:0e:a5:83:19:c0:b4:a2:5e:b2:b3:b4:4a:d6:73:70:77:
9d:b4:a4:2a:7a:93:c2:1c:9f:8a:a9:8a:e5:77:93:88:f5:9c:
e9:54:25:d1:7c:c2:1f:c6:44:30:f3:bc:0f:9a:5a:6e:54:dd:
73:ba:a8:b3:fb:86:b4:ac:f2:49:dd:e1:b5:9f:3a:7b:61:dd:
b5:fb:f0:e6:bb:97:23:a5:28:80:9b:e5:dc:e2:7f:81:f4:26:
70:69:75:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:36:22 2025 by rpki-client