Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2b907fd3-1dac-4101-97fe-c88be74a93bb.roa
File: 2b907fd3-1dac-4101-97fe-c88be74a93bb.roa (raw, json)
Hash identifier: jJDtLAjUtk99oRSq7DNvDapUEphGTUFHdJIMrh0oArU=
Subject key identifier: D0:02:2B:D6:04:27:50:84:F7:AA:58:C6:52:F9:C4:22:80:02:AB:72
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7784868B6BB8BBB817B0E62CECA5D1244C17125E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2b907fd3-1dac-4101-97fe-c88be74a93bb.roa
Signing time: Wed 28 Jun 2023 00:00:00 +0000
ROA not before: Wed 28 Jun 2023 00:00:00 +0000
ROA not after: Wed 02 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:84:86:8b:6b:b8:bb:b8:17:b0:e6:2c:ec:a5:d1:24:4c:17:12:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 28 00:00:00 2023 GMT
Not After : Aug 2 23:59:59 2023 GMT
Subject: serialNumber=229839a15d18e8a534f08db09cb683cb41d08a8e268e0635eaa79a0403b75058, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:b8:da:37:82:4a:5a:72:cf:5e:14:36:92:
ea:01:93:90:0f:26:cb:bb:86:7f:bb:02:b5:50:8d:
d4:bc:17:a0:71:91:02:50:a4:f5:3f:6c:7f:5f:82:
03:39:97:43:e1:87:37:79:32:b7:e6:2b:41:eb:d1:
59:0f:b8:46:c9:76:36:83:e8:b0:a7:e4:8c:8c:4e:
e9:60:bd:97:e4:58:48:8e:9f:73:ef:a9:ce:af:fd:
5b:e2:87:bc:12:ad:c6:26:e7:e9:f4:f5:0a:96:ca:
0d:a9:ee:c9:6c:5a:4b:b5:44:b2:4f:a6:fa:a4:08:
1d:7a:40:cb:69:da:4e:b5:20:97:37:08:e7:ac:58:
c2:e4:01:08:ae:18:66:aa:08:06:f9:0c:ba:9a:e0:
f5:a2:af:b2:2e:3f:21:74:99:ed:c7:ba:6f:d5:78:
bf:cf:06:ec:a7:bd:cf:a7:30:09:59:4f:cf:f1:b9:
1b:20:5a:6f:c1:6c:8c:d9:b9:fa:46:71:bb:d7:16:
5f:4b:ac:e9:3d:10:04:63:a3:61:9b:78:26:64:68:
e4:ee:c2:89:6b:51:ed:a1:5d:87:f4:de:4f:9a:2f:
2d:c1:71:93:d6:68:2d:74:a7:9f:67:68:7e:c0:28:
e3:c9:a4:f9:c1:2d:18:4b:1b:d9:59:18:87:57:00:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:02:2B:D6:04:27:50:84:F7:AA:58:C6:52:F9:C4:22:80:02:AB:72
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2b907fd3-1dac-4101-97fe-c88be74a93bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
98:74:bb:40:98:77:3d:54:e8:2b:20:13:a9:c2:db:d9:5e:63:
64:9e:26:6b:42:ae:6e:7a:23:6a:54:77:03:52:d0:07:41:32:
73:35:84:7c:19:2f:bc:69:87:79:96:bf:d8:b2:e3:85:26:5d:
0c:4a:2d:43:88:5f:ce:0d:bf:cb:b3:60:b1:0a:ec:28:bd:e9:
7f:09:c9:05:49:9a:5a:c6:d4:63:65:c2:ef:f0:73:e0:f0:c9:
28:25:90:6b:83:aa:1b:2b:d1:de:36:55:64:10:49:1b:74:87:
fe:ae:40:6b:99:67:53:89:8f:63:ca:ab:01:8e:84:f6:15:3d:
c6:d2:88:ae:2f:17:ee:4e:42:a0:71:ff:47:9f:f4:28:2f:20:
1a:25:4a:e9:d8:28:d0:aa:23:a3:e1:2e:00:4d:d0:4e:a7:76:
ef:f1:8e:be:51:e8:1d:98:44:ea:82:19:32:39:50:b0:0d:37:
29:cb:e1:b7:bf:96:9a:dc:e1:1c:cd:f7:86:7b:58:b0:ba:da:
67:b8:9c:15:12:54:d8:95:a4:ae:56:46:ff:4b:49:d5:4e:dc:
5a:35:76:f1:b8:eb:2f:fe:c6:f0:8a:eb:2e:56:82:6e:84:7f:
b9:3c:e3:a9:50:96:5f:80:2c:ae:54:1c:b0:f3:fa:cc:33:a2:
bf:60:9f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:26:23 2025 by rpki-client