Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/35a7416e-106b-48ae-a0ec-5ef0805bc107.roa
File: 35a7416e-106b-48ae-a0ec-5ef0805bc107.roa (raw, json)
Hash identifier: AnHlurjdBfMlSod7FDp6UeStrTNlascfrOgA9jtnowo=
Subject key identifier: 64:28:41:06:85:1A:C3:40:C3:A0:8F:70:51:74:CB:47:0A:28:6D:70
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 13F9AA337449F6F89215FDDBB65C15825287C8AA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/35a7416e-106b-48ae-a0ec-5ef0805bc107.roa
Signing time: Wed 16 Aug 2023 00:00:00 +0000
ROA not before: Wed 16 Aug 2023 00:00:00 +0000
ROA not after: Wed 20 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f9:aa:33:74:49:f6:f8:92:15:fd:db:b6:5c:15:82:52:87:c8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 16 00:00:00 2023 GMT
Not After : Sep 20 23:59:59 2023 GMT
Subject: serialNumber=28d876c43bfc9ed648be8a08ab799738201eb77f644e53f16a68d27113cd87c9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:18:a3:f4:b7:d3:57:d6:98:f7:e0:cd:ed:0a:
31:a1:7d:43:66:ff:70:53:62:cd:c7:dc:e1:d5:4c:
99:c7:9a:6a:da:21:92:0d:7a:96:54:9f:eb:e9:14:
4c:5c:87:f5:fe:8c:d1:54:c0:b9:b4:aa:fb:c2:44:
b1:35:32:6c:96:90:dd:f0:30:99:94:9e:4d:b9:87:
e2:cc:6a:2e:9d:34:3e:60:49:cf:c0:03:7a:78:22:
6d:42:b1:4c:e8:a7:a6:b6:c1:f4:a6:23:13:68:78:
b7:e1:5e:4b:1e:99:8e:e7:f8:e1:d8:27:95:3f:ac:
9f:20:2b:8a:7f:d0:54:cd:ea:4a:c4:13:1d:b8:3b:
ae:26:c5:c5:10:bc:1c:81:ee:a8:ea:e3:4d:b9:a7:
2d:ed:0f:29:f1:c2:a6:8b:d0:86:19:bd:b8:53:39:
d7:f4:2d:5f:8d:82:3a:de:30:77:7c:4d:e2:21:f2:
6a:22:a1:dd:49:e3:26:48:9f:3d:bb:b9:2c:8d:c3:
28:7e:98:99:5f:9e:b2:ee:91:fa:38:e5:aa:1f:5b:
e5:03:3d:dd:43:23:8b:00:06:b7:8a:3d:c4:21:40:
0c:55:ef:2d:06:b0:fc:90:1a:45:f6:06:09:5c:0a:
ff:c4:b6:b3:5b:e8:e0:5f:dc:8b:7b:46:8f:42:d8:
7c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:28:41:06:85:1A:C3:40:C3:A0:8F:70:51:74:CB:47:0A:28:6D:70
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/35a7416e-106b-48ae-a0ec-5ef0805bc107.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d2:90:66:7c:65:5d:ea:98:76:25:f6:51:4b:e8:d1:94:db:
84:9e:b3:f4:1e:90:55:1e:46:0b:a2:1a:97:7b:6f:6a:f0:c3:
ed:b3:ac:82:2d:a1:77:6a:e0:f4:12:61:15:f5:fa:e0:50:df:
f4:6e:12:6d:c2:0f:f6:a2:4c:7c:3c:5f:18:48:84:a8:0f:a0:
3b:4b:63:20:5e:8f:9d:9c:ec:58:85:ef:9b:b2:68:3a:86:99:
d4:b5:c9:ef:b5:c6:e3:0a:c8:9a:ab:38:b2:ef:ba:c7:d5:7f:
62:72:42:f4:8a:53:00:c9:f5:08:91:fb:d5:ac:87:0a:3a:83:
16:8a:70:38:3f:04:1f:1d:d6:e2:d2:62:91:1e:56:cc:8d:a9:
4d:38:47:22:8b:00:82:6a:6f:e1:a1:49:a5:1a:e9:3f:e2:99:
6a:43:3a:19:9b:91:4a:a2:0d:f4:24:01:2e:a2:65:53:3e:56:
62:4c:84:9b:44:29:a6:7b:66:37:0d:18:52:74:82:25:b5:81:
e2:76:22:ee:7a:86:fc:c6:97:c4:21:53:f1:78:07:c9:29:5f:
06:58:c0:5f:53:04:ea:28:f8:ba:c0:05:8e:e2:44:7c:58:2b:
6c:7f:d1:08:50:38:b8:fd:c1:a4:d3:61:d0:66:8a:24:b3:cf:
50:68:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:27:57 2025 by rpki-client