Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/370140d8-9fd7-4cea-b099-0080294e208f.roa
File: 370140d8-9fd7-4cea-b099-0080294e208f.roa (raw, json)
Hash identifier: kjNUAmCVzElYM1846gprsdNVvo5PcX6qUyAYqY2RjR4=
Subject key identifier: 42:E3:22:0E:6B:59:F9:11:39:0E:15:AC:D1:74:7B:98:F0:95:05:5E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 52BC1421EC3B804D949EDD417607A05EB41EA4B7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/370140d8-9fd7-4cea-b099-0080294e208f.roa
Signing time: Mon 21 Aug 2023 00:00:00 +0000
ROA not before: Mon 21 Aug 2023 00:00:00 +0000
ROA not after: Mon 25 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:bc:14:21:ec:3b:80:4d:94:9e:dd:41:76:07:a0:5e:b4:1e:a4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 21 00:00:00 2023 GMT
Not After : Sep 25 23:59:59 2023 GMT
Subject: serialNumber=6c62f34472f05ec39f586d15242b209cc7c0e56cbbe4426a0c39c45ac5569a1f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:83:c5:fa:89:18:03:15:01:a2:48:dd:27:
ba:97:00:58:1c:a0:33:81:a1:41:4c:93:5b:e8:7b:
b5:56:5c:74:4e:2c:90:9f:c4:bd:b8:fa:2a:37:09:
40:d9:40:0b:0d:ce:3c:c3:27:dd:7f:34:05:87:8c:
e1:46:5f:fb:c7:15:a4:05:c8:cb:6c:b5:c8:72:d6:
75:c8:be:d4:ed:6b:4f:f3:aa:7e:f3:5a:b1:b9:aa:
7c:89:c8:92:17:23:d0:6b:4c:02:89:ea:7c:32:0b:
53:5f:f6:33:ae:4e:3a:32:6b:64:9a:bf:e7:63:78:
29:ff:bd:89:48:3e:35:55:ab:d5:e7:15:62:8a:41:
6c:61:49:77:60:25:ff:84:40:9a:21:9a:1b:0a:8c:
a5:6c:31:84:2b:a1:19:ed:13:c2:18:fb:a5:df:c0:
ea:21:41:07:b2:a5:10:51:cc:dc:a8:4e:7d:b8:41:
54:59:82:ca:a9:a4:3b:c1:57:cf:3b:00:0e:b1:16:
c1:91:99:be:38:b8:c3:15:f3:ff:90:40:b9:d8:4b:
dd:f8:d8:fd:9d:34:1f:83:84:1a:e3:04:48:97:55:
a1:53:9f:b4:2b:72:3f:22:a7:c4:90:75:3e:bd:d0:
ba:f5:14:93:f8:89:e6:dc:1e:02:3c:cf:90:97:de:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E3:22:0E:6B:59:F9:11:39:0E:15:AC:D1:74:7B:98:F0:95:05:5E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/370140d8-9fd7-4cea-b099-0080294e208f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:3d:45:86:e5:e2:6e:49:a0:e4:0a:21:f2:7d:1d:42:10:df:
f8:b8:13:b2:bf:13:95:0c:47:27:ce:bc:52:b2:d7:7c:9f:17:
ed:19:e7:d9:06:19:c0:95:6f:b9:a0:5c:f5:3a:67:a3:39:dd:
19:65:e3:2a:4d:5e:b8:21:8d:55:a7:f0:03:87:ae:9b:82:fd:
98:6c:be:85:a6:32:6f:29:5b:5a:07:4f:fc:ee:53:3d:b6:d8:
cb:00:e9:26:58:fe:96:91:88:c2:18:0f:3f:69:45:6b:f1:a1:
9a:c3:8b:5f:ea:f2:7b:63:2b:8f:44:f0:e9:3f:b5:6e:fd:b0:
de:0a:07:68:0c:f3:8d:f5:7d:e2:c0:52:c7:78:21:66:c3:aa:
49:3b:b2:16:1b:c1:91:9c:43:10:3b:df:ac:54:c8:09:83:18:
f1:b0:c9:93:a4:ae:a8:45:52:6c:1e:6a:92:19:a6:29:a0:a4:
21:0f:da:a7:17:80:8b:88:28:6a:db:3a:7e:a1:84:e8:a8:80:
ef:8e:d6:58:46:72:e7:9c:95:d8:56:1c:e0:31:ce:6c:ae:64:
8e:bc:eb:23:ff:ef:cd:e8:67:0c:61:8e:11:04:80:ce:8c:53:
2e:ec:3d:e6:bd:4b:17:f4:6c:32:7b:8d:6c:27:85:b0:da:bd:
5b:65:ce:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:03:40 2025 by rpki-client