Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/551fe599-d0cb-41c3-aca3-92574280f68e.roa
File: 551fe599-d0cb-41c3-aca3-92574280f68e.roa (raw, json)
Hash identifier: 4MF8iBlCMmt7VWjGNoxOndq6/AQpplce4PIGnUak1WU=
Subject key identifier: 50:31:11:5E:6D:13:1E:78:8F:CF:07:1A:26:9E:53:13:26:88:E8:E9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 71025D554F5F1C4E37719E7B0BB814D0945A35FC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/551fe599-d0cb-41c3-aca3-92574280f68e.roa
Signing time: Sat 29 Jul 2023 00:00:00 +0000
ROA not before: Sat 29 Jul 2023 00:00:00 +0000
ROA not after: Sat 02 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:02:5d:55:4f:5f:1c:4e:37:71:9e:7b:0b:b8:14:d0:94:5a:35:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 29 00:00:00 2023 GMT
Not After : Sep 2 23:59:59 2023 GMT
Subject: serialNumber=7c56e5cce05a9787cd76a3e2c08402606a96df7f29f772bd64a6f88698a48db8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:e4:b3:27:72:14:15:4e:96:c6:d2:74:6d:
ac:8d:ad:62:81:98:c5:cb:7a:b3:13:35:e8:9d:46:
40:7b:d1:46:b1:95:72:49:dc:43:22:8a:ca:88:38:
42:d2:f3:5b:a3:1c:cf:38:b5:79:dd:8f:bb:49:65:
64:f1:00:96:64:58:55:99:e4:a5:94:c2:ac:97:10:
71:8a:20:53:9d:b2:7d:d4:fa:c4:42:00:27:37:d3:
58:55:45:5e:7e:92:05:02:bf:45:a8:22:c6:cf:84:
2e:b6:e1:a3:53:d5:f2:33:3a:d7:da:01:23:32:97:
df:ab:ab:d3:9b:b3:9c:88:94:3f:f4:02:85:f1:ba:
07:b2:dd:8a:ea:9a:fc:c2:d0:51:62:64:4a:2c:cd:
d0:63:af:84:a3:77:f5:6a:9a:35:47:8c:d3:97:0a:
a2:f1:12:25:c8:10:b6:93:63:c1:56:7a:09:f3:bb:
98:4b:5e:25:66:79:cf:8e:ec:b1:d5:55:34:97:e1:
88:8e:07:54:6c:44:d3:46:e9:a6:f4:81:4b:0a:74:
3e:0d:5c:f8:fa:10:5c:1b:42:d4:56:e3:c6:db:23:
84:b3:71:32:ac:dc:68:c0:00:ef:1f:f2:40:7f:f5:
8e:74:3b:d8:7c:5a:70:51:5a:b5:9c:0a:24:8a:f9:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:31:11:5E:6D:13:1E:78:8F:CF:07:1A:26:9E:53:13:26:88:E8:E9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/551fe599-d0cb-41c3-aca3-92574280f68e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:b2:88:53:ed:6a:10:67:f6:eb:3e:61:6f:98:95:16:cc:50:
c0:bb:75:de:bb:f0:2e:a5:76:40:f6:21:18:09:b6:8b:70:1b:
de:84:0c:df:3d:f4:1d:4a:10:d3:b8:d6:51:fa:e2:4f:8c:aa:
6b:bf:16:23:2c:9d:26:96:39:a1:16:5a:95:7c:4c:75:0f:f8:
84:b9:36:88:2d:6e:f2:57:8a:19:46:f6:bf:07:f0:23:25:cd:
6f:5c:7c:8e:d5:0b:f4:95:8b:92:2b:68:81:2a:bc:13:e0:85:
4f:31:4e:db:4a:68:71:7d:5d:30:df:67:73:ec:34:ce:4a:9c:
72:3f:58:95:4c:93:58:2f:a7:3f:9b:2a:7a:c5:94:28:d7:18:
73:7e:43:89:6c:ba:29:ec:42:9c:11:d1:df:59:4d:47:37:4f:
36:9f:9f:ed:01:73:3c:b6:0e:f9:43:2a:81:7a:0c:d3:65:29:
b1:17:27:6c:78:91:f7:10:37:82:43:de:86:be:2a:26:e3:27:
3e:18:43:91:fb:0c:7b:10:ee:87:5b:ff:e2:fc:8b:3a:33:23:
dc:0e:49:eb:b5:f4:49:b0:db:e3:09:cf:7c:99:03:50:9b:0c:
b4:9f:21:44:cf:cc:61:92:a7:92:82:d5:6f:e7:2b:80:0f:00:
28:b5:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:36:19 2025 by rpki-client