Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/834a361d-54dd-486f-bc92-51878c4c6df6.roa
File: 834a361d-54dd-486f-bc92-51878c4c6df6.roa (raw, json)
Hash identifier: bIhsdtrYgbI2IjZBIFgHInKs4L5yo6njHDfp10jIvms=
Subject key identifier: 5F:06:BD:09:08:D5:B8:6C:1D:1A:44:E6:F3:8F:66:D3:89:8A:0F:6F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6DE5F90445FE385E16A461F771FE8DB52082993C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/834a361d-54dd-486f-bc92-51878c4c6df6.roa
Signing time: Sat 09 Sep 2023 00:00:00 +0000
ROA not before: Sat 09 Sep 2023 00:00:00 +0000
ROA not after: Sat 14 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e5:f9:04:45:fe:38:5e:16:a4:61:f7:71:fe:8d:b5:20:82:99:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 9 00:00:00 2023 GMT
Not After : Oct 14 23:59:59 2023 GMT
Subject: serialNumber=33387795bfcf2b57f772e276864728bb007b276d4a046490f6cf7ade6fb878d8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:12:9b:a4:a2:de:86:52:5d:c3:39:a4:b2:1b:
db:24:42:9f:03:6a:e5:26:12:d5:83:69:94:41:28:
d3:84:40:b5:c8:6a:d6:d0:8b:78:71:41:54:60:ec:
f6:1d:36:42:de:99:2d:71:0c:8e:a3:6c:f4:74:05:
45:95:bf:58:fd:d8:6a:26:6f:bf:f9:a7:1f:65:da:
8a:20:dc:15:80:f9:da:65:7b:e3:a6:9f:a3:7c:1d:
8a:f2:39:37:63:73:1e:09:6c:84:9a:b0:ee:cd:ff:
66:47:6e:57:3d:10:e2:82:42:7b:f0:e2:c0:a6:97:
22:c5:94:66:6b:5c:7e:9d:a7:4c:59:f8:cf:bb:14:
8e:3d:db:4d:c7:54:f8:64:b4:8f:35:43:70:11:a0:
3e:f0:84:1e:a1:7e:34:15:6c:ce:57:e7:c8:a6:df:
d3:c6:2b:3a:9f:2e:8d:7b:f8:67:ca:50:34:df:2b:
a6:f7:8c:6f:ee:b1:e3:ae:ef:c1:19:b9:24:cb:df:
30:a9:7e:e3:e3:5b:d3:ba:89:60:bf:a9:49:2b:ff:
b0:cd:5a:7e:7d:2e:5d:44:8b:f1:35:71:00:54:c0:
4d:f7:34:d4:82:07:07:c6:ad:cf:f9:65:55:46:24:
87:7a:91:e9:b7:d0:49:9c:fb:c8:50:d2:92:03:98:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:06:BD:09:08:D5:B8:6C:1D:1A:44:E6:F3:8F:66:D3:89:8A:0F:6F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/834a361d-54dd-486f-bc92-51878c4c6df6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2b:31:47:5e:9b:fb:41:d0:c6:f4:12:a5:79:77:52:8b:a7:
4b:9d:d9:32:0b:37:e7:2c:86:b0:9b:ae:df:46:f5:96:61:d0:
c1:f7:38:51:ff:86:b3:74:08:fd:06:c7:b8:98:9f:8c:b8:5b:
0e:67:6d:21:c8:c2:13:53:ac:36:fb:b6:da:13:7f:70:3e:16:
8d:79:dd:32:21:13:a1:3f:b8:2f:38:d7:d6:f2:1a:78:3a:14:
ed:02:ab:71:d1:cb:8f:40:f2:ab:75:04:1b:33:eb:bd:89:a8:
0b:b8:2c:a8:24:94:83:74:92:e6:51:88:cb:67:78:99:77:11:
5e:28:31:75:c6:5a:bc:6c:ec:5b:53:9c:27:f5:e9:7a:1d:87:
67:95:9f:47:14:32:6b:6c:29:36:4a:00:be:a0:f3:11:d4:9c:
c8:09:01:18:33:f7:2a:0c:46:93:3d:9f:98:f2:55:b3:48:66:
e4:0d:59:97:b3:db:73:db:70:95:71:57:02:44:9d:22:83:0f:
cf:0a:36:c1:2f:5f:da:59:70:a7:b5:9d:eb:b0:84:e3:59:17:
e0:31:bd:10:9a:b3:b6:d8:82:75:db:75:44:8a:17:67:f6:f5:
e5:b0:8b:f6:47:0d:be:ae:4f:c9:4f:36:66:99:c1:6f:29:11:
bc:ec:ad:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:57:43 2025 by rpki-client