Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a2e80d6e-b58f-44fc-8599-4508a2ff1969.roa
File: a2e80d6e-b58f-44fc-8599-4508a2ff1969.roa (raw, json)
Hash identifier: 7803WryPx96QaxLSmOrF7S6+lJ/8FsWLcQoJTTxjlcg=
Subject key identifier: 1E:48:AB:28:6D:CF:19:EB:56:E9:CE:54:DB:24:EA:A6:06:6F:74:97
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1D0E2C4CD5CB7FE126BA2ECA17340721AED9E060
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a2e80d6e-b58f-44fc-8599-4508a2ff1969.roa
Signing time: Tue 12 Sep 2023 00:00:00 +0000
ROA not before: Tue 12 Sep 2023 00:00:00 +0000
ROA not after: Tue 17 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:0e:2c:4c:d5:cb:7f:e1:26:ba:2e:ca:17:34:07:21:ae:d9:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 12 00:00:00 2023 GMT
Not After : Oct 17 23:59:59 2023 GMT
Subject: serialNumber=89a3b10a5be0d63fcd731bad9ffc388b7b72661df68b1f85b34e10215cd7e5df, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:dc:75:c4:26:89:30:61:6d:5d:07:a1:de:
3e:38:a6:ef:fb:de:c7:fe:22:ff:be:e4:11:69:2e:
b1:23:01:67:99:4c:9a:a1:54:af:c4:c9:ec:74:62:
74:0c:e9:ca:b4:5a:d9:1e:c8:50:66:03:c8:b4:38:
f5:9c:b9:a5:8c:16:d0:40:a5:55:49:e6:37:63:a5:
62:51:68:71:47:bc:45:c5:4d:41:e6:2c:7b:fa:2e:
b3:8b:c5:6d:8a:02:20:2d:35:4d:ac:e1:28:60:62:
29:09:ed:0f:e8:02:fd:14:8d:c6:9a:de:0d:61:58:
df:26:61:92:06:7d:f1:f8:d5:a7:b1:0a:33:d6:9b:
d6:0f:27:52:1a:5b:7e:a9:a8:e1:05:aa:0b:bb:fc:
01:83:23:81:4b:14:a7:4f:1d:74:b8:5b:a8:1d:d0:
34:a5:a9:7c:a1:46:11:bb:35:a9:df:c0:c1:b6:64:
95:ee:a2:98:cb:cb:09:fc:39:8d:37:6c:8b:07:ed:
3e:1e:5d:b2:16:ad:ce:b5:d1:14:fc:53:32:c8:ac:
57:a5:49:3b:b7:97:fe:ce:6d:b2:39:62:37:b7:ca:
c3:78:b0:c3:3f:d2:6c:ac:68:99:0b:24:74:c8:80:
79:37:e9:c9:f6:d5:2e:42:cc:10:06:9b:45:3a:3e:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:48:AB:28:6D:CF:19:EB:56:E9:CE:54:DB:24:EA:A6:06:6F:74:97
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a2e80d6e-b58f-44fc-8599-4508a2ff1969.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f8:0b:16:fb:c9:f4:7e:93:4d:c5:68:3d:5d:d1:6f:1c:08:
cf:02:ac:3d:c3:3c:93:fb:a5:e7:b8:9d:23:b3:85:53:84:db:
35:aa:d7:cd:91:63:f4:cc:a6:7c:e4:48:b6:4a:77:c3:c1:80:
19:93:29:92:b8:c0:04:f0:29:db:52:e7:87:10:4e:2d:cd:d4:
b4:b3:40:d8:65:5c:4a:a6:51:b0:03:21:27:f7:fb:08:4f:36:
98:1c:a5:7d:8a:07:b6:8d:d4:6d:72:d5:f9:22:90:1a:b4:b4:
08:0f:8a:fc:e9:e6:aa:f1:bd:e5:08:7b:0c:21:62:6a:c4:49:
cc:58:ba:36:a1:06:1e:13:19:4d:91:86:c9:4e:c2:e8:5a:b1:
03:86:89:77:84:ee:f4:47:9b:6e:c6:37:95:10:81:f2:64:aa:
25:09:33:de:7a:a4:cd:dd:1a:67:07:ed:46:77:51:a6:6e:f6:
8a:30:3f:1c:fc:65:a2:d5:cd:c0:b4:4d:0f:03:03:f0:1b:6f:
93:f7:66:9a:b3:cf:23:80:6b:ba:74:f4:85:5e:10:64:ad:18:
8c:62:f0:56:64:9b:59:5a:23:4c:47:ec:39:22:35:d3:b4:38:
07:99:c9:99:f3:4a:99:1c:b2:51:87:a5:e3:c2:9d:75:7f:13:
c3:fd:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:28:12 2025 by rpki-client