Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f82f5757-09cd-43d3-8a46-46224c555599.roa
File: f82f5757-09cd-43d3-8a46-46224c555599.roa (raw, json)
Hash identifier: Sa0QMls/LPoO/xReCo/ustwQ0a3f2okVr27E7QZ5U8A=
Subject key identifier: A1:11:40:7D:E4:35:90:C5:9A:4F:17:AA:EB:69:0E:2E:F1:A2:F1:96
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1062A4AEDE38F398340A6CF89128BAB0A055B81F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f82f5757-09cd-43d3-8a46-46224c555599.roa
Signing time: Mon 04 Dec 2023 00:00:00 +0000
ROA not before: Mon 04 Dec 2023 00:00:00 +0000
ROA not after: Mon 08 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:62:a4:ae:de:38:f3:98:34:0a:6c:f8:91:28:ba:b0:a0:55:b8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 4 00:00:00 2023 GMT
Not After : Jan 8 23:59:59 2024 GMT
Subject: serialNumber=cc4f1dfadd5d53bf16158d5f35e394fd7b62f0e686a86986bccc587389961609, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:0a:8a:41:0e:63:21:5a:bc:03:cc:54:0d:
ef:d7:5e:16:03:6c:93:9a:54:aa:3d:5c:a0:65:ba:
f5:a7:93:00:1f:bb:51:49:de:c2:d2:6d:56:3a:83:
64:ed:fb:3f:95:fd:0f:3c:74:22:d7:47:b8:61:33:
26:fa:6d:ce:b6:4d:f3:9a:11:73:bf:76:eb:6b:40:
06:79:2c:df:8c:93:00:26:e6:c8:8e:6b:f7:23:57:
eb:c6:2d:51:7d:09:90:f1:39:6f:97:d1:79:25:d3:
47:a3:62:ee:58:82:56:d8:9c:86:b7:b3:77:60:e4:
80:f8:ed:59:52:62:55:81:14:d8:87:40:6b:59:bc:
c3:1c:96:a0:d1:02:3e:51:66:5a:30:82:d2:72:96:
01:a1:3c:2e:b9:c8:aa:10:69:58:4d:c2:ad:8c:47:
ca:e6:e3:2f:3d:65:01:c6:bc:ee:1e:cd:db:cf:47:
57:cb:8e:be:ed:06:9f:53:40:d9:39:62:aa:6c:78:
57:c9:c1:37:e9:65:6c:34:0a:32:5d:0c:6c:51:cd:
82:19:4b:19:b0:6b:b8:9f:ef:32:dd:0a:1d:d0:2b:
73:0c:24:7e:04:ae:f5:d5:db:a0:51:68:6d:d6:31:
70:1b:bb:0a:05:d0:a4:4b:80:a2:4a:d9:0a:7d:5e:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:11:40:7D:E4:35:90:C5:9A:4F:17:AA:EB:69:0E:2E:F1:A2:F1:96
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f82f5757-09cd-43d3-8a46-46224c555599.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0f:21:79:c9:38:d4:47:a4:a1:67:5d:a3:2d:e4:49:c7:69:
80:f9:0b:65:cf:f4:84:4a:82:e5:4d:dc:4e:27:1f:82:c0:52:
8c:18:97:d1:54:1b:6f:4c:5e:b7:b8:63:f9:d6:a9:2f:b0:3c:
cc:c4:c1:b2:1f:00:59:69:12:e8:9c:a4:9c:ba:5f:9f:01:07:
a6:b2:04:5c:38:f3:4e:7d:36:ed:9c:51:6d:a0:81:a1:3e:66:
ff:9f:cb:e0:f5:b9:62:1a:47:bd:e2:cf:b4:10:23:b0:89:14:
2f:3a:00:6a:73:03:64:3b:76:d1:e3:79:a6:b0:e6:3b:11:c1:
fc:a0:49:87:97:24:3e:58:1a:89:85:ab:d7:dd:dd:fc:89:01:
f2:16:1d:05:85:7d:39:3e:a9:e8:8c:bc:69:3c:8e:5f:c9:13:
1d:33:4e:e2:97:9d:f0:48:aa:00:b6:03:8c:b5:bd:4f:66:31:
24:40:e8:67:27:19:ee:07:8f:39:be:c0:5c:e4:0b:16:6c:56:
da:2b:ad:5d:b4:dc:f9:a3:e8:c9:a7:27:b6:8a:15:4b:94:31:
74:fa:12:78:35:52:d2:83:b5:32:52:08:6b:9e:06:8e:a9:37:
3d:c7:2a:de:e0:7b:2a:f6:9a:7a:c4:b3:25:ef:d5:de:2f:8a:
99:00:61:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:10:24 2025 by rpki-client