![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/090eed6f-02ad-49e2-9ddc-da873e3e7806.roa
File: 090eed6f-02ad-49e2-9ddc-da873e3e7806.roa (raw, json)
Hash identifier: Op/zx9rb2dFc1R+LIT2Dlsp+WHkVYhZH5I6adU02CF0=
Subject key identifier: 5B:C0:20:03:10:68:83:05:B4:40:6E:96:E2:7F:AF:10:61:90:21:DE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1593B737EE08E579545F4B9BBEC3E993AE265064
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/090eed6f-02ad-49e2-9ddc-da873e3e7806.roa
Signing time: Mon 18 Sep 2023 00:00:00 +0000
ROA not before: Mon 18 Sep 2023 00:00:00 +0000
ROA not after: Mon 23 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:93:b7:37:ee:08:e5:79:54:5f:4b:9b:be:c3:e9:93:ae:26:50:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 18 00:00:00 2023 GMT
Not After : Oct 23 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:04:fe:dc:0c:26:e9:2c:2b:76:7c:05:b8:
6c:a0:75:95:52:e5:62:cf:39:95:8d:97:6d:2e:5d:
f6:69:30:6e:0d:08:97:ec:0a:e4:97:8d:42:a4:5e:
ab:5b:7f:f8:77:a1:0b:a6:35:85:77:34:9a:b3:7b:
49:17:09:78:ca:04:c7:fd:62:86:01:13:92:d0:93:
5c:35:aa:7e:2f:53:5d:0e:97:e0:7f:b3:b6:f0:d7:
17:b6:6e:b8:9b:4e:2f:a4:0f:12:d7:ba:29:43:55:
fb:4c:2b:e4:4c:46:2b:ac:e7:f3:13:51:59:14:00:
fd:f5:be:d0:b8:0d:ea:8d:be:f7:5a:66:e1:48:b5:
41:35:80:27:b2:df:a2:e8:ec:22:3d:15:db:b3:05:
ca:dd:4b:71:87:c9:d7:fd:e1:2f:ed:08:77:73:7e:
98:aa:33:b2:62:0f:86:a2:ed:e8:57:3d:01:e6:ce:
99:11:bb:3f:d1:61:86:42:e8:37:ae:2e:90:58:2a:
65:33:6b:5b:84:53:9c:61:52:94:24:78:4a:56:13:
dc:3e:18:b6:f1:71:7b:4b:94:69:2e:b3:9f:74:00:
ec:a3:72:1e:39:50:7c:77:a8:8b:5e:db:5e:f3:8f:
a3:79:52:d3:1a:59:28:9e:71:bb:50:02:d5:04:1e:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C0:20:03:10:68:83:05:B4:40:6E:96:E2:7F:AF:10:61:90:21:DE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/090eed6f-02ad-49e2-9ddc-da873e3e7806.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
95:5a:6b:e3:fe:20:87:1f:22:79:05:f6:75:c7:9c:f6:a1:d1:
df:b5:92:fa:4e:0f:51:30:ec:de:74:f5:c8:42:df:93:dd:be:
55:ad:5c:60:98:7e:a1:f8:51:82:86:ac:0b:33:14:ce:a7:49:
21:79:26:6e:d3:4e:6d:74:de:9f:8f:2f:d0:d3:93:5f:31:90:
7d:75:eb:07:3d:b3:a9:2c:b3:c4:f8:e2:75:53:33:d0:f3:a1:
40:0e:ae:82:9c:d1:2d:e5:6f:d3:b6:18:e0:d3:8b:dc:50:fa:
55:8e:8f:38:fd:ed:29:49:a1:28:40:ed:35:32:b7:88:f5:2c:
b5:e4:5b:1f:fa:c2:1a:06:76:3f:b4:35:99:c2:2d:54:45:12:
4f:c2:4a:a7:21:0f:b1:c7:fe:84:75:bb:1a:7f:4e:90:c7:7b:
60:55:b7:dc:31:72:ac:ca:81:21:04:7b:17:7b:40:d2:5e:7d:
20:8a:2f:c6:10:dc:33:34:32:ba:37:5d:91:92:98:fd:ed:be:
3d:43:ce:23:01:7e:0b:c1:e0:f8:49:3e:45:b6:04:4c:3e:20:
d5:1d:7d:05:12:8a:b8:4a:a0:af:07:ad:7d:83:b6:8b:87:9c:
4a:d2:76:c1:3e:f8:2a:fe:ee:dc:0f:7b:76:d3:53:f8:82:2a:
14:ba:d2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:59:51 2025 by rpki-client