![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a429395f-ebab-4293-8050-7f8b9a2f8c41.roa
File: a429395f-ebab-4293-8050-7f8b9a2f8c41.roa (raw, json)
Hash identifier: zNU3ufswWO3kYYLafSsw6FozsPVTdWd2JFDGc3SLCXk=
Subject key identifier: E5:6C:06:AE:05:C1:43:E8:BA:13:7B:D8:11:D3:F3:19:CF:A8:07:01
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0CB765FD674F8647132DC53C5812F71A47AFD785
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a429395f-ebab-4293-8050-7f8b9a2f8c41.roa
Signing time: Sat 06 Jul 2024 00:00:00 +0000
ROA not before: Sat 06 Jul 2024 00:00:00 +0000
ROA not after: Sat 10 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:b7:65:fd:67:4f:86:47:13:2d:c5:3c:58:12:f7:1a:47:af:d7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 6 00:00:00 2024 GMT
Not After : Aug 10 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:24:66:45:1c:4e:34:ca:65:98:d8:5e:3d:c7:
31:d3:cd:4a:1c:9b:51:9e:7c:1d:13:9f:17:32:fe:
8d:bc:3c:0b:1b:0c:83:e9:e8:53:b4:49:36:81:e3:
4b:09:d6:c7:0d:d3:c1:55:48:f9:8f:10:b7:ab:71:
7f:96:4c:e9:e5:fd:52:35:e7:c2:ac:e3:21:49:46:
6e:ae:2f:4d:2c:d9:9c:3c:94:45:d0:be:3e:3a:39:
23:2d:65:28:86:15:58:c8:5b:13:8c:9d:0a:03:74:
78:f4:e9:3b:61:6a:39:27:40:59:1a:bd:37:20:6d:
e7:b3:c2:a8:fa:69:41:80:3c:33:76:c1:ba:78:bc:
a6:56:8c:6c:fd:09:87:36:3f:c1:f3:71:23:89:de:
05:52:c5:fb:7a:b2:34:cc:0a:bc:9b:1e:6d:cd:e6:
d6:dd:2a:4a:de:08:04:f5:55:8b:a9:c1:dd:7e:9a:
99:06:8d:cc:86:57:c0:73:a6:07:78:10:e5:2d:32:
bd:c5:2b:42:8b:2e:5d:0e:47:94:a1:3f:3d:f1:a5:
57:b3:4f:e2:88:da:08:26:d6:50:f1:e2:32:85:35:
0a:e1:88:a8:3c:47:c4:1c:bd:ec:a6:f5:2c:58:a8:
d6:e4:1e:26:37:0b:55:f2:cb:bd:a9:a3:a1:ee:be:
25:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6C:06:AE:05:C1:43:E8:BA:13:7B:D8:11:D3:F3:19:CF:A8:07:01
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a429395f-ebab-4293-8050-7f8b9a2f8c41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b5:db:46:b0:15:f9:f2:ce:39:2d:14:48:e2:a3:d5:32:03:
4f:b2:83:04:ce:cd:82:55:d7:6c:56:9a:d0:c9:a8:45:c4:02:
21:c9:66:ed:81:f7:0f:9b:6d:3f:a0:aa:46:29:28:21:61:16:
2c:6e:67:29:7f:a1:29:8a:01:13:10:0f:ca:49:47:10:dd:07:
0f:32:60:84:f1:7a:61:4f:a8:03:8c:97:bb:cd:cc:9f:99:6d:
c0:03:a2:32:11:4e:35:a5:50:94:d5:b4:18:e8:6f:58:e7:af:
e6:30:aa:17:33:0e:6c:06:81:69:96:54:0a:de:ba:71:4b:2e:
9c:cd:ef:01:65:ef:92:85:bf:6f:8e:99:ea:2a:23:c2:e7:8f:
e7:9b:6d:a0:2f:9a:db:0a:37:86:bd:a7:75:e4:bd:bd:55:23:
11:1b:65:07:7f:df:a8:3a:b5:ca:95:71:ac:38:4b:7e:ee:77:
0f:1a:e2:68:fd:e9:23:b6:58:5d:a2:3e:3e:4b:af:51:ff:a9:
37:68:85:d2:2e:b1:88:98:42:3c:dd:01:43:76:5c:9a:5d:a1:
a4:61:65:1b:79:69:0b:6e:22:4f:67:54:74:5d:93:2e:dc:50:
7f:66:f2:22:c6:fd:f3:1f:29:13:40:1d:f2:cb:ee:fd:15:55:
54:8d:59:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:59:52 2025 by rpki-client