Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0001dffb-759f-4e28-8d99-cc1138d56739.roa
File: 0001dffb-759f-4e28-8d99-cc1138d56739.roa (raw, json)
Hash identifier: uIcG8I+wlu6eehVlLmB70cLFxGVDAiQOIkJgD6qgwis=
Subject key identifier: 4D:D1:80:5F:0E:30:22:0A:37:9E:77:A7:AB:10:07:2C:7B:E4:ED:8D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3410CE23F98AE0AE8F202FB4800F765E1C700033
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0001dffb-759f-4e28-8d99-cc1138d56739.roa
Signing time: Sat 15 Feb 2025 21:23:29 +0000
ROA not before: Sat 15 Feb 2025 21:23:29 +0000
ROA not after: Sat 22 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:10:ce:23:f9:8a:e0:ae:8f:20:2f:b4:80:0f:76:5e:1c:70:00:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 15 21:23:29 2025 GMT
Not After : Mar 22 23:59:59 2025 GMT
Subject: serialNumber=2757d3a8c25b8ae50198213c7e8cdb0dea1ecef6761737a9609379ec1677ab8a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d5:c2:1f:3b:eb:7e:07:95:be:91:24:9e:22:
65:cb:e6:9b:76:31:34:c9:61:90:34:cc:42:54:a0:
e1:e9:f7:72:1c:db:3e:a2:1c:61:25:37:91:1a:82:
1c:34:24:4b:43:a7:f1:5f:db:cc:9c:3c:1a:b0:14:
68:be:8f:b5:08:df:56:b8:07:64:2e:aa:15:99:ce:
26:50:1d:09:82:10:64:ae:73:5a:9c:5f:4d:ca:22:
95:27:1e:2b:38:36:9f:e5:eb:77:5b:7a:09:0f:1c:
80:19:28:af:87:d1:89:e0:91:39:aa:5f:b3:71:7d:
9b:a6:f8:a5:29:3c:57:9c:df:3b:89:f9:b5:2f:a2:
69:c5:d4:e5:f8:ee:12:4b:8b:f5:be:ee:aa:69:42:
86:b4:30:ef:29:69:fa:44:02:2f:dc:02:30:bf:38:
76:6c:ab:a1:78:61:bd:e4:21:00:d0:1c:ce:3b:1f:
71:65:77:93:52:80:db:85:4e:ec:8a:13:6f:ee:4f:
fd:63:97:e0:29:17:07:2a:f0:6c:29:f5:1a:3a:20:
26:cb:4c:76:ed:f1:30:56:43:e7:c3:f8:82:fc:0e:
f4:95:2b:22:15:36:82:eb:89:a2:68:2f:51:de:e6:
42:42:28:00:fd:be:49:36:f2:f9:8c:37:e4:f3:55:
d5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D1:80:5F:0E:30:22:0A:37:9E:77:A7:AB:10:07:2C:7B:E4:ED:8D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0001dffb-759f-4e28-8d99-cc1138d56739.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bf:10:e4:36:d8:62:8c:1e:98:4d:f8:03:81:a7:68:77:fd:
e1:ef:d6:8a:5d:31:9d:4f:69:fe:3e:09:37:c3:bd:25:43:58:
4f:37:2b:f1:6d:4e:f2:f1:7a:50:35:a4:d5:05:01:8c:f8:ae:
0f:53:c9:31:1d:e4:db:2b:f0:5b:c5:25:a8:29:05:4b:1b:e4:
08:a7:95:7f:01:a3:4e:47:1a:b9:34:2a:18:1d:24:2c:04:2e:
ec:3a:2e:f1:77:82:38:69:8c:a5:eb:46:91:df:a3:34:43:3b:
68:d1:b9:ea:fa:fb:73:5d:75:69:27:9f:d5:82:f9:ce:fa:c4:
c5:19:94:cd:13:c5:92:c7:45:10:9b:af:0c:55:e0:78:09:ad:
df:e0:9c:d3:e9:5b:10:49:55:98:7c:fd:c3:9b:c6:77:26:43:
bb:0f:0c:5f:71:23:4b:d1:67:3b:08:33:5f:fc:06:d5:20:16:
98:fb:09:29:56:cf:c1:6e:3e:c6:94:d3:84:a3:0e:cd:3c:a2:
f7:e8:30:37:a2:7a:f0:a6:08:34:da:31:bb:b9:f3:36:2c:83:
9e:2d:74:00:f2:0f:aa:24:2e:a5:0a:ca:8c:a4:cf:e4:74:26:
e8:54:c2:37:f5:59:62:b2:0f:0c:f0:c6:a6:d4:46:2d:7d:c4:
64:fc:3c:af
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNBDOI/mK4K6PIC+0gA92XhxwADMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMjE1MjEyMzI5WhcNMjUwMzIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNzU3ZDNhOGMyNWI4YWU1MDE5ODIxM2M3ZThjZGIwZGVh
MWVjZWY2NzYxNzM3YTk2MDkzNzllYzE2NzdhYjhhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD41cIfO+t+B5W+kSSeImXL5pt2MTTJYZA0zEJUoOHp93Ic
2z6iHGElN5Eaghw0JEtDp/Ff28ycPBqwFGi+j7UI31a4B2QuqhWZziZQHQmCEGSu
c1qcX03KIpUnHis4Np/l63dbegkPHIAZKK+H0YngkTmqX7NxfZum+KUpPFec3zuJ
+bUvomnF1OX47hJLi/W+7qppQoa0MO8pafpEAi/cAjC/OHZsq6F4Yb3kIQDQHM47
H3Fld5NSgNuFTuyKE2/uT/1jl+ApFwcq8Gwp9Ro6ICbLTHbt8TBWQ+fD+IL8DvSV
KyIVNoLriaJoL1He5kJCKAD9vkk28vmMN+TzVdVzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUTdGAXw4wIgo3nnenqxAHLHvk7Y0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzAwMDFkZmZiLTc1OWYtNGUyOC04ZDk5LWNjMTEzOGQ1NjczOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFa/EOQ22GKMHphN+AOBp2h3/eHv
1opdMZ1Paf4+CTfDvSVDWE83K/FtTvLxelA1pNUFAYz4rg9TyTEd5Nsr8FvFJagp
BUsb5AinlX8Bo05HGrk0KhgdJCwELuw6LvF3gjhpjKXrRpHfozRDO2jRuer6+3Nd
dWknn9WC+c76xMUZlM0TxZLHRRCbrwxV4HgJrd/gnNPpWxBJVZh8/cObxncmQ7sP
DF9xI0vRZzsIM1/8BtUgFpj7CSlWz8FuPsaU04SjDs08ovfoMDeievCmCDTaMbu5
8zYsg54tdADyD6okLqUKyoykz+R0JuhUwjf1WWKyDwzwxqbURi19xGT8PK8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:01:27 2025 by rpki-client