Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/015f9c87-4c43-493d-b594-8d9a01110915.roa
File: 015f9c87-4c43-493d-b594-8d9a01110915.roa (raw, json)
Hash identifier: milk3lrHAPDpfSVMyxs2SAyNNitCfuyfFYOrLLN082s=
Subject key identifier: 28:62:91:4E:6D:21:FB:5E:F6:75:C5:79:C7:3F:C1:56:83:A2:A2:38
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5062FB316A782336912CE482BB0EBE146C4B2BD4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/015f9c87-4c43-493d-b594-8d9a01110915.roa
Signing time: Tue 05 Dec 2023 00:00:00 +0000
ROA not before: Tue 05 Dec 2023 00:00:00 +0000
ROA not after: Tue 09 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:62:fb:31:6a:78:23:36:91:2c:e4:82:bb:0e:be:14:6c:4b:2b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 5 00:00:00 2023 GMT
Not After : Jan 9 23:59:59 2024 GMT
Subject: serialNumber=3904f7bf72ff3efce885d33bea401a5fabbfc7c9de2a6f8120b75bdd0e8f5ce6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:2b:fb:94:ac:6a:43:e5:1a:58:ee:6a:68:
c9:cf:42:d5:15:34:cf:bb:a3:f3:9f:1f:ec:ae:21:
23:2c:6e:d4:4e:ff:a6:6b:26:43:81:9d:e9:74:b8:
e7:cc:f1:a6:a6:8d:97:f6:76:be:98:8b:a0:7e:d1:
ea:1d:b6:8a:00:e7:a1:99:13:10:1e:0a:7c:69:79:
d0:f9:fa:df:b8:ce:f7:6d:2b:c0:2b:37:01:31:d0:
e2:39:ae:12:59:17:67:0a:95:a2:b5:f4:41:bd:8f:
c2:a0:f8:b1:04:2e:7a:27:da:24:7e:f3:38:e5:d7:
9b:15:87:46:6d:94:09:32:a2:94:e4:16:96:4a:3f:
aa:3e:69:51:fc:b2:ad:ca:bf:48:61:04:03:06:90:
37:ef:5b:b5:9b:63:5d:7b:f1:c3:be:06:7e:b3:a9:
22:09:4c:d9:1c:33:b9:77:13:6f:f5:75:7e:74:86:
72:14:4d:2d:85:48:36:f4:3c:6b:7e:00:1b:d9:00:
3e:48:e4:9d:bd:a8:85:ca:69:a7:36:85:0e:02:52:
7a:10:ec:80:51:6e:6f:89:3a:4e:29:3c:83:22:ee:
16:a7:04:79:5a:96:57:45:75:fe:5c:66:1c:fc:27:
bd:e1:dd:56:69:61:1e:3d:eb:2d:b5:53:4b:bf:5a:
67:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:62:91:4E:6D:21:FB:5E:F6:75:C5:79:C7:3F:C1:56:83:A2:A2:38
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/015f9c87-4c43-493d-b594-8d9a01110915.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:93:43:7a:06:d8:85:00:8e:c5:ea:2d:a2:93:26:66:f1:a2:
53:f5:a6:ab:92:89:94:23:fb:84:d6:c9:dc:0c:61:70:f9:a6:
72:e6:d3:d9:bb:f0:c6:b0:7e:47:ed:42:50:b7:07:0b:d7:cf:
43:93:70:e0:38:0b:2c:5e:18:ce:29:07:d1:7f:b8:b7:af:38:
20:da:d9:f8:5f:00:d5:7d:2f:6f:eb:90:dd:61:e9:c0:a0:1f:
f5:c7:1f:5b:31:5d:c8:67:f5:f3:be:21:18:a6:37:29:25:26:
87:4e:60:42:f6:c0:68:96:1c:c5:54:89:fe:2c:d5:08:f7:9a:
fc:ac:62:4e:48:c9:34:ad:26:8a:19:81:da:84:76:83:25:35:
6a:14:c8:3a:aa:fe:7e:2e:15:29:4d:e1:07:3f:89:2d:24:1e:
bf:01:5b:8d:07:3a:6b:bb:d8:24:3b:fe:a8:14:08:74:f3:13:
cf:b7:59:97:f1:c7:a5:76:dd:d6:46:62:7a:48:cd:a1:6b:7d:
3b:72:5f:67:e9:ef:5d:53:e5:0f:26:d1:79:6f:bb:bd:62:a2:
8a:90:e4:2a:59:82:79:4a:e5:d0:a4:65:ed:51:f7:95:79:a9:
8b:84:69:4f:4a:75:17:e1:ec:7b:9f:61:35:ad:3c:44:8f:3b:
85:16:37:43
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUGL7MWp4IzaRLOSCuw6+FGxLK9QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjA1MDAwMDAwWhcNMjQwMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0AzOTA0ZjdiZjcyZmYzZWZjZTg4NWQzM2JlYTQwMWE1ZmFi
YmZjN2M5ZGUyYTZmODEyMGI3NWJkZDBlOGY1Y2U2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCQriv7lKxqQ+UaWO5qaMnPQtUVNM+7o/OfH+yuISMsbtRO
/6ZrJkOBnel0uOfM8aamjZf2dr6Yi6B+0eodtooA56GZExAeCnxpedD5+t+4zvdt
K8ArNwEx0OI5rhJZF2cKlaK19EG9j8Kg+LEELnon2iR+8zjl15sVh0ZtlAkyopTk
FpZKP6o+aVH8sq3Kv0hhBAMGkDfvW7WbY1178cO+Bn6zqSIJTNkcM7l3E2/1dX50
hnIUTS2FSDb0PGt+ABvZAD5I5J29qIXKaac2hQ4CUnoQ7IBRbm+JOk4pPIMi7han
BHlalldFdf5cZhz8J73h3VZpYR496y21U0u/WmetAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKGKRTm0h+172dcV5xz/BVoOiojgwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzAxNWY5Yzg3LTRjNDMtNDkzZC1iNTk0LThkOWEwMTExMDkxNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJ+TQ3oG2IUAjsXqLaKTJmbxolP1
pquSiZQj+4TWydwMYXD5pnLm09m78MawfkftQlC3BwvXz0OTcOA4CyxeGM4pB9F/
uLevOCDa2fhfANV9L2/rkN1h6cCgH/XHH1sxXchn9fO+IRimNyklJodOYEL2wGiW
HMVUif4s1Qj3mvysYk5IyTStJooZgdqEdoMlNWoUyDqq/n4uFSlN4Qc/iS0kHr8B
W40HOmu72CQ7/qgUCHTzE8+3WZfxx6V23dZGYnpIzaFrfTtyX2fp711T5Q8m0Xlv
u71iooqQ5CpZgnlK5dCkZe1R95V5qYuEaU9KdRfh7HufYTWtPESPO4UWN0M=
-----END CERTIFICATE-----
Generated at Wed Jun 18 01:47:12 2025 by rpki-client