Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/164f5f7f-59da-4957-9be2-36d380ce6ace.roa
File: 164f5f7f-59da-4957-9be2-36d380ce6ace.roa (raw, json)
Hash identifier: whNHMgPHm1+VFUTIlB7blDfCM9i0oLlFFJf4cLEeMHQ=
Subject key identifier: 12:87:BE:9E:EE:0A:8E:E1:88:4B:91:BC:60:73:BE:8E:2C:2B:70:A0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 423EC5DE51C161729DE40B2FADD7F9A15F141D49
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/164f5f7f-59da-4957-9be2-36d380ce6ace.roa
Signing time: Thu 09 Nov 2023 00:00:00 +0000
ROA not before: Thu 09 Nov 2023 00:00:00 +0000
ROA not after: Thu 14 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:3e:c5:de:51:c1:61:72:9d:e4:0b:2f:ad:d7:f9:a1:5f:14:1d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 9 00:00:00 2023 GMT
Not After : Dec 14 23:59:59 2023 GMT
Subject: serialNumber=1bcc07d99ca4036b9d889d461745f282f1eef7740d4cd248dd4800168f23d397, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:5a:16:25:2c:54:fb:9d:15:92:b5:ba:19:
96:d4:93:d3:5d:5c:d9:c1:00:b1:b2:6f:1b:3d:40:
24:d1:79:9c:df:75:b5:9e:42:aa:05:89:61:df:fe:
aa:84:bb:d6:ec:aa:6c:7c:a1:07:e9:b5:07:8e:fb:
a0:59:5c:dc:e3:39:c5:30:0d:e3:ff:52:dc:cf:8e:
53:40:e6:52:a6:7d:03:05:0c:4f:2e:04:39:0d:45:
ab:89:8f:fc:06:74:f7:31:f5:22:23:b2:65:4e:0b:
a9:ae:7d:68:d7:60:6c:34:2a:44:9f:92:89:66:67:
82:d0:1d:c9:8d:41:35:1a:7d:23:03:26:64:2b:54:
62:8e:97:1a:89:7e:32:ff:9a:ea:6c:39:63:e4:09:
bb:5f:4a:21:03:d2:06:60:97:eb:d5:2d:cb:29:23:
9b:bb:4c:76:26:b4:c5:4d:bc:f6:6d:ba:20:97:36:
8d:29:1a:a3:2c:07:63:9d:83:be:cd:b4:71:ad:5b:
d9:71:61:21:8b:6f:5b:b8:f1:60:a6:fe:46:00:8c:
50:0e:3e:a3:2a:bb:71:96:69:b8:be:2d:12:2d:f6:
7f:00:c0:12:e3:af:ce:c0:25:90:ee:7c:93:cb:07:
1a:84:8a:3d:ac:d8:b3:77:25:b8:b0:e6:8b:ec:06:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:BE:9E:EE:0A:8E:E1:88:4B:91:BC:60:73:BE:8E:2C:2B:70:A0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/164f5f7f-59da-4957-9be2-36d380ce6ace.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
63:3c:30:31:df:7b:37:65:7b:87:ef:2a:ba:cc:99:98:4b:95:
c2:8e:3d:37:1f:f9:61:30:ae:de:b2:3c:85:19:16:0b:f1:9d:
93:65:c0:fd:89:01:b8:2a:a8:b7:8b:43:04:8d:1b:e9:6f:f4:
02:d7:22:5e:35:7c:d5:c3:2c:99:a5:d7:82:bd:34:3e:1a:c3:
26:bc:ad:46:68:0e:27:0d:2d:7f:3a:d2:fc:0d:64:fb:7a:d3:
5f:eb:13:b6:6c:93:58:53:9c:00:d1:20:b0:1f:96:0a:e2:d9:
6a:0b:a5:b4:e9:3f:63:81:84:2a:38:0a:30:6a:de:9f:5c:d8:
9a:f6:23:f0:04:e1:a9:8b:4b:b5:ce:2b:5f:3a:e4:ce:1e:1c:
8b:8d:73:a7:87:cd:f8:9b:21:f9:d4:5b:89:af:3d:75:2e:48:
3b:ff:d0:2c:7c:c3:9b:b6:e1:f3:a5:eb:45:27:36:50:e7:ad:
7c:0c:0e:da:34:4e:75:9d:6b:97:3b:51:af:25:10:de:c8:11:
b7:be:0c:1d:21:ca:ca:a9:df:1d:8c:85:b9:38:d3:cf:7f:18:
42:ca:e9:41:7b:d6:de:55:f3:c8:fe:8a:69:d2:68:b3:74:cc:
8c:a2:e0:5a:3d:90:89:75:36:dc:d0:c0:21:b9:aa:2b:5b:9e:
08:71:22:33
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQj7F3lHBYXKd5Asvrdf5oV8UHUkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTA5MDAwMDAwWhcNMjMxMjE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYmNjMDdkOTljYTQwMzZiOWQ4ODlkNDYxNzQ1ZjI4MmYx
ZWVmNzc0MGQ0Y2QyNDhkZDQ4MDAxNjhmMjNkMzk3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9uloWJSxU+50VkrW6GZbUk9NdXNnBALGybxs9QCTReZzf
dbWeQqoFiWHf/qqEu9bsqmx8oQfptQeO+6BZXNzjOcUwDeP/UtzPjlNA5lKmfQMF
DE8uBDkNRauJj/wGdPcx9SIjsmVOC6mufWjXYGw0KkSfkolmZ4LQHcmNQTUafSMD
JmQrVGKOlxqJfjL/mupsOWPkCbtfSiED0gZgl+vVLcspI5u7THYmtMVNvPZtuiCX
No0pGqMsB2Odg77NtHGtW9lxYSGLb1u48WCm/kYAjFAOPqMqu3GWabi+LRIt9n8A
wBLjr87AJZDufJPLBxqEij2s2LN3Jbiw5ovsBqUHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUEoe+nu4KjuGIS5G8YHO+jiwrcKAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzE2NGY1ZjdmLTU5ZGEtNDk1Ny05YmUyLTM2ZDM4MGNlNmFjZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGM8MDHfezdle4fvKrrMmZhLlcKO
PTcf+WEwrt6yPIUZFgvxnZNlwP2JAbgqqLeLQwSNG+lv9ALXIl41fNXDLJml14K9
ND4awya8rUZoDicNLX860vwNZPt601/rE7Zsk1hTnADRILAflgri2WoLpbTpP2OB
hCo4CjBq3p9c2Jr2I/AE4amLS7XOK1865M4eHIuNc6eHzfibIfnUW4mvPXUuSDv/
0Cx8w5u24fOl60UnNlDnrXwMDto0TnWda5c7Ua8lEN7IEbe+DB0hysqp3x2Mhbk4
089/GELK6UF71t5V88j+imnSaLN0zIyi4Fo9kIl1NtzQwCG5qitbnghxIjM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:10:09 2025 by rpki-client