Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c69363c-0031-4bba-9e9b-cd95d05794b8.roa
File: 1c69363c-0031-4bba-9e9b-cd95d05794b8.roa (raw, json)
Hash identifier: DIfhz6XbxWPjj44bmlHvL9JNUyzrtTTvWum9w49wtjc=
Subject key identifier: BB:55:2F:09:0E:6C:D8:2E:3F:33:20:33:ED:AB:6A:B5:34:35:FE:82
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4E2558A7EDA9FE5A6811EDA37712215E1026AEC4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c69363c-0031-4bba-9e9b-cd95d05794b8.roa
Signing time: Sun 07 Jul 2024 00:00:00 +0000
ROA not before: Sun 07 Jul 2024 00:00:00 +0000
ROA not after: Sun 11 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:25:58:a7:ed:a9:fe:5a:68:11:ed:a3:77:12:21:5e:10:26:ae:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 7 00:00:00 2024 GMT
Not After : Aug 11 23:59:59 2024 GMT
Subject: serialNumber=85bba1e81f0035b21271dc794aab2c5e0ee879e4df6eb891a9a864b715831837, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:12:36:66:e7:3f:cb:c9:56:26:6b:fa:f3:
7d:7d:a1:34:22:b0:05:6a:a1:f9:a4:a2:e6:2d:08:
24:75:9c:09:34:b9:35:f0:c9:57:52:d9:87:74:1e:
3c:43:e2:e8:bc:6b:2a:71:14:0c:42:e0:e8:28:33:
ba:e0:e6:d5:32:d5:4c:36:97:c5:68:96:bc:e0:e2:
25:f5:ec:35:b8:cc:9c:ef:b1:b3:79:6d:3d:fd:7a:
2c:16:26:04:e4:bc:08:5d:70:14:eb:d9:8e:7a:6e:
1a:95:84:87:4d:88:f7:10:c0:02:3a:57:e1:36:5d:
c0:f9:4f:fe:58:1c:30:a5:a2:81:51:0b:19:51:87:
10:69:8d:c4:a3:21:f4:a3:87:14:07:89:c5:74:84:
00:d2:e4:81:39:b9:60:cc:b4:fb:cf:99:5c:af:0a:
a6:2f:5c:c9:07:39:3c:c6:56:a7:9f:fd:66:1e:27:
e8:f6:12:1a:ee:25:0d:6c:3c:f7:88:7c:5a:d3:16:
f1:00:36:ab:cf:e6:f4:f7:9d:bb:04:eb:c2:d1:f3:
d6:60:ed:32:47:50:65:6f:aa:ae:e3:c5:22:e6:e7:
31:03:a4:23:8f:c7:69:53:12:04:54:44:3b:92:95:
3b:34:54:06:07:b8:60:3f:04:be:7f:4b:e7:6e:c1:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:55:2F:09:0E:6C:D8:2E:3F:33:20:33:ED:AB:6A:B5:34:35:FE:82
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c69363c-0031-4bba-9e9b-cd95d05794b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b2:e9:4a:a2:b4:63:5b:ec:cd:e3:c2:f0:84:9b:9c:49:ff:
d2:04:e2:1a:55:3e:6b:0a:0c:88:75:08:9f:d3:42:8c:60:76:
60:3f:73:4d:28:95:54:75:9c:db:03:2c:f7:1c:fa:1d:d8:2d:
27:4b:c8:8b:5f:3a:7c:df:03:68:ae:61:b4:da:05:49:a5:ab:
51:37:59:d2:a6:7b:ca:f3:57:de:05:31:5b:e8:88:48:8c:99:
7c:17:5f:44:37:a4:d4:cf:d9:63:f2:f5:db:d1:69:ca:8d:35:
23:23:ef:38:29:60:09:5c:68:fa:c8:3d:fa:07:f9:bf:28:8f:
f3:5c:1c:67:2e:2e:07:50:ca:d6:ba:9a:15:3b:e3:67:c3:0e:
1e:d5:9f:f8:db:c8:00:68:14:a9:26:ab:1d:44:7d:2f:dc:14:
e7:da:5c:4c:b6:36:82:99:6b:29:fb:eb:b4:12:f9:6a:9e:f1:
74:58:99:49:e0:ce:32:97:20:ec:49:c5:30:13:fc:b9:dd:ab:
13:89:39:01:0a:ff:8c:84:0e:9d:77:ed:7f:27:ac:7a:46:06:
d8:48:cc:da:f5:51:b8:9d:a9:df:6c:76:9e:13:b9:cc:8f:9b:
a6:30:ca:e7:ef:fd:45:9f:ba:d2:4e:3d:68:1b:52:eb:ad:d5:
c1:7c:b5:78
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTiVYp+2p/lpoEe2jdxIhXhAmrsQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNzA3MDAwMDAwWhcNMjQwODExMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NWJiYTFlODFmMDAzNWIyMTI3MWRjNzk0YWFiMmM1ZTBl
ZTg3OWU0ZGY2ZWI4OTFhOWE4NjRiNzE1ODMxODM3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/oxI2Zuc/y8lWJmv68319oTQisAVqofmkouYtCCR1nAk0
uTXwyVdS2Yd0HjxD4ui8aypxFAxC4OgoM7rg5tUy1Uw2l8Volrzg4iX17DW4zJzv
sbN5bT39eiwWJgTkvAhdcBTr2Y56bhqVhIdNiPcQwAI6V+E2XcD5T/5YHDClooFR
CxlRhxBpjcSjIfSjhxQHicV0hADS5IE5uWDMtPvPmVyvCqYvXMkHOTzGVqef/WYe
J+j2EhruJQ1sPPeIfFrTFvEANqvP5vT3nbsE68LR89Zg7TJHUGVvqq7jxSLm5zED
pCOPx2lTEgRURDuSlTs0VAYHuGA/BL5/S+duweilAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUu1UvCQ5s2C4/MyAz7atqtTQ1/oIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzFjNjkzNjNjLTAwMzEtNGJiYS05ZTliLWNkOTVkMDU3OTRiOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADWy6UqitGNb7M3jwvCEm5xJ/9IE
4hpVPmsKDIh1CJ/TQoxgdmA/c00olVR1nNsDLPcc+h3YLSdLyItfOnzfA2iuYbTa
BUmlq1E3WdKme8rzV94FMVvoiEiMmXwXX0Q3pNTP2WPy9dvRacqNNSMj7zgpYAlc
aPrIPfoH+b8oj/NcHGcuLgdQyta6mhU742fDDh7Vn/jbyABoFKkmqx1EfS/cFOfa
XEy2NoKZayn767QS+Wqe8XRYmUngzjKXIOxJxTAT/LndqxOJOQEK/4yEDp137X8n
rHpGBthIzNr1Ubidqd9sdp4TucyPm6Ywyufv/UWfutJOPWgbUuut1cF8tXg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:40:36 2025 by rpki-client