Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c6e6aed-7e55-4ad6-be22-113f9953f88b.roa
File: 1c6e6aed-7e55-4ad6-be22-113f9953f88b.roa (raw, json)
Hash identifier: ip1ThlS7JbTHWhvOotvGnXLNiKq+xdu+GFiQlezBa08=
Subject key identifier: 70:05:EA:15:B9:FB:4A:47:76:8E:2B:CE:BB:73:25:48:B5:55:54:59
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 61BFE60839816D08EB4FCE499F38B53EADA36B3A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c6e6aed-7e55-4ad6-be22-113f9953f88b.roa
Signing time: Tue 20 Feb 2024 00:00:00 +0000
ROA not before: Tue 20 Feb 2024 00:00:00 +0000
ROA not after: Tue 26 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:bf:e6:08:39:81:6d:08:eb:4f:ce:49:9f:38:b5:3e:ad:a3:6b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 20 00:00:00 2024 GMT
Not After : Mar 26 23:59:59 2024 GMT
Subject: serialNumber=5806c2b6c2bf6e5dcb70db1babc083b0fda6ec0cf00087e3561e934308211c91, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:c2:cb:f6:25:7c:f6:e1:9d:cc:40:af:fb:
87:95:b1:d1:de:c3:56:89:d5:6d:6a:65:91:62:2e:
87:88:b0:34:62:b1:4e:11:3a:11:0a:fc:40:32:4b:
4e:a8:e7:87:1c:b2:44:b4:2e:12:f0:85:4e:e8:67:
1a:0a:d5:ac:b5:72:dd:75:e8:40:fe:66:97:fe:58:
4b:02:6d:e3:d2:3e:6a:dc:9d:bf:35:f5:e7:f0:72:
ea:65:b0:09:92:b4:54:d3:d7:2a:e4:99:34:fd:7d:
91:be:02:2d:76:0a:bc:ad:e9:06:16:f5:c6:af:ee:
30:d9:04:3f:22:f7:23:5b:a6:0e:7e:a3:7f:5f:bd:
be:07:09:92:8f:99:1c:9f:76:ed:3d:da:0c:0f:4e:
23:0f:41:b2:35:3c:e1:d3:54:2a:e4:49:8a:f4:3e:
3a:0f:58:06:8d:2b:56:60:27:17:f1:fe:16:5e:36:
cb:bb:98:24:8b:ae:31:5e:d6:69:87:42:0e:45:00:
85:2f:ed:28:a0:6a:0f:82:6b:61:51:9d:4d:6f:27:
92:d9:8c:d4:a8:ee:c0:6f:30:c8:6c:7f:67:d5:66:
b4:b3:36:78:7c:6d:b3:f5:ca:1e:5b:ed:b6:51:78:
d3:5a:78:5b:78:8b:d5:e7:cf:1d:13:88:52:17:29:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:05:EA:15:B9:FB:4A:47:76:8E:2B:CE:BB:73:25:48:B5:55:54:59
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c6e6aed-7e55-4ad6-be22-113f9953f88b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c3:d9:98:dd:8f:87:15:e4:8f:77:43:25:7e:2c:76:31:e5:
45:50:58:ea:da:ad:ec:a6:97:fe:51:32:86:e9:92:ea:88:7c:
a0:40:86:50:83:8d:03:28:58:21:a4:0d:4f:5c:13:a9:ee:62:
74:f3:bc:6c:fd:ef:7d:7c:b1:c7:ea:cc:08:2e:02:84:90:4e:
5f:4b:20:80:2f:94:82:87:d1:60:55:d5:1d:3d:92:f0:93:06:
55:66:62:79:5e:da:a2:97:16:7d:6d:e8:38:98:c3:4c:4c:c7:
9f:04:c4:22:e2:10:12:9e:ed:39:62:8b:cd:6d:d1:bf:1c:2b:
64:e1:3b:24:92:ae:7c:1f:69:9c:0b:c5:35:fe:f6:a1:be:61:
7d:a6:4a:9e:b0:94:f2:3c:f8:02:cb:be:28:b6:dd:da:8b:99:
a7:69:22:fd:f7:2f:dc:dd:bb:e3:8d:ae:8e:c9:23:31:00:f6:
ea:fc:0a:f6:d4:69:a6:f4:c3:b8:94:7b:99:ed:a6:ed:39:0f:
50:3c:69:d1:87:11:6d:ad:5a:76:c6:71:f6:d7:2f:83:ec:93:
67:aa:a7:8f:75:53:78:68:39:30:2d:66:bb:d0:fe:66:2a:11:
fd:bc:5a:8c:04:fd:a2:35:6c:b7:ab:55:71:6c:23:2a:86:03:
d4:f4:ea:4f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYb/mCDmBbQjrT85Jnzi1Pq2jazowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMjIwMDAwMDAwWhcNMjQwMzI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ODA2YzJiNmMyYmY2ZTVkY2I3MGRiMWJhYmMwODNiMGZk
YTZlYzBjZjAwMDg3ZTM1NjFlOTM0MzA4MjExYzkxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDjisLL9iV89uGdzECv+4eVsdHew1aJ1W1qZZFiLoeIsDRi
sU4ROhEK/EAyS06o54ccskS0LhLwhU7oZxoK1ay1ct116ED+Zpf+WEsCbePSPmrc
nb819efwcuplsAmStFTT1yrkmTT9fZG+Ai12Cryt6QYW9cav7jDZBD8i9yNbpg5+
o39fvb4HCZKPmRyfdu092gwPTiMPQbI1POHTVCrkSYr0PjoPWAaNK1ZgJxfx/hZe
Nsu7mCSLrjFe1mmHQg5FAIUv7Sigag+Ca2FRnU1vJ5LZjNSo7sBvMMhsf2fVZrSz
Nnh8bbP1yh5b7bZReNNaeFt4i9Xnzx0TiFIXKZelAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcAXqFbn7Skd2jivOu3MlSLVVVFkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzFjNmU2YWVkLTdlNTUtNGFkNi1iZTIyLTExM2Y5OTUzZjg4Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAErD2Zjdj4cV5I93QyV+LHYx5UVQ
WOrareyml/5RMobpkuqIfKBAhlCDjQMoWCGkDU9cE6nuYnTzvGz97318scfqzAgu
AoSQTl9LIIAvlIKH0WBV1R09kvCTBlVmYnle2qKXFn1t6DiYw0xMx58ExCLiEBKe
7Tlii81t0b8cK2ThOySSrnwfaZwLxTX+9qG+YX2mSp6wlPI8+ALLvii23dqLmadp
Iv33L9zdu+ONro7JIzEA9ur8CvbUaab0w7iUe5ntpu05D1A8adGHEW2tWnbGcfbX
L4Psk2eqp491U3hoOTAtZrvQ/mYqEf28WowE/aI1bLerVXFsIyqGA9T06k8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:41:34 2025 by rpki-client