Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1dac8a83-581f-4d88-affa-80f862defee1.roa
File: 1dac8a83-581f-4d88-affa-80f862defee1.roa (raw, json)
Hash identifier: T5QorwWmGhc1ASFs7LNlAGZRd+2TyBQ1L1seoTKece4=
Subject key identifier: AF:3D:A9:0D:88:C5:9F:0E:D8:79:0C:38:4E:EA:DA:F9:76:2B:B3:DB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 52C7CF71059999E5E4A5CA2E31FC6EAC87F424C5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1dac8a83-581f-4d88-affa-80f862defee1.roa
Signing time: Sat 14 Sep 2024 00:00:00 +0000
ROA not before: Sat 14 Sep 2024 00:00:00 +0000
ROA not after: Sat 19 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c7:cf:71:05:99:99:e5:e4:a5:ca:2e:31:fc:6e:ac:87:f4:24:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 14 00:00:00 2024 GMT
Not After : Oct 19 23:59:59 2024 GMT
Subject: serialNumber=26106c37e0ec62f293aa396ff95a44b499530a2b6fafa7d127db870da36c5118, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:33:22:9d:29:a4:0f:58:8a:35:18:47:e4:
a4:0e:6a:a5:10:5f:30:3c:29:55:72:e1:e6:7b:5b:
ae:5a:f9:21:34:d1:b2:1a:bf:80:89:58:9f:66:34:
b6:5c:26:86:d6:2a:df:dc:84:cd:bf:06:66:b8:29:
35:c5:27:4f:73:75:95:6e:2d:c2:b2:6b:6c:3a:9a:
8f:a0:7e:d0:8d:14:2b:dd:8d:5e:64:da:5d:67:4c:
30:76:17:5a:cb:e4:ba:2e:f9:47:45:76:4b:5f:ec:
54:4c:e0:d2:11:56:50:8d:cd:91:7e:a9:4c:13:00:
d6:14:af:dc:e3:0b:52:b6:94:c4:9a:4e:26:7d:23:
a0:6b:11:d7:7f:47:cd:40:6c:00:5e:de:14:0b:e1:
10:88:b8:c4:e1:9b:06:2f:44:a5:77:01:da:44:5f:
ab:8c:e5:82:44:46:8b:f8:66:43:c4:f8:7e:bd:e3:
e7:1a:70:c8:b2:f4:46:f8:e9:d1:66:02:ea:9c:4c:
e4:bb:02:e1:b4:f1:f6:79:20:06:53:58:5a:f3:07:
87:20:ba:60:db:88:89:72:09:f4:a2:7a:75:93:6f:
1c:b1:2f:0f:c3:bd:15:47:bb:1d:1a:a0:df:ef:ac:
ea:c9:9b:e1:d6:c0:f6:9f:6a:39:37:11:e6:10:b0:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3D:A9:0D:88:C5:9F:0E:D8:79:0C:38:4E:EA:DA:F9:76:2B:B3:DB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1dac8a83-581f-4d88-affa-80f862defee1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
99:75:4d:9f:9f:86:b6:48:4f:6e:46:90:c9:ba:59:f0:3d:d0:
71:ea:b4:29:a5:fa:c9:99:0f:aa:a8:04:0b:9a:c9:aa:c5:51:
43:89:88:f5:45:20:05:3f:31:dd:82:e3:82:33:0e:53:98:78:
ab:da:53:24:5e:41:c3:29:30:ff:3f:49:98:48:cf:6d:2c:92:
e6:bc:c3:06:64:f2:b6:dc:1f:ed:9f:42:b7:33:28:c6:ec:02:
a1:10:9d:b2:62:1a:ce:aa:4e:24:6a:3f:13:59:0a:97:91:65:
ed:b6:91:1f:44:e1:b5:86:bf:c6:a3:06:7d:59:7c:55:96:a0:
5c:d0:ef:f8:05:d5:c9:b8:7c:47:25:98:7b:59:83:c1:51:95:
74:51:e2:aa:58:5b:38:1f:0a:d6:2a:40:53:ad:03:89:ab:20:
17:34:33:c3:1d:04:37:06:54:f4:ff:80:ac:c8:61:10:4f:63:
84:fb:13:06:e4:85:36:73:e7:5d:94:ef:d8:58:c6:e5:b2:fe:
76:ae:58:5f:6e:b6:1a:a7:92:95:f6:7e:a6:8e:b1:2b:69:57:
70:7e:54:82:c5:2e:3e:6b:89:d4:2a:17:2e:a6:c9:9e:7e:05:
d7:92:24:49:43:ea:c5:ef:8b:85:3d:ae:76:86:db:b2:89:f2:
4f:67:97:a3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUsfPcQWZmeXkpcouMfxurIf0JMUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwOTE0MDAwMDAwWhcNMjQxMDE5MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNjEwNmMzN2UwZWM2MmYyOTNhYTM5NmZmOTVhNDRiNDk5
NTMwYTJiNmZhZmE3ZDEyN2RiODcwZGEzNmM1MTE4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzZDMinSmkD1iKNRhH5KQOaqUQXzA8KVVy4eZ7W65a+SE0
0bIav4CJWJ9mNLZcJobWKt/chM2/Bma4KTXFJ09zdZVuLcKya2w6mo+gftCNFCvd
jV5k2l1nTDB2F1rL5Lou+UdFdktf7FRM4NIRVlCNzZF+qUwTANYUr9zjC1K2lMSa
TiZ9I6BrEdd/R81AbABe3hQL4RCIuMThmwYvRKV3AdpEX6uM5YJERov4ZkPE+H69
4+cacMiy9Eb46dFmAuqcTOS7AuG08fZ5IAZTWFrzB4cgumDbiIlyCfSienWTbxyx
Lw/DvRVHux0aoN/vrOrJm+HWwPafajk3EeYQsDvlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrz2pDYjFnw7YeQw4Tura+XYrs9swHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzFkYWM4YTgzLTU4MWYtNGQ4OC1hZmZhLTgwZjg2MmRlZmVlMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJl1TZ+fhrZIT25GkMm6WfA90HHq
tCml+smZD6qoBAuayarFUUOJiPVFIAU/Md2C44IzDlOYeKvaUyReQcMpMP8/SZhI
z20skua8wwZk8rbcH+2fQrczKMbsAqEQnbJiGs6qTiRqPxNZCpeRZe22kR9E4bWG
v8ajBn1ZfFWWoFzQ7/gF1cm4fEclmHtZg8FRlXRR4qpYWzgfCtYqQFOtA4mrIBc0
M8MdBDcGVPT/gKzIYRBPY4T7EwbkhTZz512U79hYxuWy/nauWF9uthqnkpX2fqaO
sStpV3B+VILFLj5ridQqFy6myZ5+BdeSJElD6sXvi4U9rnaG27KJ8k9nl6M=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:27:00 2025 by rpki-client