Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1fcb6cf1-455f-4f77-ac54-e65ca304f074.roa
File: 1fcb6cf1-455f-4f77-ac54-e65ca304f074.roa (raw, json)
Hash identifier: YWxo7C299pjAvQ8WLkq96UQGI1jKO/deJZP2qYXvCPM=
Subject key identifier: 3F:B9:4E:EB:4B:05:A4:AA:3E:8D:ED:7A:41:76:DB:48:DC:6B:22:08
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 78D5C9AE2EC270629C724B46BDE5231042C3ECD2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1fcb6cf1-455f-4f77-ac54-e65ca304f074.roa
Signing time: Sun 17 Nov 2024 00:00:00 +0000
ROA not before: Sun 17 Nov 2024 00:00:00 +0000
ROA not after: Sun 22 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d5:c9:ae:2e:c2:70:62:9c:72:4b:46:bd:e5:23:10:42:c3:ec:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 17 00:00:00 2024 GMT
Not After : Dec 22 23:59:59 2024 GMT
Subject: serialNumber=151788a5178164dae2b3d2badbb67568bc08c8f58ed1b95c0009567f1aebbd48, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:cb:56:e1:35:20:5c:c2:43:ec:e4:6e:79:
18:30:bd:25:f1:9f:21:41:42:7b:63:30:32:5a:92:
53:99:34:7f:3f:b7:97:49:d1:40:d0:c0:43:41:56:
c8:1b:df:df:e8:a7:13:bc:74:45:79:fa:8b:b7:ad:
ad:24:db:3d:57:e2:da:41:56:a4:24:75:a0:3b:80:
a9:45:2f:3d:b1:e3:e2:c3:21:e1:a8:15:01:00:e3:
1e:a9:5d:f0:2d:34:05:7e:7f:66:cf:34:18:d3:6c:
26:c3:8e:59:00:88:8f:7e:05:4c:fe:7a:81:30:c9:
dc:f4:28:24:1c:e3:cd:1a:1b:be:32:63:87:99:e2:
ed:b2:ad:db:a9:77:1b:da:af:c5:b7:bb:af:89:7d:
43:fc:ac:4d:ff:79:26:1e:07:9c:c1:19:af:be:e9:
eb:89:e3:be:1c:c5:5d:b3:41:41:ae:dc:e6:bc:35:
5b:c7:ac:26:db:a8:d1:79:29:78:54:cb:8b:61:5d:
bd:4c:70:d0:71:b4:94:12:1a:99:de:ef:61:45:38:
e7:b5:32:c5:77:90:81:3d:f0:6f:17:2d:1f:99:48:
c9:e9:ba:61:6c:dc:ed:ea:37:40:7a:a0:27:56:56:
f5:56:0d:a9:c5:56:0c:f6:f2:90:e0:26:b6:41:24:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B9:4E:EB:4B:05:A4:AA:3E:8D:ED:7A:41:76:DB:48:DC:6B:22:08
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1fcb6cf1-455f-4f77-ac54-e65ca304f074.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:7e:87:02:c4:70:b6:9a:62:a8:45:3c:21:3e:c5:dd:32:91:
36:18:01:92:0f:88:4e:ff:54:96:0e:64:dd:3c:54:86:cd:a4:
4e:05:42:de:d5:b7:31:70:36:e4:27:03:34:ef:cf:ef:1d:f0:
bc:94:6c:c5:0f:ad:50:9b:4f:1d:20:6c:6d:ba:c0:2f:e6:04:
82:7b:a1:c9:6c:a0:78:99:a3:c4:5a:cd:f4:97:2d:39:c2:bc:
96:a5:25:05:d0:68:d6:e3:44:ee:4c:ec:95:19:06:95:83:3f:
5e:aa:c4:31:ce:99:33:da:d1:9f:3e:54:2f:83:32:e1:6a:24:
4d:92:3c:b8:a5:67:2c:0a:c0:98:c7:6f:7e:66:2d:13:b9:29:
5a:73:d6:05:2b:35:8e:4d:62:7c:81:3a:d7:72:5f:89:25:f3:
dd:81:ba:8d:1f:90:2e:e8:12:bc:de:2d:8f:18:9e:0a:13:1d:
b7:c3:88:e6:37:c0:46:3d:5f:52:dc:cf:97:e0:2d:64:86:f9:
23:41:2b:dd:eb:ec:94:5a:23:49:7a:c5:ef:43:5d:f8:fa:5b:
1d:bc:76:79:a5:09:c9:8e:a4:78:95:5f:0e:6e:da:26:1b:b0:
8c:04:a5:9a:96:bd:71:19:cf:9b:dc:5e:59:90:41:ac:65:ba:
59:68:c3:e4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeNXJri7CcGKccktGveUjEELD7NIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMTE3MDAwMDAwWhcNMjQxMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNTE3ODhhNTE3ODE2NGRhZTJiM2QyYmFkYmI2NzU2OGJj
MDhjOGY1OGVkMWI5NWMwMDA5NTY3ZjFhZWJiZDQ4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCn3stW4TUgXMJD7ORueRgwvSXxnyFBQntjMDJaklOZNH8/
t5dJ0UDQwENBVsgb39/opxO8dEV5+ou3ra0k2z1X4tpBVqQkdaA7gKlFLz2x4+LD
IeGoFQEA4x6pXfAtNAV+f2bPNBjTbCbDjlkAiI9+BUz+eoEwydz0KCQc480aG74y
Y4eZ4u2yrdupdxvar8W3u6+JfUP8rE3/eSYeB5zBGa++6euJ474cxV2zQUGu3Oa8
NVvHrCbbqNF5KXhUy4thXb1McNBxtJQSGpne72FFOOe1MsV3kIE98G8XLR+ZSMnp
umFs3O3qN0B6oCdWVvVWDanFVgz28pDgJrZBJEDhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUP7lO60sFpKo+je16QXbbSNxrIggwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzFmY2I2Y2YxLTQ1NWYtNGY3Ny1hYzU0LWU2NWNhMzA0ZjA3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAC1+hwLEcLaaYqhFPCE+xd0ykTYY
AZIPiE7/VJYOZN08VIbNpE4FQt7VtzFwNuQnAzTvz+8d8LyUbMUPrVCbTx0gbG26
wC/mBIJ7oclsoHiZo8RazfSXLTnCvJalJQXQaNbjRO5M7JUZBpWDP16qxDHOmTPa
0Z8+VC+DMuFqJE2SPLilZywKwJjHb35mLRO5KVpz1gUrNY5NYnyBOtdyX4kl892B
uo0fkC7oErzeLY8YngoTHbfDiOY3wEY9X1Lcz5fgLWSG+SNBK93r7JRaI0l6xe9D
Xfj6Wx28dnmlCcmOpHiVXw5u2iYbsIwEpZqWvXEZz5vcXlmQQaxlullow+Q=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:50:36 2025 by rpki-client