Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/225bcc0d-4ab1-4529-a8e3-9f5e58def198.roa
File: 225bcc0d-4ab1-4529-a8e3-9f5e58def198.roa (raw, json)
Hash identifier: UzAmJO2bAXqrnyF2dbFs8J7eHKNZMt80Q66nREMyhfk=
Subject key identifier: B3:0B:96:AF:CD:27:F8:61:64:21:73:45:D0:A8:1A:BA:17:C7:04:C2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6A17D53400CA71F04B010443F02E2497DD8405A9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/225bcc0d-4ab1-4529-a8e3-9f5e58def198.roa
Signing time: Wed 30 Apr 2025 18:28:17 +0000
ROA not before: Wed 30 Apr 2025 18:28:17 +0000
ROA not after: Wed 04 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:17:d5:34:00:ca:71:f0:4b:01:04:43:f0:2e:24:97:dd:84:05:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 30 18:28:17 2025 GMT
Not After : Jun 4 23:59:59 2025 GMT
Subject: serialNumber=da9da828de379e26d6fe78245e2979acb22f79a16cb5a14c101cc1879afd450b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:bb:4f:26:d0:94:ce:35:c8:97:db:f2:5d:
00:2f:f8:77:51:1a:ef:9a:cf:b2:54:ce:fc:52:68:
86:a5:7f:d8:a6:26:54:6e:93:67:b6:17:9c:4d:be:
43:14:a8:0e:05:bc:44:45:b3:94:85:e3:cb:56:5e:
6e:9d:65:8a:ff:0b:2a:77:d3:38:06:18:fd:be:2f:
42:75:51:03:a8:28:fb:b0:91:73:05:11:08:12:34:
0e:86:44:34:c6:6f:0e:86:92:0a:c6:5d:44:13:89:
76:82:b7:da:59:c3:0e:61:45:18:c5:70:4e:ec:5c:
35:8c:1a:dd:c8:76:33:96:70:5b:08:d2:94:7a:60:
65:77:d5:73:a2:c6:3d:e7:50:5f:27:92:b4:a4:52:
3a:7c:6f:58:e6:e2:b0:46:a9:2c:5a:cb:a7:c1:09:
99:b6:02:f3:37:ef:52:7f:89:db:c7:c9:ac:7a:5d:
27:b0:5b:01:4b:a7:86:3c:96:0d:8f:c4:4f:f4:41:
de:24:59:7b:bb:8e:ed:f7:0e:dd:b7:7a:20:50:1f:
ba:56:35:a5:40:d2:80:5f:cd:d8:8d:9a:ff:c0:48:
69:9a:c5:a8:41:76:95:22:38:85:0f:35:18:39:6c:
34:38:e0:6f:3d:31:b5:b2:a2:fc:b3:91:d9:fe:64:
63:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0B:96:AF:CD:27:F8:61:64:21:73:45:D0:A8:1A:BA:17:C7:04:C2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/225bcc0d-4ab1-4529-a8e3-9f5e58def198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
76:5f:6c:89:62:07:9f:e4:a8:ac:10:d9:21:42:93:54:a3:fc:
1e:5d:28:f2:48:d4:6d:9d:c9:5f:95:df:e8:35:13:54:b9:47:
53:a9:91:54:14:dc:a4:d2:0e:60:e0:35:e8:00:9a:7e:31:f2:
f4:52:13:7d:b6:03:e1:12:5b:80:fe:1b:82:8c:3c:2f:a8:92:
c5:14:0b:30:89:a5:e8:46:ba:40:c0:d3:f4:52:ed:f2:b6:03:
ea:59:3d:c7:9f:1a:c6:a2:c0:a8:88:91:bf:dc:87:c9:43:3d:
52:af:18:07:5f:f9:7e:84:a5:53:c2:b0:78:ce:0e:d5:0c:3e:
92:50:80:f1:91:8a:2e:da:9d:87:97:0a:07:84:f7:b6:2d:e3:
52:eb:db:11:18:a9:7d:ae:d0:85:17:72:2b:c2:3f:92:4e:ec:
0f:35:62:08:e4:ba:f1:ce:b5:da:cd:f5:7e:35:d3:d4:fe:58:
bf:94:7d:02:31:52:99:96:f9:fb:d6:6a:c8:bf:f7:c5:9b:1b:
cd:f0:66:8d:8c:2d:9a:af:84:2b:c6:e3:f4:7e:db:e5:07:32:
0f:5a:08:f7:d7:80:6e:5f:59:4f:82:c0:e8:16:0a:46:bb:9c:
ea:25:c6:24:db:37:49:6d:28:a1:8a:5e:2f:3c:95:c8:25:2b:
61:c3:5d:a1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUahfVNADKcfBLAQRD8C4kl92EBakwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDMwMTgyODE3WhcNMjUwNjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYTlkYTgyOGRlMzc5ZTI2ZDZmZTc4MjQ1ZTI5NzlhY2Iy
MmY3OWExNmNiNWExNGMxMDFjYzE4NzlhZmQ0NTBiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC447tPJtCUzjXIl9vyXQAv+HdRGu+az7JUzvxSaIalf9im
JlRuk2e2F5xNvkMUqA4FvERFs5SF48tWXm6dZYr/Cyp30zgGGP2+L0J1UQOoKPuw
kXMFEQgSNA6GRDTGbw6GkgrGXUQTiXaCt9pZww5hRRjFcE7sXDWMGt3IdjOWcFsI
0pR6YGV31XOixj3nUF8nkrSkUjp8b1jm4rBGqSxay6fBCZm2AvM371J/idvHyax6
XSewWwFLp4Y8lg2PxE/0Qd4kWXu7ju33Dt23eiBQH7pWNaVA0oBfzdiNmv/ASGma
xahBdpUiOIUPNRg5bDQ44G89MbWyovyzkdn+ZGNNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUswuWr80n+GFkIXNF0KgauhfHBMIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzIyNWJjYzBkLTRhYjEtNDUyOS1hOGUzLTlmNWU1OGRlZjE5OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHZfbIliB5/kqKwQ2SFCk1Sj/B5d
KPJI1G2dyV+V3+g1E1S5R1OpkVQU3KTSDmDgNegAmn4x8vRSE322A+ESW4D+G4KM
PC+oksUUCzCJpehGukDA0/RS7fK2A+pZPcefGsaiwKiIkb/ch8lDPVKvGAdf+X6E
pVPCsHjODtUMPpJQgPGRii7anYeXCgeE97Yt41Lr2xEYqX2u0IUXcivCP5JO7A81
YgjkuvHOtdrN9X4109T+WL+UfQIxUpmW+fvWasi/98WbG83wZo2MLZqvhCvG4/R+
2+UHMg9aCPfXgG5fWU+CwOgWCka7nOolxiTbN0ltKKGKXi88lcglK2HDXaE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:21:50 2025 by rpki-client