Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2e1fba9c-51cd-46d1-afb7-4f2b060d49d9.roa
File: 2e1fba9c-51cd-46d1-afb7-4f2b060d49d9.roa (raw, json)
Hash identifier: fqgr5CRcSVU5hIP42gVkcVp+m89GOJ9Ba/bjrwUuuIs=
Subject key identifier: AA:DB:F9:31:3F:4D:94:F3:67:19:D3:14:86:36:BD:48:F9:39:99:A1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 67E728F35EB1C97D2A8F480E05D2EAC513CCEE8F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2e1fba9c-51cd-46d1-afb7-4f2b060d49d9.roa
Signing time: Wed 15 May 2024 00:00:00 +0000
ROA not before: Wed 15 May 2024 00:00:00 +0000
ROA not after: Wed 19 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e7:28:f3:5e:b1:c9:7d:2a:8f:48:0e:05:d2:ea:c5:13:cc:ee:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 15 00:00:00 2024 GMT
Not After : Jun 19 23:59:59 2024 GMT
Subject: serialNumber=8c6d549a00b787b4d4ff439ce74bda97b71670b677607e2a7cf795528e8657a9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:78:1f:c9:30:24:8c:54:c8:1e:26:a9:64:27:
e8:b5:4a:86:fd:09:92:4a:20:5c:0a:c0:45:4f:a1:
c1:31:1e:37:b6:12:5d:1f:1d:c2:39:9d:fb:83:12:
6a:b5:71:14:cb:52:ed:e6:81:26:7a:ca:e7:07:6a:
91:6c:c2:af:13:98:72:76:fa:17:36:3f:19:a2:53:
f2:16:3a:62:cb:7e:f6:a0:3c:5f:7d:95:1b:9a:44:
8e:f9:53:e2:45:61:8b:11:be:49:a8:c3:69:13:5d:
2c:63:8c:06:32:cb:d3:e2:b7:62:29:ee:be:0a:47:
e8:c7:a3:1a:da:55:22:91:83:f7:73:ce:5f:62:57:
50:28:e0:59:4b:43:c3:53:70:b0:63:e4:7c:89:b8:
2d:e6:0b:66:3b:c7:86:b6:22:0a:f0:24:48:ce:36:
e6:46:0a:85:73:cf:09:09:31:0d:d7:29:25:dc:6c:
04:b5:96:cf:84:c4:07:ed:62:7c:a1:05:77:52:0d:
f0:aa:5c:80:51:f9:dc:71:c2:b9:ac:3e:ae:5b:85:
12:06:66:dc:03:01:3e:5b:ee:c2:8e:3e:9a:39:31:
3c:97:7f:ce:69:59:31:3a:a3:ab:58:de:c4:d3:60:
4b:62:35:9b:14:1d:c1:11:50:98:88:9c:58:81:c9:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DB:F9:31:3F:4D:94:F3:67:19:D3:14:86:36:BD:48:F9:39:99:A1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2e1fba9c-51cd-46d1-afb7-4f2b060d49d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f5:18:e1:37:26:79:49:d3:4d:11:58:63:b7:a9:88:51:b1:
7c:11:a9:b6:89:69:85:1a:cf:1c:41:d3:33:ce:27:e8:23:fb:
05:33:f7:65:6e:3f:2c:95:50:0d:23:7f:6c:ff:4f:71:9c:87:
3a:4d:f1:aa:92:d1:5f:06:67:e0:f6:af:13:d5:ab:88:d1:2c:
cc:0c:c7:d0:ae:ed:48:1d:68:00:99:9a:c6:fd:7f:61:f2:ad:
5d:87:40:73:ef:55:30:2f:fc:da:ec:6a:17:31:d5:d5:4d:bb:
db:90:f9:62:14:a9:1a:f6:48:55:69:ad:b5:80:fd:79:97:b9:
b3:be:23:4a:64:30:15:e1:3c:f9:1c:c0:eb:8b:c7:fb:df:ff:
c5:63:53:db:ca:60:81:9c:14:94:d2:c4:c6:be:2b:8f:e6:de:
b2:63:1d:0b:4c:43:49:bd:cc:48:73:ed:c4:b4:98:76:7a:c2:
cb:c1:c2:0f:cc:54:d2:15:74:0c:0c:d2:de:83:a8:70:1d:d8:
25:9c:f4:19:80:86:b8:2d:2d:70:04:84:01:2b:d8:8c:64:93:
7a:12:8b:b9:59:f7:f9:91:f0:04:f8:d5:0a:c4:23:a9:4d:83:
38:1f:44:05:ea:9b:8f:db:6b:cf:6a:de:7e:8c:13:be:41:cd:
95:98:e3:5a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZ+co816xyX0qj0gOBdLqxRPM7o8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNTE1MDAwMDAwWhcNMjQwNjE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A4YzZkNTQ5YTAwYjc4N2I0ZDRmZjQzOWNlNzRiZGE5N2I3
MTY3MGI2Nzc2MDdlMmE3Y2Y3OTU1MjhlODY1N2E5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCQeB/JMCSMVMgeJqlkJ+i1Sob9CZJKIFwKwEVPocExHje2
El0fHcI5nfuDEmq1cRTLUu3mgSZ6yucHapFswq8TmHJ2+hc2PxmiU/IWOmLLfvag
PF99lRuaRI75U+JFYYsRvkmow2kTXSxjjAYyy9Pit2Ip7r4KR+jHoxraVSKRg/dz
zl9iV1Ao4FlLQ8NTcLBj5HyJuC3mC2Y7x4a2IgrwJEjONuZGCoVzzwkJMQ3XKSXc
bAS1ls+ExAftYnyhBXdSDfCqXIBR+dxxwrmsPq5bhRIGZtwDAT5b7sKOPpo5MTyX
f85pWTE6o6tY3sTTYEtiNZsUHcERUJiInFiByUvRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqtv5MT9NlPNnGdMUhja9SPk5maEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzJlMWZiYTljLTUxY2QtNDZkMS1hZmI3LTRmMmIwNjBkNDlkOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAI71GOE3JnlJ000RWGO3qYhRsXwR
qbaJaYUazxxB0zPOJ+gj+wUz92VuPyyVUA0jf2z/T3GchzpN8aqS0V8GZ+D2rxPV
q4jRLMwMx9Cu7UgdaACZmsb9f2HyrV2HQHPvVTAv/Nrsahcx1dVNu9uQ+WIUqRr2
SFVprbWA/XmXubO+I0pkMBXhPPkcwOuLx/vf/8VjU9vKYIGcFJTSxMa+K4/m3rJj
HQtMQ0m9zEhz7cS0mHZ6wsvBwg/MVNIVdAwM0t6DqHAd2CWc9BmAhrgtLXAEhAEr
2Ixkk3oSi7lZ9/mR8AT41QrEI6lNgzgfRAXqm4/ba89q3n6ME75BzZWY41o=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:33:18 2025 by rpki-client