Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2ed96851-8c1d-4213-b49c-d3ed0929aacb.roa
File: 2ed96851-8c1d-4213-b49c-d3ed0929aacb.roa (raw, json)
Hash identifier: jmNPKZ5QL3VEtnP14wwlMFXpF402NJAKg7JbT5YKYkg=
Subject key identifier: BA:4A:69:81:B8:D0:C9:E7:6B:AA:EE:78:56:A7:86:5D:97:FD:C8:68
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5CC69B6CC37FB30D70C7BD02867BF9AA449AB439
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2ed96851-8c1d-4213-b49c-d3ed0929aacb.roa
Signing time: Wed 25 Sep 2024 00:00:00 +0000
ROA not before: Wed 25 Sep 2024 00:00:00 +0000
ROA not after: Wed 30 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c6:9b:6c:c3:7f:b3:0d:70:c7:bd:02:86:7b:f9:aa:44:9a:b4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 25 00:00:00 2024 GMT
Not After : Oct 30 23:59:59 2024 GMT
Subject: serialNumber=3d22601d84c1e6d12f314945aaf02970e5661711272cb1359a96c74a0116eabb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:5f:ee:b5:74:95:2a:b1:c7:3e:8f:56:2a:
d4:54:ec:67:50:c8:09:5c:6c:a1:ec:f0:c2:4e:55:
7a:99:0b:b7:0e:30:df:14:2f:54:5d:75:25:98:df:
f1:72:30:46:c6:b4:a2:66:32:c4:c0:c3:95:c0:ca:
7e:25:43:fc:00:92:2c:be:f8:3a:09:9f:fc:2a:24:
f3:03:04:c0:9d:f9:7b:98:5c:b3:7b:00:4d:1e:34:
62:9d:2c:71:68:c4:5c:43:02:be:f8:d8:68:d6:c0:
69:81:4e:d4:22:24:51:ca:86:23:44:84:02:24:ca:
76:da:10:11:f8:61:a6:18:76:35:9b:ea:db:73:c1:
aa:e3:6d:d2:ad:9b:6f:c1:e9:27:bc:48:94:88:8c:
68:82:c7:da:2e:32:85:4b:d8:a9:fa:53:44:74:fc:
df:96:4c:46:1e:fc:93:05:59:2e:fc:15:40:dc:64:
fe:02:f5:e0:15:15:24:21:67:f2:86:25:1c:7d:b2:
a5:ce:69:24:8c:41:c2:11:55:6e:bf:7d:21:2e:42:
a9:f7:d1:78:34:f7:1d:ed:c5:c3:c6:92:7d:a6:c9:
09:5f:92:f3:f6:35:36:5e:73:ec:b9:02:06:8b:6c:
fe:e8:bd:bb:66:07:9d:fb:bd:be:cb:20:7c:b5:be:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4A:69:81:B8:D0:C9:E7:6B:AA:EE:78:56:A7:86:5D:97:FD:C8:68
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2ed96851-8c1d-4213-b49c-d3ed0929aacb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
95:58:ac:38:2a:89:a2:fa:7f:85:98:58:44:69:59:d7:47:6b:
b1:db:7d:a0:23:f9:af:f7:c7:d1:68:d3:5e:4c:77:99:b3:cd:
a3:cd:47:62:57:93:7d:a0:8e:96:bd:4b:b3:54:55:70:fb:2f:
53:4e:8e:d4:3b:55:7c:e9:e5:ca:5f:6a:a6:c1:ef:98:2b:39:
fe:54:cc:a1:35:ee:1d:be:bd:be:ad:91:77:5d:e9:67:80:07:
a1:68:4a:7c:46:d2:4c:7a:33:c2:7b:9e:a3:9f:81:ea:d8:75:
c6:d8:79:4b:a9:80:cd:89:3c:4b:bd:2c:9b:f1:12:20:6c:bb:
db:34:54:2d:45:c8:0f:88:26:d6:a5:f1:6d:2d:c8:c7:76:3f:
8b:42:4a:eb:db:30:75:1d:eb:6c:73:3a:4c:4c:28:7d:d2:3e:
9f:cd:de:30:71:83:67:6b:4f:b4:0c:86:c7:c7:8b:1f:99:3e:
6e:dd:d0:a7:30:90:ee:57:cb:df:1d:e9:61:9f:8e:c9:9c:40:
6c:c6:46:aa:9b:e9:e5:2f:28:de:fe:f1:85:22:14:92:e7:32:
99:1c:00:98:3e:d5:4a:97:d9:70:1c:3e:d9:5c:70:e6:05:32:
0a:b0:3f:c9:12:1d:b9:9d:70:79:c8:71:01:33:9f:e9:35:45:
9d:3c:57:27
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXMabbMN/sw1wx70Chnv5qkSatDkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwOTI1MDAwMDAwWhcNMjQxMDMwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZDIyNjAxZDg0YzFlNmQxMmYzMTQ5NDVhYWYwMjk3MGU1
NjYxNzExMjcyY2IxMzU5YTk2Yzc0YTAxMTZlYWJiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCm/F/utXSVKrHHPo9WKtRU7GdQyAlcbKHs8MJOVXqZC7cO
MN8UL1RddSWY3/FyMEbGtKJmMsTAw5XAyn4lQ/wAkiy++DoJn/wqJPMDBMCd+XuY
XLN7AE0eNGKdLHFoxFxDAr742GjWwGmBTtQiJFHKhiNEhAIkynbaEBH4YaYYdjWb
6ttzwarjbdKtm2/B6Se8SJSIjGiCx9ouMoVL2Kn6U0R0/N+WTEYe/JMFWS78FUDc
ZP4C9eAVFSQhZ/KGJRx9sqXOaSSMQcIRVW6/fSEuQqn30Xg09x3txcPGkn2myQlf
kvP2NTZec+y5AgaLbP7ovbtmB537vb7LIHy1vnkTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUukppgbjQyedrqu54VqeGXZf9yGgwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzJlZDk2ODUxLThjMWQtNDIxMy1iNDljLWQzZWQwOTI5YWFjYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJVYrDgqiaL6f4WYWERpWddHa7Hb
faAj+a/3x9Fo015Md5mzzaPNR2JXk32gjpa9S7NUVXD7L1NOjtQ7VXzp5cpfaqbB
75grOf5UzKE17h2+vb6tkXdd6WeAB6FoSnxG0kx6M8J7nqOfgerYdcbYeUupgM2J
PEu9LJvxEiBsu9s0VC1FyA+IJtal8W0tyMd2P4tCSuvbMHUd62xzOkxMKH3SPp/N
3jBxg2drT7QMhsfHix+ZPm7d0KcwkO5Xy98d6WGfjsmcQGzGRqqb6eUvKN7+8YUi
FJLnMpkcAJg+1UqX2XAcPtlccOYFMgqwP8kSHbmdcHnIcQEzn+k1RZ08Vyc=
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:27:26 2025 by rpki-client