Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2fae9b68-7e63-47dc-975e-eea1328727ad.roa
File: 2fae9b68-7e63-47dc-975e-eea1328727ad.roa (raw, json)
Hash identifier: 9e85DxNF9nK8O1N3DtLGghJndxityhl++l2xHc48Oaw=
Subject key identifier: 1E:68:8D:14:11:94:D4:43:A5:29:BA:8C:3F:CE:9F:49:93:6D:F5:B2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0306171A6F91AD533118EB6290B5BFE3EC7B113F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2fae9b68-7e63-47dc-975e-eea1328727ad.roa
Signing time: Mon 10 Mar 2025 16:28:20 +0000
ROA not before: Mon 10 Mar 2025 16:28:20 +0000
ROA not after: Mon 14 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:06:17:1a:6f:91:ad:53:31:18:eb:62:90:b5:bf:e3:ec:7b:11:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 10 16:28:20 2025 GMT
Not After : Apr 14 23:59:59 2025 GMT
Subject: serialNumber=23609d9274b9d2f954382467141d3ed69a711d71036cb8cfe4ee65c905e7f28c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:21:29:29:8a:97:d4:e9:ee:bf:48:98:97:
ab:ff:b2:60:e2:0c:32:94:f3:4f:69:60:d3:bb:51:
62:1b:50:d7:8f:8a:f1:1f:29:2a:b9:53:1b:15:b1:
cf:ba:65:f1:38:1b:9b:14:19:ad:69:f4:91:e0:49:
d8:b9:1c:7c:cb:fa:fc:38:7e:a9:ab:2f:c7:d7:a7:
76:86:cc:fc:f8:f4:a6:7c:63:5c:71:f6:3c:20:6c:
9b:2c:76:07:62:46:03:bb:b6:b0:c8:71:38:3f:06:
3f:bc:1b:51:c3:83:cc:65:cf:22:b0:6a:bd:55:12:
6f:9e:2e:70:20:3a:3b:52:b0:2e:04:68:22:12:ad:
54:0e:42:5a:c0:99:93:0a:0c:64:64:1e:47:f5:ec:
48:bb:17:2f:ff:73:83:6a:27:db:c5:6e:c8:65:c2:
7d:ca:dc:40:ff:22:50:f4:61:3d:29:11:be:47:fc:
69:1e:bd:d0:71:1c:0f:6b:30:b9:39:54:51:40:9a:
47:67:61:0e:03:5c:f6:be:94:b6:03:22:11:df:15:
c2:b4:d3:3f:e6:6b:de:d6:51:0c:84:0a:07:b1:c9:
61:d7:a6:40:00:97:45:2f:a4:88:c2:61:e7:ea:e8:
fa:d6:50:a6:f5:dc:f8:65:56:2a:22:c5:16:d8:c9:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:68:8D:14:11:94:D4:43:A5:29:BA:8C:3F:CE:9F:49:93:6D:F5:B2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2fae9b68-7e63-47dc-975e-eea1328727ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
11:3f:38:fc:c7:07:3d:14:29:98:c0:dd:fe:00:ae:ab:f7:21:
69:08:0f:71:e8:c8:86:5e:02:89:af:45:7e:c8:04:90:56:b8:
7e:64:6a:e2:34:cf:07:23:fb:71:11:76:ea:9a:61:df:9a:5f:
c1:e2:af:a0:0b:19:57:23:21:44:57:8c:82:84:df:53:b9:54:
47:d5:d0:1a:70:0f:2f:9b:c4:28:8d:27:3b:29:10:fb:c7:b2:
ef:fd:7d:bd:5c:74:78:08:cd:72:22:6c:35:b8:d1:2e:ef:ce:
7f:84:12:b0:d5:7a:21:dd:aa:68:fd:ce:9c:0e:ac:08:90:8c:
24:5b:53:72:32:eb:4a:f4:79:42:b3:bb:c0:8a:19:20:20:10:
f4:c0:29:4a:8e:7d:45:74:b2:37:a0:94:8a:ff:c1:0c:7f:24:
f4:e6:04:8c:13:3a:7f:9e:b9:2d:1f:99:a2:26:50:14:58:f8:
cd:48:b0:74:95:3e:ff:c8:45:43:fc:34:62:25:f1:cf:a5:a3:
5e:24:06:eb:af:c0:1b:74:5d:9e:63:67:6e:3a:c7:5e:48:5b:
1a:9a:a2:f0:2f:4d:50:86:40:a2:cb:52:e4:09:ff:bb:3a:ff:
38:2d:bb:c2:6a:a2:cc:d0:75:44:73:62:ac:80:a9:91:2f:6e:
20:37:c6:3f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAwYXGm+RrVMxGOtikLW/4+x7ET8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMzEwMTYyODIwWhcNMjUwNDE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AyMzYwOWQ5Mjc0YjlkMmY5NTQzODI0NjcxNDFkM2VkNjlh
NzExZDcxMDM2Y2I4Y2ZlNGVlNjVjOTA1ZTdmMjhjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5oSEpKYqX1Onuv0iYl6v/smDiDDKU809pYNO7UWIbUNeP
ivEfKSq5UxsVsc+6ZfE4G5sUGa1p9JHgSdi5HHzL+vw4fqmrL8fXp3aGzPz49KZ8
Y1xx9jwgbJssdgdiRgO7trDIcTg/Bj+8G1HDg8xlzyKwar1VEm+eLnAgOjtSsC4E
aCISrVQOQlrAmZMKDGRkHkf17Ei7Fy//c4NqJ9vFbshlwn3K3ED/IlD0YT0pEb5H
/GkevdBxHA9rMLk5VFFAmkdnYQ4DXPa+lLYDIhHfFcK00z/ma97WUQyECgexyWHX
pkAAl0UvpIjCYefq6PrWUKb13PhlVioixRbYyab/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHmiNFBGU1EOlKbqMP86fSZNt9bIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzJmYWU5YjY4LTdlNjMtNDdkYy05NzVlLWVlYTEzMjg3MjdhZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABE/OPzHBz0UKZjA3f4Arqv3IWkI
D3HoyIZeAomvRX7IBJBWuH5kauI0zwcj+3ERduqaYd+aX8Hir6ALGVcjIURXjIKE
31O5VEfV0BpwDy+bxCiNJzspEPvHsu/9fb1cdHgIzXIibDW40S7vzn+EErDVeiHd
qmj9zpwOrAiQjCRbU3Iy60r0eUKzu8CKGSAgEPTAKUqOfUV0sjeglIr/wQx/JPTm
BIwTOn+euS0fmaImUBRY+M1IsHSVPv/IRUP8NGIl8c+lo14kBuuvwBt0XZ5jZ246
x15IWxqaovAvTVCGQKLLUuQJ/7s6/zgtu8JqoszQdURzYqyAqZEvbiA3xj8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:03:55 2025 by rpki-client