Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2fec100b-b079-4b3f-9f3b-069692acd5ff.roa
File: 2fec100b-b079-4b3f-9f3b-069692acd5ff.roa (raw, json)
Hash identifier: P4TlDrJoLSzGdhDDPqj7BB2aOrnBKmdu9LmVd9bl/6k=
Subject key identifier: 9D:87:28:20:45:AF:DA:3E:6F:BB:AC:EA:68:7B:6C:6D:0A:C8:47:79
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 08E9598706CC008DE7869818695E5AF5203168DA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2fec100b-b079-4b3f-9f3b-069692acd5ff.roa
Signing time: Sat 04 Nov 2023 00:00:00 +0000
ROA not before: Sat 04 Nov 2023 00:00:00 +0000
ROA not after: Sat 09 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e9:59:87:06:cc:00:8d:e7:86:98:18:69:5e:5a:f5:20:31:68:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 4 00:00:00 2023 GMT
Not After : Dec 9 23:59:59 2023 GMT
Subject: serialNumber=8330eec9b68d0295d8b660d019a96beef4ed3c96c02dc46d6a7a93ebe40b8337, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:bd:e4:87:e5:22:c8:f7:a1:71:2f:43:b5:
cc:d7:1e:90:82:8b:a7:32:e2:e4:99:73:83:e7:41:
1a:5c:57:fe:43:f8:a3:8d:69:6f:8f:9d:59:9a:a4:
cf:e9:eb:df:fa:3e:67:93:0b:de:9c:67:e6:1c:7a:
54:90:43:a7:71:05:88:2d:25:e6:90:17:87:68:68:
d6:e2:d8:0d:9c:52:a0:5d:4c:98:bb:c7:1a:15:2d:
38:63:73:59:fd:f7:e0:5f:ec:66:c3:3b:31:18:f3:
a7:ee:c7:39:b0:95:5d:8f:c9:0e:5d:41:d8:17:21:
77:6d:4d:4f:41:fc:31:40:7a:85:4c:df:5b:62:a0:
95:31:6a:f0:e5:03:96:10:5b:27:d5:28:a8:29:1b:
40:13:c1:20:95:cb:7b:49:8b:d0:1c:71:7c:18:eb:
8e:dc:e3:de:52:09:89:d6:6b:36:f2:b2:e9:d8:d0:
07:93:9b:d4:b5:cb:dc:6c:27:b4:cf:02:01:e2:f8:
6d:be:1a:8b:18:dd:ea:ea:63:65:7e:5e:70:a8:e9:
15:de:c6:dd:48:79:e9:1d:74:1b:16:a3:a5:c3:e2:
ae:aa:e7:98:ac:e4:c6:ec:5c:43:e8:45:8b:0c:0c:
a0:52:38:a2:e4:94:78:0d:14:6b:7b:59:a2:be:15:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:87:28:20:45:AF:DA:3E:6F:BB:AC:EA:68:7B:6C:6D:0A:C8:47:79
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2fec100b-b079-4b3f-9f3b-069692acd5ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
76:10:b3:7c:eb:c8:7f:eb:97:c1:45:af:d5:00:19:86:07:63:
69:8e:cb:3a:14:fc:84:a7:ff:da:eb:f1:2c:05:79:4a:42:cb:
97:1c:9f:61:a9:47:2a:1e:1a:b7:68:91:0e:c6:41:6d:0b:fe:
b6:e2:c6:45:ac:6f:1b:b3:76:d4:69:16:1f:7c:c7:aa:49:fd:
24:a2:2d:1a:ff:69:c8:13:53:3e:24:7c:7f:eb:ff:e7:89:22:
79:b2:6a:b7:96:03:5f:a5:3d:20:b6:77:ad:b6:b5:f6:0b:0c:
91:d1:32:b3:20:8c:c1:8a:59:91:05:b4:45:65:bd:68:74:b6:
f1:ec:14:0f:a1:7a:46:e5:50:63:87:44:17:be:ac:3d:c0:bb:
91:b9:67:d3:94:f7:06:94:a4:7d:68:60:48:e1:b4:96:47:8d:
24:d8:91:e6:1d:c2:42:d8:97:51:1d:14:89:5b:8d:f0:c3:a5:
7e:51:e9:18:fd:68:d0:97:e3:cb:1e:e0:0b:8c:7f:c3:a1:72:
1e:08:db:7b:47:c9:29:f7:4d:e6:62:ed:b7:ff:a0:e8:79:79:
e1:48:d3:fc:37:77:aa:c8:f5:2e:4a:1a:5f:ff:ed:51:e4:07:
9c:73:dc:ff:93:16:14:2e:be:74:7a:0c:13:30:83:16:c6:5d:
f1:c7:9b:6b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCOlZhwbMAI3nhpgYaV5a9SAxaNowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTA0MDAwMDAwWhcNMjMxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MzMwZWVjOWI2OGQwMjk1ZDhiNjYwZDAxOWE5NmJlZWY0
ZWQzYzk2YzAyZGM0NmQ2YTdhOTNlYmU0MGI4MzM3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnx73kh+UiyPehcS9DtczXHpCCi6cy4uSZc4PnQRpcV/5D
+KONaW+PnVmapM/p69/6PmeTC96cZ+YcelSQQ6dxBYgtJeaQF4doaNbi2A2cUqBd
TJi7xxoVLThjc1n99+Bf7GbDOzEY86fuxzmwlV2PyQ5dQdgXIXdtTU9B/DFAeoVM
31tioJUxavDlA5YQWyfVKKgpG0ATwSCVy3tJi9AccXwY647c495SCYnWazbysunY
0AeTm9S1y9xsJ7TPAgHi+G2+GosY3erqY2V+XnCo6RXext1IeekddBsWo6XD4q6q
55is5MbsXEPoRYsMDKBSOKLklHgNFGt7WaK+FTQDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnYcoIEWv2j5vu6zqaHtsbQrIR3kwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzJmZWMxMDBiLWIwNzktNGIzZi05ZjNiLTA2OTY5MmFjZDVmZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHYQs3zryH/rl8FFr9UAGYYHY2mO
yzoU/ISn/9rr8SwFeUpCy5ccn2GpRyoeGrdokQ7GQW0L/rbixkWsbxuzdtRpFh98
x6pJ/SSiLRr/acgTUz4kfH/r/+eJInmyareWA1+lPSC2d622tfYLDJHRMrMgjMGK
WZEFtEVlvWh0tvHsFA+hekblUGOHRBe+rD3Au5G5Z9OU9waUpH1oYEjhtJZHjSTY
keYdwkLYl1EdFIlbjfDDpX5R6Rj9aNCX48se4AuMf8Ohch4I23tHySn3TeZi7bf/
oOh5eeFI0/w3d6rI9S5KGl//7VHkB5xz3P+TFhQuvnR6DBMwgxbGXfHHm2s=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:34:20 2025 by rpki-client