Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3b78a6e3-d6b0-4bb2-8627-7fe0477ffdd6.roa
File: 3b78a6e3-d6b0-4bb2-8627-7fe0477ffdd6.roa (raw, json)
Hash identifier: R/a4pez5MeqvsBRHHzJU+eHTlY+tqgpk0PRCiIkUxCQ=
Subject key identifier: 59:55:72:3F:7D:25:D9:8F:07:EC:D1:CF:0D:8A:1E:DD:2C:89:87:B3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 05AE368C84E4A3AC8E385D290F311FA31BE5161B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3b78a6e3-d6b0-4bb2-8627-7fe0477ffdd6.roa
Signing time: Mon 21 Oct 2024 00:00:00 +0000
ROA not before: Mon 21 Oct 2024 00:00:00 +0000
ROA not after: Mon 25 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ae:36:8c:84:e4:a3:ac:8e:38:5d:29:0f:31:1f:a3:1b:e5:16:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 21 00:00:00 2024 GMT
Not After : Nov 25 23:59:59 2024 GMT
Subject: serialNumber=556475a2db90daecad3118d933e01731f482bb76b78d4f510a46973a18dda76b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9a:c1:6e:5a:bb:53:73:c2:73:a6:12:60:7e:
20:77:93:24:fa:f2:5f:e5:58:67:4c:17:85:86:fa:
de:63:e9:05:64:bd:3f:5e:cd:c9:31:e0:0a:84:06:
de:b3:93:8f:d3:92:7b:70:31:57:37:fd:dd:fa:21:
ab:28:99:21:13:e0:87:18:b2:1c:71:e1:82:5b:f7:
ef:eb:1c:9f:4b:f4:3f:2a:47:7a:49:fb:fe:53:5a:
0f:c2:76:7b:0f:10:61:8f:3a:e0:02:05:17:ff:ff:
44:09:3a:45:55:e0:08:13:ed:a9:55:5a:e2:85:bf:
b2:30:a2:65:de:2f:f7:2d:81:a6:82:53:28:f7:69:
84:5b:75:5d:cb:e0:29:03:51:c7:ec:74:88:b8:08:
5f:9f:cf:5c:65:7c:3c:b8:6e:21:30:9e:e7:af:7b:
fc:96:b3:2a:6a:e7:a4:e0:1c:f7:2f:0e:47:79:d2:
57:54:2a:25:f2:73:d4:fa:27:09:de:e7:32:cf:3c:
e2:10:3b:96:24:d7:5a:ee:0e:d3:36:92:eb:ee:c4:
04:e0:81:a1:67:a4:3e:42:73:c7:bf:30:f4:08:30:
1f:f7:8c:e7:25:1c:09:1f:90:9f:c6:5f:0f:87:26:
07:b2:3b:f9:d8:dc:ef:f0:58:12:6e:3d:c7:eb:aa:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:55:72:3F:7D:25:D9:8F:07:EC:D1:CF:0D:8A:1E:DD:2C:89:87:B3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3b78a6e3-d6b0-4bb2-8627-7fe0477ffdd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:67:1b:59:a1:60:15:29:c5:08:d3:a5:42:53:42:aa:49:bd:
1e:b5:9c:9c:9f:34:ad:47:c6:fe:0f:b2:6d:a1:30:28:11:df:
1e:8d:98:91:b4:b1:9e:5a:83:cd:64:8d:77:04:cb:c5:96:00:
73:3c:ff:ab:59:8c:89:34:74:f2:c2:09:8b:fd:50:62:c8:46:
53:41:f8:0b:d5:f1:56:f3:5f:81:00:dc:5a:89:9b:aa:db:a5:
27:9b:bd:89:73:6a:fe:f3:b2:05:70:01:16:e1:f9:c6:f1:e6:
1c:ea:c3:af:16:55:a1:f5:7c:c6:0d:94:55:17:90:c2:aa:16:
ab:bf:04:44:47:a8:2f:09:c3:61:1f:35:fb:e3:b5:ae:1d:71:
93:ec:55:f0:e7:18:49:61:b4:ca:6d:68:2d:5e:cc:63:08:08:
48:93:ef:a4:e5:51:1a:cf:62:00:ff:05:37:62:1c:38:ec:ea:
f1:98:c2:87:a7:0c:68:7d:c2:af:63:5c:64:37:3d:2d:e1:c8:
21:2b:f8:7d:a4:7d:70:96:4c:74:18:a2:61:4a:3d:56:8d:45:
9e:46:c0:88:3f:89:9c:55:3c:96:de:82:54:c7:66:69:21:6a:
e2:64:91:90:1b:53:a4:c7:73:a3:8d:b5:a5:85:8b:ca:a4:fb:
67:cd:2c:89
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBa42jITko6yOOF0pDzEfoxvlFhswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDIxMDAwMDAwWhcNMjQxMTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NTY0NzVhMmRiOTBkYWVjYWQzMTE4ZDkzM2UwMTczMWY0
ODJiYjc2Yjc4ZDRmNTEwYTQ2OTczYTE4ZGRhNzZiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZmsFuWrtTc8JzphJgfiB3kyT68l/lWGdMF4WG+t5j6QVk
vT9ezckx4AqEBt6zk4/TkntwMVc3/d36IasomSET4IcYshxx4YJb9+/rHJ9L9D8q
R3pJ+/5TWg/CdnsPEGGPOuACBRf//0QJOkVV4AgT7alVWuKFv7IwomXeL/ctgaaC
Uyj3aYRbdV3L4CkDUcfsdIi4CF+fz1xlfDy4biEwnueve/yWsypq56TgHPcvDkd5
0ldUKiXyc9T6Jwne5zLPPOIQO5Yk11ruDtM2kuvuxATggaFnpD5Cc8e/MPQIMB/3
jOclHAkfkJ/GXw+HJgeyO/nY3O/wWBJuPcfrqp67AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWVVyP30l2Y8H7NHPDYoe3SyJh7MwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzNiNzhhNmUzLWQ2YjAtNGJiMi04NjI3LTdmZTA0NzdmZmRkNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADtnG1mhYBUpxQjTpUJTQqpJvR61
nJyfNK1Hxv4Psm2hMCgR3x6NmJG0sZ5ag81kjXcEy8WWAHM8/6tZjIk0dPLCCYv9
UGLIRlNB+AvV8VbzX4EA3FqJm6rbpSebvYlzav7zsgVwARbh+cbx5hzqw68WVaH1
fMYNlFUXkMKqFqu/BERHqC8Jw2EfNfvjta4dcZPsVfDnGElhtMptaC1ezGMICEiT
76TlURrPYgD/BTdiHDjs6vGYwoenDGh9wq9jXGQ3PS3hyCEr+H2kfXCWTHQYomFK
PVaNRZ5GwIg/iZxVPJbeglTHZmkhauJkkZAbU6THc6ONtaWFi8qk+2fNLIk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:10:01 2025 by rpki-client