Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/46c7d501-c68b-428d-acf1-7703c1494064.roa
File: 46c7d501-c68b-428d-acf1-7703c1494064.roa (raw, json)
Hash identifier: WaO4/5W+39GhqtfUCv8iBt1NBfWUILgHgrSzDRaZR84=
Subject key identifier: F7:0A:D7:F6:8D:BF:07:4A:35:65:C1:91:07:BA:4A:69:78:EE:F8:44
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0D1D10AD95100E5B60C1EFE0D177B53EC4DCBC97
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/46c7d501-c68b-428d-acf1-7703c1494064.roa
Signing time: Fri 27 Oct 2023 00:00:00 +0000
ROA not before: Fri 27 Oct 2023 00:00:00 +0000
ROA not after: Fri 01 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:1d:10:ad:95:10:0e:5b:60:c1:ef:e0:d1:77:b5:3e:c4:dc:bc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 27 00:00:00 2023 GMT
Not After : Dec 1 23:59:59 2023 GMT
Subject: serialNumber=1330d1c2604331190c6637518263e03112535cd669279f85570ca5c4cea2fcae, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:02:ba:ba:46:44:91:96:b9:9e:7c:b2:c6:
9c:54:21:2f:9c:3e:c7:a4:5a:60:87:00:e4:49:16:
63:cf:64:a1:85:87:0d:d0:ff:ff:a7:eb:83:46:a2:
32:24:ad:80:a2:bd:5c:ff:25:15:1a:d3:25:1d:7c:
41:96:00:ae:62:df:7e:f6:3c:31:8f:11:34:70:58:
db:29:28:e0:8c:27:57:2c:cc:a7:1b:ef:51:9a:a5:
3c:98:66:a5:18:64:ec:5b:25:ca:e7:30:4c:9a:25:
3a:3b:5a:0f:62:d5:4f:19:a2:ed:13:76:b4:34:1f:
1f:36:13:c7:1c:92:12:b0:54:9a:84:4a:f7:00:c0:
f9:73:f4:68:31:cc:c2:b8:b0:fe:78:8f:93:bd:7b:
0d:1f:f6:c0:a9:bc:98:dd:79:6e:6f:e9:90:f7:ad:
2a:4d:4b:9a:dd:c5:de:40:62:e0:33:a9:7c:78:8f:
6b:e0:ae:40:41:c7:2c:94:b7:b3:95:4f:0a:93:f3:
89:07:b3:a6:96:5f:26:a2:83:2b:23:e3:76:c4:17:
0e:f4:b5:ca:ec:de:b1:21:6f:62:42:31:ce:81:cf:
86:8e:34:7b:13:cc:1d:af:13:df:b7:49:9e:2d:27:
52:97:b2:da:28:cb:95:2d:f6:10:75:c0:90:9b:c8:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0A:D7:F6:8D:BF:07:4A:35:65:C1:91:07:BA:4A:69:78:EE:F8:44
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/46c7d501-c68b-428d-acf1-7703c1494064.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c4:2b:1d:4d:21:0b:f4:fd:59:06:77:fa:81:dd:20:7e:7f:
53:41:b0:89:44:1e:ec:85:f6:db:fd:6f:1c:e1:91:58:09:79:
50:98:ca:f8:d0:d0:88:67:7e:01:56:c4:98:04:bb:a6:e0:d0:
92:a6:97:b0:bf:62:da:68:86:44:b2:5f:1b:d6:02:5b:81:aa:
27:79:e3:d7:5a:1c:50:cc:b6:f7:5a:cd:04:da:3b:ad:59:a1:
4d:bd:0d:e6:76:f7:e2:93:a2:70:de:e6:d5:e2:db:18:d9:a4:
25:d3:26:45:1e:8b:cd:df:be:19:ea:d7:20:c1:4f:37:3a:a4:
fd:92:b3:45:94:de:f7:47:51:e3:90:fd:ad:f4:a4:7c:ef:0f:
18:26:5d:70:c0:3b:ef:a4:c1:43:bf:02:67:7f:f4:22:5c:a7:
8d:3e:78:49:74:27:c0:df:30:a7:6f:17:06:8c:9f:77:d7:05:
09:b8:64:a6:aa:f2:e0:a7:93:75:0e:16:14:6d:b2:b8:69:19:
9d:1f:2d:4c:45:90:a9:30:e3:ee:f3:ec:55:5a:2e:1a:4a:92:
bc:78:5a:0a:83:d6:8b:b3:35:d6:0a:ce:5c:79:ac:ab:eb:5f:
00:bd:59:54:ef:7b:d6:b1:02:ab:9f:d8:10:c2:78:e4:06:ad:
57:0f:6a:fc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDR0QrZUQDltgwe/g0Xe1PsTcvJcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDI3MDAwMDAwWhcNMjMxMjAxMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMzMwZDFjMjYwNDMzMTE5MGM2NjM3NTE4MjYzZTAzMTEy
NTM1Y2Q2NjkyNzlmODU1NzBjYTVjNGNlYTJmY2FlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4dAK6ukZEkZa5nnyyxpxUIS+cPsekWmCHAORJFmPPZKGF
hw3Q//+n64NGojIkrYCivVz/JRUa0yUdfEGWAK5i3372PDGPETRwWNspKOCMJ1cs
zKcb71GapTyYZqUYZOxbJcrnMEyaJTo7Wg9i1U8Zou0TdrQ0Hx82E8cckhKwVJqE
SvcAwPlz9GgxzMK4sP54j5O9ew0f9sCpvJjdeW5v6ZD3rSpNS5rdxd5AYuAzqXx4
j2vgrkBBxyyUt7OVTwqT84kHs6aWXyaigysj43bEFw70tcrs3rEhb2JCMc6Bz4aO
NHsTzB2vE9+3SZ4tJ1KXstooy5Ut9hB1wJCbyLy5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU9wrX9o2/B0o1ZcGRB7pKaXju+EQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzQ2YzdkNTAxLWM2OGItNDI4ZC1hY2YxLTc3MDNjMTQ5NDA2NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGLEKx1NIQv0/VkGd/qB3SB+f1NB
sIlEHuyF9tv9bxzhkVgJeVCYyvjQ0IhnfgFWxJgEu6bg0JKml7C/YtpohkSyXxvW
AluBqid549daHFDMtvdazQTaO61ZoU29DeZ29+KTonDe5tXi2xjZpCXTJkUei83f
vhnq1yDBTzc6pP2Ss0WU3vdHUeOQ/a30pHzvDxgmXXDAO++kwUO/Amd/9CJcp40+
eEl0J8DfMKdvFwaMn3fXBQm4ZKaq8uCnk3UOFhRtsrhpGZ0fLUxFkKkw4+7z7FVa
LhpKkrx4WgqD1ouzNdYKzlx5rKvrXwC9WVTve9axAquf2BDCeOQGrVcPavw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:07:48 2025 by rpki-client