Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/480cb0ec-5d77-4725-86a8-37e89e3a1164.roa
File: 480cb0ec-5d77-4725-86a8-37e89e3a1164.roa (raw, json)
Hash identifier: JICyDdF69/bt7VzAm2cnLjftiLhB21mzC09bigqx2SA=
Subject key identifier: EB:F9:F1:1B:48:3E:9A:F8:3D:EB:91:20:56:AB:B0:57:B8:73:82:71
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 73385ACFAC31FA3648980ED5D44438763289134E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/480cb0ec-5d77-4725-86a8-37e89e3a1164.roa
Signing time: Sat 07 Sep 2024 00:00:00 +0000
ROA not before: Sat 07 Sep 2024 00:00:00 +0000
ROA not after: Sat 12 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:38:5a:cf:ac:31:fa:36:48:98:0e:d5:d4:44:38:76:32:89:13:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 7 00:00:00 2024 GMT
Not After : Oct 12 23:59:59 2024 GMT
Subject: serialNumber=4ebff889ddfebbdc31ab04bc2360ef81406e76c78fbf9cbd0005dbda96035f5c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4e:b8:54:64:51:b5:f2:fa:c5:47:b7:5b:7a:
b1:9c:4d:62:60:9e:85:b3:14:23:cf:ef:13:55:37:
66:16:05:1b:2a:29:18:9a:5e:61:21:05:c8:55:e7:
0f:8b:90:de:e9:4c:db:4a:84:63:25:4c:23:80:f4:
8f:40:cc:f9:30:4a:c1:a2:80:18:5b:9d:08:e3:2d:
12:4d:27:f5:f0:2a:c1:64:59:0c:e0:37:e5:ad:72:
b4:53:db:a8:9a:75:f8:ff:9f:37:e8:de:47:40:21:
fd:e0:e4:a6:1e:00:42:f5:12:64:2f:95:c6:45:e4:
28:86:8c:62:bb:e8:1f:8d:ac:ae:34:28:fa:7d:61:
ac:62:b8:a3:a8:db:54:28:d3:23:38:e7:c5:45:d4:
fe:2e:f7:dd:48:2e:56:0e:a3:2c:06:0c:f8:3c:5c:
73:7e:b9:f2:c9:51:66:a3:2a:f9:aa:0e:d5:07:f2:
9b:5a:dc:8d:9c:c2:b0:75:2a:24:8e:cd:1a:2c:c8:
a6:09:48:91:ee:86:87:99:7f:a1:fb:3b:f0:a1:4b:
a4:5b:15:52:4a:b2:4b:61:6b:39:72:01:95:5e:ea:
02:58:96:9a:98:c6:bf:54:ce:ef:47:eb:de:75:52:
13:39:5d:07:f7:e1:10:74:88:c0:3c:3c:98:1a:60:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F9:F1:1B:48:3E:9A:F8:3D:EB:91:20:56:AB:B0:57:B8:73:82:71
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/480cb0ec-5d77-4725-86a8-37e89e3a1164.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a0:26:90:63:75:de:f2:2c:6e:e4:f4:ab:ff:4d:b9:6c:7d:
ac:7a:e9:a0:c6:c0:7a:96:ed:8e:c4:c5:c1:ad:b9:74:da:cf:
2e:d1:c4:31:10:f0:fe:02:e3:77:71:ae:7e:77:26:8d:b9:be:
d3:14:a2:52:48:73:1f:ab:69:b3:4a:87:69:7c:a9:49:e3:7e:
b5:ee:cd:b2:17:a9:bf:b9:52:86:f2:27:c1:cd:77:0c:e2:25:
27:fb:04:be:21:65:c1:fa:0b:c8:00:82:31:37:ba:67:6e:e2:
b6:04:f2:06:d2:b1:7b:20:d5:97:c0:8d:70:83:b7:e7:63:12:
6f:1b:94:66:0a:00:50:57:4d:fb:80:85:69:7e:95:03:66:f7:
e6:92:a8:6c:5b:68:76:5d:64:60:c3:db:4a:d8:df:2f:51:67:
f9:4a:3d:fb:47:17:87:34:e4:ec:c3:c3:6c:c3:ca:f3:c8:3f:
2e:ec:d1:61:c9:69:4b:6b:2b:67:d9:93:d3:4d:92:8c:b3:26:
34:49:c2:c5:4f:4e:ee:a7:aa:ae:d4:ee:5e:b8:08:ce:e4:c5:
5f:ec:7f:54:c0:d3:6f:59:37:b6:ed:a8:9f:53:44:d1:0c:37:
87:f9:11:7a:a6:71:b7:18:b8:0d:3e:f5:2d:17:eb:24:06:ca:
64:36:e8:32
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUczhaz6wx+jZImA7V1EQ4djKJE04wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwOTA3MDAwMDAwWhcNMjQxMDEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZWJmZjg4OWRkZmViYmRjMzFhYjA0YmMyMzYwZWY4MTQw
NmU3NmM3OGZiZjljYmQwMDA1ZGJkYTk2MDM1ZjVjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDaTrhUZFG18vrFR7dberGcTWJgnoWzFCPP7xNVN2YWBRsq
KRiaXmEhBchV5w+LkN7pTNtKhGMlTCOA9I9AzPkwSsGigBhbnQjjLRJNJ/XwKsFk
WQzgN+WtcrRT26iadfj/nzfo3kdAIf3g5KYeAEL1EmQvlcZF5CiGjGK76B+NrK40
KPp9YaxiuKOo21Qo0yM458VF1P4u991ILlYOoywGDPg8XHN+ufLJUWajKvmqDtUH
8pta3I2cwrB1KiSOzRosyKYJSJHuhoeZf6H7O/ChS6RbFVJKskthazlyAZVe6gJY
lpqYxr9Uzu9H6951UhM5XQf34RB0iMA8PJgaYEWRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6/nxG0g+mvg965EgVquwV7hzgnEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzQ4MGNiMGVjLTVkNzctNDcyNS04NmE4LTM3ZTg5ZTNhMTE2NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAF2gJpBjdd7yLG7k9Kv/Tblsfax6
6aDGwHqW7Y7ExcGtuXTazy7RxDEQ8P4C43dxrn53Jo25vtMUolJIcx+rabNKh2l8
qUnjfrXuzbIXqb+5UobyJ8HNdwziJSf7BL4hZcH6C8gAgjE3umdu4rYE8gbSsXsg
1ZfAjXCDt+djEm8blGYKAFBXTfuAhWl+lQNm9+aSqGxbaHZdZGDD20rY3y9RZ/lK
PftHF4c05OzDw2zDyvPIPy7s0WHJaUtrK2fZk9NNkoyzJjRJwsVPTu6nqq7U7l64
CM7kxV/sf1TA029ZN7btqJ9TRNEMN4f5EXqmcbcYuA0+9S0X6yQGymQ26DI=
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:16:37 2025 by rpki-client