Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a3baaf9-454c-41c4-b557-0066b566dbef.roa
File: 4a3baaf9-454c-41c4-b557-0066b566dbef.roa (raw, json)
Hash identifier: fLsuncAwmw+IRBzsNgVucquPLwdsOA9iw49D7cGQ2cw=
Subject key identifier: 3A:66:3D:0A:6A:91:EC:E1:E0:E5:3A:9A:D4:33:8B:68:75:FF:08:E9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 502949027349268FD642D604DAAFFD600E623EB4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a3baaf9-454c-41c4-b557-0066b566dbef.roa
Signing time: Thu 17 Apr 2025 10:33:10 +0000
ROA not before: Thu 17 Apr 2025 10:33:10 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:29:49:02:73:49:26:8f:d6:42:d6:04:da:af:fd:60:0e:62:3e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 17 10:33:10 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=6159f92d765bac8b9fef885216713d3304a426845b13bcbc7cc75819d11e38ba, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:db:6f:ef:d3:10:98:d9:60:11:b8:ec:34:
5e:10:97:d8:bd:e8:9b:5a:11:66:8b:fc:34:7c:75:
60:81:f9:a6:38:b2:b7:61:25:52:69:a2:ed:a5:6f:
9e:38:8c:d4:40:e7:90:e4:4f:ac:90:12:87:a2:70:
e0:e7:07:ce:d2:39:ba:f9:7a:0a:87:98:4d:26:bf:
22:81:66:d1:d0:01:52:03:74:a5:a7:d9:32:61:5e:
ab:8f:6b:aa:25:c9:04:2e:f9:36:5c:6e:88:ff:fc:
7c:cf:95:e1:1f:ed:57:09:62:a1:64:07:4f:6e:12:
bf:fb:26:a6:5d:4d:4e:d3:b8:74:c0:b6:4c:c4:3f:
c6:b5:bc:e0:19:2c:37:7f:cd:34:bd:44:59:26:0f:
45:6c:bb:4a:e6:5c:19:73:26:a0:2a:e1:96:9d:cd:
9e:44:71:9a:c8:f1:6e:2e:7e:25:7a:1a:85:15:78:
de:d4:e4:33:f2:17:58:6a:cd:9d:bd:3c:4b:3b:27:
95:0c:5c:a2:88:38:4a:99:df:8a:a7:47:41:90:c2:
4f:bc:9e:a9:18:6c:2c:0f:1e:38:ad:d2:6c:d3:b4:
02:f4:54:f3:1a:36:a1:d2:74:aa:74:45:74:80:a2:
4a:d8:58:0d:b8:46:00:3c:d2:62:e8:40:52:d9:d2:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:66:3D:0A:6A:91:EC:E1:E0:E5:3A:9A:D4:33:8B:68:75:FF:08:E9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a3baaf9-454c-41c4-b557-0066b566dbef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c4:c9:a7:a0:63:37:a8:c8:70:14:16:8d:3c:5c:bc:68:ac:
73:ea:44:41:6d:50:c6:8b:99:80:90:eb:36:e0:93:d8:72:c5:
1b:cc:73:c8:e0:c5:44:aa:7e:e6:e7:af:5d:4e:1f:07:05:d4:
5b:be:49:9c:05:85:f5:06:f2:8f:cb:3a:f3:d5:89:05:47:c6:
ed:b2:e9:5f:92:5d:b9:1e:68:0f:8c:05:9e:15:11:69:f5:c5:
ce:02:1a:8f:93:d5:ef:c7:a5:20:5f:68:6a:f3:e1:ff:dc:85:
d7:06:71:1d:29:4b:89:07:81:e8:5f:08:51:cb:02:e2:7f:76:
a8:20:13:f7:13:bf:8f:f9:ba:aa:7b:57:56:32:45:0a:5c:36:
04:43:92:03:6f:a9:f6:d2:d1:a1:28:e1:7d:30:7b:74:4a:96:
07:93:bd:c2:78:aa:c0:b6:83:0b:0f:ab:65:23:4c:28:84:fb:
88:44:07:3b:6e:06:cc:73:98:91:84:22:44:c6:3e:ee:4b:59:
ce:ef:1b:7f:71:f4:5b:e7:5f:d7:ff:8d:25:6c:bc:c9:e5:e2:
df:f1:31:ec:81:a4:e7:43:b8:ac:f0:17:6d:75:33:70:71:de:
28:8d:f7:2c:c6:cd:78:a9:d4:88:f9:fd:dc:f2:3b:ec:47:51:
5a:d8:d8:ba
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUClJAnNJJo/WQtYE2q/9YA5iPrQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDE3MTAzMzEwWhcNMjUwNTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MTU5ZjkyZDc2NWJhYzhiOWZlZjg4NTIxNjcxM2QzMzA0
YTQyNjg0NWIxM2JjYmM3Y2M3NTgxOWQxMWUzOGJhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCym9tv79MQmNlgEbjsNF4Ql9i96JtaEWaL/DR8dWCB+aY4
srdhJVJpou2lb544jNRA55DkT6yQEoeicODnB87SObr5egqHmE0mvyKBZtHQAVID
dKWn2TJhXquPa6olyQQu+TZcboj//HzPleEf7VcJYqFkB09uEr/7JqZdTU7TuHTA
tkzEP8a1vOAZLDd/zTS9RFkmD0Vsu0rmXBlzJqAq4ZadzZ5EcZrI8W4ufiV6GoUV
eN7U5DPyF1hqzZ29PEs7J5UMXKKIOEqZ34qnR0GQwk+8nqkYbCwPHjit0mzTtAL0
VPMaNqHSdKp0RXSAokrYWA24RgA80mLoQFLZ0jizAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOmY9CmqR7OHg5Tqa1DOLaHX/COkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzRhM2JhYWY5LTQ1NGMtNDFjNC1iNTU3LTAwNjZiNTY2ZGJlZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAITEyaegYzeoyHAUFo08XLxorHPq
REFtUMaLmYCQ6zbgk9hyxRvMc8jgxUSqfubnr11OHwcF1Fu+SZwFhfUG8o/LOvPV
iQVHxu2y6V+SXbkeaA+MBZ4VEWn1xc4CGo+T1e/HpSBfaGrz4f/chdcGcR0pS4kH
gehfCFHLAuJ/dqggE/cTv4/5uqp7V1YyRQpcNgRDkgNvqfbS0aEo4X0we3RKlgeT
vcJ4qsC2gwsPq2UjTCiE+4hEBztuBsxzmJGEIkTGPu5LWc7vG39x9FvnX9f/jSVs
vMnl4t/xMeyBpOdDuKzwF211M3Bx3iiN9yzGzXip1Ij5/dzyO+xHUVrY2Lo=
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:43:20 2025 by rpki-client