Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a3ef309-b0b0-446e-97d3-df7c6daaf5bf.roa
File: 4a3ef309-b0b0-446e-97d3-df7c6daaf5bf.roa (raw, json)
Hash identifier: WDaP800eVOUOluTIWmxufosbSbQBj9vsm8BvaSm1lO4=
Subject key identifier: 53:C6:13:33:58:4D:6C:B8:CD:D9:0C:6E:AD:8C:66:CA:25:37:DC:DC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 50BCF83E6A226856B44BE1758C2AC06408760481
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a3ef309-b0b0-446e-97d3-df7c6daaf5bf.roa
Signing time: Sat 03 Feb 2024 00:00:00 +0000
ROA not before: Sat 03 Feb 2024 00:00:00 +0000
ROA not after: Sat 09 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:bc:f8:3e:6a:22:68:56:b4:4b:e1:75:8c:2a:c0:64:08:76:04:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 3 00:00:00 2024 GMT
Not After : Mar 9 23:59:59 2024 GMT
Subject: serialNumber=e67ec6db8b6fa8eb0136e3433bcc2496bbdcdd4873fa126f22bffa6b80ed4c81, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c9:60:94:3e:25:69:61:dd:2f:d2:5a:f4:e3:
cd:7b:ba:ba:8a:ed:a2:ca:e7:12:10:14:47:44:08:
0a:6c:ee:16:4d:1c:1e:e5:4a:b0:a4:a6:fd:25:d9:
aa:36:1b:e2:46:1c:bf:4d:59:e7:71:8a:76:46:d7:
07:b3:ad:03:57:d4:c1:e3:ea:c0:fa:2f:ee:cc:9f:
55:d4:70:03:24:71:a0:ce:34:c6:03:71:6a:26:e8:
e3:3c:53:0a:a9:2b:f3:e0:6a:d8:a5:be:3f:62:78:
3d:c8:eb:66:a6:a8:59:34:c2:4f:09:ab:dd:47:bc:
50:1c:86:1b:81:bc:ad:8d:b5:85:74:7b:c0:14:4e:
0b:8d:d8:06:28:98:d9:f1:74:66:81:7f:6e:30:15:
79:22:3a:7b:e7:4d:8d:c6:7a:be:05:29:69:eb:8b:
44:ed:f6:fb:c7:95:be:96:6c:7b:91:14:a8:e5:c2:
aa:ef:bd:3d:34:7b:46:76:70:33:3c:11:06:89:94:
01:95:5e:d0:14:cb:dc:27:7b:dd:a6:ba:db:01:b1:
41:c9:78:cc:f4:4f:2b:8f:e5:e1:b4:3b:2b:66:0d:
0a:14:63:b3:fa:f8:06:a5:8a:81:7a:20:44:ea:76:
09:5f:3c:ca:ea:0b:0e:c4:15:bd:41:f9:eb:bb:3b:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C6:13:33:58:4D:6C:B8:CD:D9:0C:6E:AD:8C:66:CA:25:37:DC:DC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a3ef309-b0b0-446e-97d3-df7c6daaf5bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:30:cc:51:0e:69:73:66:41:fc:50:f1:1a:19:2a:be:63:b0:
d6:db:c2:e1:8e:81:51:f2:42:47:34:25:ac:66:76:75:7f:3b:
ee:97:d2:b6:1d:25:7b:53:43:47:ce:8a:73:b2:96:80:ad:0d:
bb:c0:6b:38:d7:65:86:c4:79:29:9d:fa:38:f0:a3:c6:e7:ca:
d5:a1:55:c8:64:15:21:64:e7:44:1a:2c:c6:97:a5:df:66:aa:
da:0f:11:94:6e:f1:ce:2d:79:08:1e:0e:83:a4:0c:77:56:e6:
2c:80:8a:de:d5:95:a9:cc:6f:bb:2e:d9:43:fb:16:f5:30:f0:
bb:50:db:51:3c:bd:1d:0c:aa:ef:15:d9:98:87:4a:e0:4e:31:
c8:d3:03:96:d4:b3:a9:9c:ed:71:bc:2d:b5:3b:aa:1b:2e:c6:
0b:54:4e:8f:5b:7f:75:63:a4:77:d1:e7:70:40:46:e6:db:62:
fb:5c:b6:12:80:95:d1:e6:f8:32:3d:48:c4:20:2a:bb:f8:0b:
93:27:db:3c:fb:97:b4:b4:78:7c:48:25:11:c6:01:5e:75:ff:
a3:7f:70:c4:f8:13:77:ff:77:4d:71:8c:4e:db:1b:78:3b:52:
ab:ab:34:1b:bd:5a:b7:52:f9:e1:c1:d7:57:f5:01:82:51:8f:
34:9e:a3:c0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUULz4PmoiaFa0S+F1jCrAZAh2BIEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMjAzMDAwMDAwWhcNMjQwMzA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNjdlYzZkYjhiNmZhOGViMDEzNmUzNDMzYmNjMjQ5NmJi
ZGNkZDQ4NzNmYTEyNmYyMmJmZmE2YjgwZWQ0YzgxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClyWCUPiVpYd0v0lr04817urqK7aLK5xIQFEdECAps7hZN
HB7lSrCkpv0l2ao2G+JGHL9NWedxinZG1wezrQNX1MHj6sD6L+7Mn1XUcAMkcaDO
NMYDcWom6OM8UwqpK/Pgatilvj9ieD3I62amqFk0wk8Jq91HvFAchhuBvK2NtYV0
e8AUTguN2AYomNnxdGaBf24wFXkiOnvnTY3Ger4FKWnri0Tt9vvHlb6WbHuRFKjl
wqrvvT00e0Z2cDM8EQaJlAGVXtAUy9wne92mutsBsUHJeMz0TyuP5eG0OytmDQoU
Y7P6+AalioF6IETqdglfPMrqCw7EFb1B+eu7O2gjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUU8YTM1hNbLjN2QxurYxmyiU33NwwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzRhM2VmMzA5LWIwYjAtNDQ2ZS05N2QzLWRmN2M2ZGFhZjViZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAD0wzFEOaXNmQfxQ8RoZKr5jsNbb
wuGOgVHyQkc0JaxmdnV/O+6X0rYdJXtTQ0fOinOyloCtDbvAazjXZYbEeSmd+jjw
o8bnytWhVchkFSFk50QaLMaXpd9mqtoPEZRu8c4teQgeDoOkDHdW5iyAit7VlanM
b7su2UP7FvUw8LtQ21E8vR0Mqu8V2ZiHSuBOMcjTA5bUs6mc7XG8LbU7qhsuxgtU
To9bf3VjpHfR53BARubbYvtcthKAldHm+DI9SMQgKrv4C5Mn2zz7l7S0eHxIJRHG
AV51/6N/cMT4E3f/d01xjE7bG3g7UqurNBu9WrdS+eHB11f1AYJRjzSeo8A=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:39:33 2025 by rpki-client