Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4be05c22-aa91-45a6-a689-d4edce9bfdad.roa
File: 4be05c22-aa91-45a6-a689-d4edce9bfdad.roa (raw, json)
Hash identifier: 2G44IQtYkC/u2eiobjBbT+mBrBwzFtjkAnSOp1FGjD8=
Subject key identifier: 3B:24:16:D1:EA:EA:13:DC:C7:B4:8E:75:BD:B5:B4:A9:6E:85:02:AD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7B355811E4F25348135550E2D8508CBDB994356A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4be05c22-aa91-45a6-a689-d4edce9bfdad.roa
Signing time: Mon 24 Jun 2024 00:00:00 +0000
ROA not before: Mon 24 Jun 2024 00:00:00 +0000
ROA not after: Mon 29 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:35:58:11:e4:f2:53:48:13:55:50:e2:d8:50:8c:bd:b9:94:35:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 24 00:00:00 2024 GMT
Not After : Jul 29 23:59:59 2024 GMT
Subject: serialNumber=25f21c130f19b8d9e653036a3f71cba07e08181682869137a38783e970884bff, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:e7:02:a3:c5:a9:0e:52:aa:dc:27:31:bf:
01:a9:f2:8e:cc:64:52:85:be:be:80:d6:18:a1:7b:
e8:40:d2:a2:6d:2f:85:b4:de:08:3f:91:c9:cb:7b:
0c:94:ec:4e:6d:93:16:d5:f3:5f:5c:e1:28:68:fe:
bd:ff:19:b0:a0:dd:ee:af:8c:54:cf:b4:2b:04:6a:
be:55:53:da:c9:ce:86:54:12:04:ca:e4:25:e1:5e:
55:b1:76:9a:bd:9b:e7:18:e5:1e:bb:8f:73:3e:3e:
94:b7:6a:21:0e:56:a2:51:ff:da:65:ef:a3:98:ed:
3f:51:e5:af:df:d5:87:1f:cc:7c:90:18:7c:5a:fc:
db:64:ef:c3:49:01:69:19:96:37:2c:b9:87:1a:a8:
7f:24:f2:05:b6:b9:1b:a2:45:5f:a1:9e:a1:38:3f:
69:50:a0:04:99:ff:f8:26:94:68:9f:0a:c6:b4:d9:
d4:28:24:22:5d:46:a9:ed:51:5a:6e:3d:98:b4:59:
24:c4:a4:3b:0c:c6:c1:fa:0b:a7:99:4c:4d:93:51:
e5:71:2d:eb:59:4d:8f:bf:ef:7f:a8:83:72:40:8a:
70:15:d1:15:83:d9:05:03:5a:08:1c:d2:26:4e:8f:
55:cf:76:fc:e3:1f:cf:93:bb:76:4f:c6:4b:56:5d:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:24:16:D1:EA:EA:13:DC:C7:B4:8E:75:BD:B5:B4:A9:6E:85:02:AD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4be05c22-aa91-45a6-a689-d4edce9bfdad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:83:21:78:25:86:16:1c:e4:19:60:52:06:95:00:75:7c:cc:
5b:19:16:1c:2d:bf:1a:4d:90:fd:95:f8:fc:09:85:03:db:84:
ac:4b:a3:19:14:71:b3:ce:06:74:b7:69:e0:68:d7:d9:c2:9e:
cc:e7:6c:bc:ff:45:2a:1b:d6:10:14:8f:82:e7:f0:0e:cf:23:
f3:53:23:9a:74:be:0c:5d:5e:1e:60:19:d6:ca:2f:57:16:42:
39:99:4f:cf:4a:93:74:d2:21:85:86:e8:0c:01:22:3a:83:c8:
63:21:1f:82:12:8b:02:20:7a:65:88:e1:f4:f1:6b:c2:d8:f7:
6c:64:e5:68:33:76:85:b2:fb:04:78:7b:27:0f:3c:97:f8:21:
14:2c:08:0a:97:32:fe:09:59:29:1f:56:ab:37:98:64:66:77:
47:4a:0a:21:04:77:89:ff:85:38:8b:00:60:9f:e8:bd:aa:d9:
01:7b:a0:f4:91:38:39:9b:a6:2b:c3:50:db:46:a5:38:4c:a7:
b9:c4:61:ad:e8:05:7c:e6:07:e6:e9:36:b6:fd:07:25:6e:55:
6a:58:8f:a8:e3:7c:7b:63:ac:9b:63:4f:40:91:85:04:35:b0:
37:f1:37:b6:0c:cd:fb:8d:d5:cc:74:7b:d4:b8:b7:72:7b:5d:
81:ce:fc:5a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUezVYEeTyU0gTVVDi2FCMvbmUNWowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNjI0MDAwMDAwWhcNMjQwNzI5MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNWYyMWMxMzBmMTliOGQ5ZTY1MzAzNmEzZjcxY2JhMDdl
MDgxODE2ODI4NjkxMzdhMzg3ODNlOTcwODg0YmZmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzoOcCo8WpDlKq3CcxvwGp8o7MZFKFvr6A1hihe+hA0qJt
L4W03gg/kcnLewyU7E5tkxbV819c4Sho/r3/GbCg3e6vjFTPtCsEar5VU9rJzoZU
EgTK5CXhXlWxdpq9m+cY5R67j3M+PpS3aiEOVqJR/9pl76OY7T9R5a/f1YcfzHyQ
GHxa/Ntk78NJAWkZljcsuYcaqH8k8gW2uRuiRV+hnqE4P2lQoASZ//gmlGifCsa0
2dQoJCJdRqntUVpuPZi0WSTEpDsMxsH6C6eZTE2TUeVxLetZTY+/73+og3JAinAV
0RWD2QUDWggc0iZOj1XPdvzjH8+Tu3ZPxktWXX8VAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOyQW0erqE9zHtI51vbW0qW6FAq0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzRiZTA1YzIyLWFhOTEtNDVhNi1hNjg5LWQ0ZWRjZTliZmRhZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJqDIXglhhYc5BlgUgaVAHV8zFsZ
FhwtvxpNkP2V+PwJhQPbhKxLoxkUcbPOBnS3aeBo19nCnsznbLz/RSob1hAUj4Ln
8A7PI/NTI5p0vgxdXh5gGdbKL1cWQjmZT89Kk3TSIYWG6AwBIjqDyGMhH4ISiwIg
emWI4fTxa8LY92xk5WgzdoWy+wR4eycPPJf4IRQsCAqXMv4JWSkfVqs3mGRmd0dK
CiEEd4n/hTiLAGCf6L2q2QF7oPSRODmbpivDUNtGpThMp7nEYa3oBXzmB+bpNrb9
ByVuVWpYj6jjfHtjrJtjT0CRhQQ1sDfxN7YMzfuN1cx0e9S4t3J7XYHO/Fo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:36:27 2025 by rpki-client