Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4daf4d93-5a48-4706-b3c1-5fddba4a5237.roa
File: 4daf4d93-5a48-4706-b3c1-5fddba4a5237.roa (raw, json)
Hash identifier: snl6ThmWZAEcI+yDEJ5h69yii8y2Jz5N1kpinwG4334=
Subject key identifier: BA:DE:96:6E:F4:11:BB:8F:32:7D:8A:B6:F3:F5:13:EE:27:F4:E3:2D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6BCB1DA2F1A01015904C203421BBFF64476107FB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4daf4d93-5a48-4706-b3c1-5fddba4a5237.roa
Signing time: Tue 06 May 2025 20:48:17 +0000
ROA not before: Tue 06 May 2025 20:48:17 +0000
ROA not after: Tue 10 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:cb:1d:a2:f1:a0:10:15:90:4c:20:34:21:bb:ff:64:47:61:07:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 6 20:48:17 2025 GMT
Not After : Jun 10 23:59:59 2025 GMT
Subject: serialNumber=6c710e092b80bdec250b03756682e78e5284be7d6cd6e160beef3db0ab5e915d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:db:be:86:eb:c0:44:80:3d:21:7d:38:75:
78:2c:cd:1b:04:bc:66:55:20:0f:06:b7:2a:c7:b3:
65:0d:e0:c0:b9:49:86:53:b3:60:0e:06:14:da:1a:
46:a5:a8:4a:76:2c:43:51:f6:4d:50:da:8c:b1:90:
1a:19:a1:8e:65:98:30:f4:c6:8a:8c:7d:54:3f:b5:
4c:4a:d3:59:83:9e:62:1d:5d:8c:db:da:50:9e:48:
b2:97:13:4e:54:9f:19:9a:51:cf:1a:56:be:b9:23:
ba:22:0e:bc:18:3a:4c:89:e3:ad:b3:cd:63:61:46:
e7:94:5b:fe:85:c3:3a:a5:34:9f:5a:ef:d1:d6:de:
fe:a4:c4:83:d8:5c:6d:7f:36:0e:69:5a:c4:8a:a3:
84:20:aa:87:44:ec:d6:3d:48:e5:67:ef:f7:9f:67:
6e:c3:3f:b7:be:19:a0:91:9b:4c:ec:40:9a:3c:13:
5a:d6:40:62:3e:fa:ea:6f:19:43:da:9e:4c:10:8d:
8a:7e:0e:b1:4f:a4:2a:93:61:79:bb:98:85:1a:fa:
cb:71:aa:50:3e:1c:a7:ab:15:a6:c0:8c:6d:8e:7d:
ed:94:4a:4d:5b:6b:59:b3:6b:cc:1d:c4:86:01:7c:
d7:45:44:56:2e:00:43:c4:4d:a6:77:ed:93:57:bb:
11:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DE:96:6E:F4:11:BB:8F:32:7D:8A:B6:F3:F5:13:EE:27:F4:E3:2D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4daf4d93-5a48-4706-b3c1-5fddba4a5237.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:12:ba:24:3d:6c:94:68:66:b7:ed:80:19:f1:a4:ff:ae:3b:
ad:65:0d:ff:ad:36:cd:43:8d:b4:3d:d9:42:14:47:68:a9:8d:
a7:42:41:9d:6d:95:54:3f:d4:2c:a0:4e:24:c7:f3:fc:e8:dd:
0b:37:77:fb:07:91:67:90:2b:58:b3:44:71:00:57:94:eb:e1:
39:22:33:a3:5a:34:10:24:b6:62:be:8a:70:31:1a:ba:36:77:
e2:d6:66:bc:41:13:87:19:65:82:89:e0:d8:8d:f8:3b:5b:98:
d0:2e:55:7d:7e:ed:af:1b:b9:ca:cb:e9:a3:1f:b4:30:35:8d:
cf:66:f3:6c:18:5f:b6:25:c6:41:2a:39:5c:d0:ea:65:93:37:
05:aa:65:bb:5f:ea:23:7e:ef:7f:16:70:bd:ba:71:ed:64:ef:
b5:0b:7e:ce:8b:94:4b:77:65:76:ee:f6:29:90:9d:75:28:5a:
54:a3:9c:1a:0f:29:88:25:24:2f:8c:29:c4:7c:8b:bd:fc:7f:
6f:dd:f4:14:02:ea:00:36:ef:23:12:65:9b:ea:a0:61:96:48:
61:17:59:b7:57:e3:b2:eb:8b:53:10:6b:58:68:9d:25:0b:20:
b2:59:d2:ab:4b:03:a2:91:6b:bf:a6:81:4d:01:ab:7b:15:c1:
8f:29:53:75
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUa8sdovGgEBWQTCA0Ibv/ZEdhB/swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNTA2MjA0ODE3WhcNMjUwNjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A2YzcxMGUwOTJiODBiZGVjMjUwYjAzNzU2NjgyZTc4ZTUy
ODRiZTdkNmNkNmUxNjBiZWVmM2RiMGFiNWU5MTVkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6F9u+huvARIA9IX04dXgszRsEvGZVIA8GtyrHs2UN4MC5
SYZTs2AOBhTaGkalqEp2LENR9k1Q2oyxkBoZoY5lmDD0xoqMfVQ/tUxK01mDnmId
XYzb2lCeSLKXE05UnxmaUc8aVr65I7oiDrwYOkyJ462zzWNhRueUW/6FwzqlNJ9a
79HW3v6kxIPYXG1/Ng5pWsSKo4QgqodE7NY9SOVn7/efZ27DP7e+GaCRm0zsQJo8
E1rWQGI++upvGUPankwQjYp+DrFPpCqTYXm7mIUa+stxqlA+HKerFabAjG2Ofe2U
Sk1ba1mza8wdxIYBfNdFRFYuAEPETaZ37ZNXuxGxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUut6WbvQRu48yfYq28/UT7if04y0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzRkYWY0ZDkzLTVhNDgtNDcwNi1iM2MxLTVmZGRiYTRhNTIzNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAASuiQ9bJRoZrftgBnxpP+uO61l
Df+tNs1DjbQ92UIUR2ipjadCQZ1tlVQ/1CygTiTH8/zo3Qs3d/sHkWeQK1izRHEA
V5Tr4TkiM6NaNBAktmK+inAxGro2d+LWZrxBE4cZZYKJ4NiN+DtbmNAuVX1+7a8b
ucrL6aMftDA1jc9m82wYX7YlxkEqOVzQ6mWTNwWqZbtf6iN+738WcL26ce1k77UL
fs6LlEt3ZXbu9imQnXUoWlSjnBoPKYglJC+MKcR8i738f2/d9BQC6gA27yMSZZvq
oGGWSGEXWbdX47Lri1MQa1honSULILJZ0qtLA6KRa7+mgU0Bq3sVwY8pU3U=
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:23:08 2025 by rpki-client