Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4ff7e7e1-fbae-4f74-9fd1-9b8cb3e086bf.roa
File: 4ff7e7e1-fbae-4f74-9fd1-9b8cb3e086bf.roa (raw, json)
Hash identifier: uoIO1Dx7G0Oeq3AazuNkeyMO7BkVdJmei5UlLFJtXus=
Subject key identifier: 04:7B:D1:53:55:6C:7C:31:9C:C2:85:F2:20:D9:35:F5:6D:62:A7:30
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1C432CBDF84CCF5BAF4D2B67F3EF42D924556395
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4ff7e7e1-fbae-4f74-9fd1-9b8cb3e086bf.roa
Signing time: Mon 21 Aug 2023 00:00:00 +0000
ROA not before: Mon 21 Aug 2023 00:00:00 +0000
ROA not after: Mon 25 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:43:2c:bd:f8:4c:cf:5b:af:4d:2b:67:f3:ef:42:d9:24:55:63:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 21 00:00:00 2023 GMT
Not After : Sep 25 23:59:59 2023 GMT
Subject: serialNumber=25807e2aa425c20311a2fd574dfaef942a103f3be9664bd7068d7d90677c844c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:13:83:1a:27:cf:ff:ea:7c:67:d7:db:d3:
22:0a:82:3b:1a:b9:80:3a:1c:f9:8f:78:eb:44:3b:
4b:39:32:31:9d:c9:2a:3a:87:c5:45:a1:66:a6:18:
ae:99:61:94:40:95:75:23:e9:59:05:e3:9c:aa:c3:
69:dc:82:8b:a2:4d:cd:30:c1:89:3f:15:6f:63:42:
97:9f:58:8a:35:8c:20:0c:b4:5b:08:b1:25:f3:c6:
a6:ea:3f:7a:f9:9e:79:76:bd:a6:81:d6:50:ae:8d:
a8:f7:dc:15:7c:a1:6d:da:0c:0f:8d:1b:99:b4:f8:
02:40:74:d1:68:b6:8f:a1:bf:79:e9:9b:93:bf:d8:
64:d2:c7:6b:d9:87:83:34:bb:73:c1:40:36:19:c3:
16:09:eb:ba:f3:bb:61:78:a8:79:6e:4e:4b:96:1d:
65:91:46:9b:17:63:69:d1:5d:39:0b:97:c4:83:57:
b9:9a:3c:80:49:c6:1f:88:13:4d:96:ad:c1:27:67:
c8:c5:4d:c1:bd:8b:00:8c:4e:88:e9:19:5a:b2:b2:
1f:de:af:98:ba:bb:d5:c0:fb:86:bf:d3:ad:56:27:
9c:52:5b:cc:b7:9c:99:4e:9d:20:0b:0f:62:7e:b7:
6f:7d:50:a6:93:a2:d4:ed:9a:4d:73:a0:b4:8a:fa:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7B:D1:53:55:6C:7C:31:9C:C2:85:F2:20:D9:35:F5:6D:62:A7:30
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4ff7e7e1-fbae-4f74-9fd1-9b8cb3e086bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:47:fb:62:ef:54:ed:b5:32:fd:4d:31:a3:75:0d:e7:a7:5f:
64:01:57:a1:ad:57:f2:c9:5b:e2:be:41:29:80:9d:b5:9a:aa:
a6:28:77:cd:72:10:dd:74:6b:06:4b:a5:ad:9a:cc:10:f0:a0:
bf:73:5e:83:65:f3:73:f4:51:6e:5f:bf:0c:1d:53:c7:a6:44:
be:fd:70:c4:d1:32:5f:a1:2c:ad:8d:a2:df:01:c7:12:ae:3e:
fb:b4:ac:ab:1e:45:ef:31:8e:3f:50:d6:ef:4d:40:5d:c2:8e:
05:a6:ec:9f:d8:6c:58:66:7c:59:94:91:fb:1e:17:c3:7c:12:
42:8a:cd:c1:58:03:15:eb:15:17:2e:58:c3:82:c0:40:60:24:
2f:73:5a:25:6e:b8:f5:2c:61:bc:92:10:1c:a2:64:5f:c1:6c:
00:7d:a5:a0:86:04:9b:c2:db:8c:99:c7:f5:44:c1:3b:07:a1:
b8:19:3c:c6:1f:a3:23:f8:82:9a:d5:72:72:6e:e7:a5:cd:38:
04:ee:9b:31:82:e6:4c:5f:62:c8:c1:e2:84:80:45:ab:b9:8b:
a7:d7:ce:ad:2e:4e:9e:96:d8:c1:fc:f7:6d:c6:fc:34:be:9e:
10:b4:ba:e6:d8:a8:39:87:a8:e0:c7:cb:78:a0:7c:52:a0:e9:
d8:9b:9a:be
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHEMsvfhMz1uvTStn8+9C2SRVY5UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODIxMDAwMDAwWhcNMjMwOTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNTgwN2UyYWE0MjVjMjAzMTFhMmZkNTc0ZGZhZWY5NDJh
MTAzZjNiZTk2NjRiZDcwNjhkN2Q5MDY3N2M4NDRjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWUBODGifP/+p8Z9fb0yIKgjsauYA6HPmPeOtEO0s5MjGd
ySo6h8VFoWamGK6ZYZRAlXUj6VkF45yqw2ncgouiTc0wwYk/FW9jQpefWIo1jCAM
tFsIsSXzxqbqP3r5nnl2vaaB1lCujaj33BV8oW3aDA+NG5m0+AJAdNFoto+hv3np
m5O/2GTSx2vZh4M0u3PBQDYZwxYJ67rzu2F4qHluTkuWHWWRRpsXY2nRXTkLl8SD
V7maPIBJxh+IE02WrcEnZ8jFTcG9iwCMTojpGVqysh/er5i6u9XA+4a/061WJ5xS
W8y3nJlOnSALD2J+t299UKaTotTtmk1zoLSK+lsVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUBHvRU1VsfDGcwoXyINk19W1ipzAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzRmZjdlN2UxLWZiYWUtNGY3NC05ZmQxLTliOGNiM2UwODZiZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKRH+2LvVO21Mv1NMaN1DeenX2QB
V6GtV/LJW+K+QSmAnbWaqqYod81yEN10awZLpa2azBDwoL9zXoNl83P0UW5fvwwd
U8emRL79cMTRMl+hLK2Not8BxxKuPvu0rKseRe8xjj9Q1u9NQF3CjgWm7J/YbFhm
fFmUkfseF8N8EkKKzcFYAxXrFRcuWMOCwEBgJC9zWiVuuPUsYbySEByiZF/BbAB9
paCGBJvC24yZx/VEwTsHobgZPMYfoyP4gprVcnJu56XNOATumzGC5kxfYsjB4oSA
Rau5i6fXzq0uTp6W2MH8923G/DS+nhC0uubYqDmHqODHy3igfFKg6dibmr4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:02:53 2025 by rpki-client