Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5518839d-6b9e-4424-8b4a-c5f3378287cd.roa
File: 5518839d-6b9e-4424-8b4a-c5f3378287cd.roa (raw, json)
Hash identifier: nvAQH4Rj1GrY73YNhTTaxwQ9L5ceHYD/B6Zcg6vfEyg=
Subject key identifier: 53:9B:36:5C:07:43:DD:06:35:F0:93:51:13:A4:15:EF:57:D4:1F:BD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7AD3957BFE7A66B7EBE2E44737BB49E5AA82223E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5518839d-6b9e-4424-8b4a-c5f3378287cd.roa
Signing time: Mon 31 Jul 2023 00:00:00 +0000
ROA not before: Mon 31 Jul 2023 00:00:00 +0000
ROA not after: Mon 04 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d3:95:7b:fe:7a:66:b7:eb:e2:e4:47:37:bb:49:e5:aa:82:22:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 31 00:00:00 2023 GMT
Not After : Sep 4 23:59:59 2023 GMT
Subject: serialNumber=9800bed0aa21a22673cbebdcbc133f3d9a274d7789ee30230063005e629412f3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:c6:7f:91:d0:7e:6e:16:17:bd:a7:ac:e0:
17:7d:7d:c3:c0:58:c4:37:c6:63:7b:1e:31:fc:c5:
1c:65:6c:38:27:9f:46:fd:aa:24:68:0d:bb:a9:c5:
2b:85:d2:06:a2:81:ac:c6:58:e4:27:7a:09:a9:31:
13:a3:26:ed:2a:5e:82:56:35:02:bc:0f:b4:cf:e8:
f8:65:9f:b7:af:24:38:fc:a3:cd:6f:e9:9c:e9:c6:
e7:88:7f:a6:76:a4:1c:48:44:03:e8:68:1d:00:b5:
f8:3d:4d:3d:43:f4:80:4e:56:44:f1:e1:10:04:a5:
9e:f3:82:6b:3a:4a:34:af:a7:b2:1e:fa:6b:02:02:
ed:48:5b:50:45:3d:89:00:6e:a0:49:68:e8:57:69:
ba:2e:ea:37:4f:1d:ca:68:ca:af:69:8f:6a:64:08:
f5:21:94:81:86:e2:3e:ff:fe:b4:be:d6:89:69:c8:
4d:b0:0e:c3:85:40:b8:17:bb:4c:8a:51:ff:90:fb:
f0:95:83:5e:4c:00:7b:eb:06:2f:4c:2e:b0:b4:b4:
9b:38:af:3b:ca:96:42:95:76:9c:d6:28:94:c5:c0:
e4:cf:2e:48:92:70:46:72:8e:48:c8:c3:f6:a6:8b:
77:74:72:26:f2:a2:b6:99:e0:92:a6:1c:f9:08:c8:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9B:36:5C:07:43:DD:06:35:F0:93:51:13:A4:15:EF:57:D4:1F:BD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5518839d-6b9e-4424-8b4a-c5f3378287cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1b:9d:28:39:c6:fa:1a:e9:ee:51:74:55:02:3a:4e:1c:38:
d8:a1:5d:4d:7e:89:d7:c0:88:db:8f:a1:35:9f:53:5f:75:72:
e9:88:58:c0:10:a2:df:d2:97:8d:ec:4e:94:88:96:5d:d6:bd:
52:f8:a3:23:12:12:8b:8d:63:90:e3:76:43:41:2d:fd:56:72:
1d:77:9e:c9:04:6a:61:a4:fc:b2:8c:cb:96:50:d2:de:a3:27:
87:c7:fa:4e:d2:1d:25:59:48:a7:8b:9f:76:64:83:22:3b:d2:
f8:72:5e:6e:a2:a8:c3:31:5a:11:06:6c:99:d3:c1:38:c8:a9:
ec:d7:e6:21:9a:08:c9:fd:a0:72:f7:e8:da:52:68:c9:bd:b8:
fa:59:7f:3f:1c:dd:be:87:c4:28:0c:6b:82:bb:3e:d7:0f:bc:
76:aa:12:77:7b:c0:ee:19:7f:ab:b5:ed:11:8d:3b:46:e5:a1:
fe:9b:02:ea:49:37:15:82:23:9d:f0:a5:cc:7a:bc:af:2f:1e:
17:d8:46:c2:78:6b:91:53:11:42:ae:fc:d4:e8:0a:00:cb:5e:
d8:97:32:f6:03:34:72:b7:77:89:cd:88:d4:7b:19:6d:c1:6e:
26:12:13:5b:22:1d:cb:7e:99:7b:ec:e7:bf:42:bc:14:4f:37:
f9:97:cc:e2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUetOVe/56Zrfr4uRHN7tJ5aqCIj4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzMxMDAwMDAwWhcNMjMwOTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ODAwYmVkMGFhMjFhMjI2NzNjYmViZGNiYzEzM2YzZDlh
Mjc0ZDc3ODllZTMwMjMwMDYzMDA1ZTYyOTQxMmYzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9lMZ/kdB+bhYXvaes4Bd9fcPAWMQ3xmN7HjH8xRxlbDgn
n0b9qiRoDbupxSuF0gaigazGWOQnegmpMROjJu0qXoJWNQK8D7TP6Phln7evJDj8
o81v6ZzpxueIf6Z2pBxIRAPoaB0Atfg9TT1D9IBOVkTx4RAEpZ7zgms6SjSvp7Ie
+msCAu1IW1BFPYkAbqBJaOhXabou6jdPHcpoyq9pj2pkCPUhlIGG4j7//rS+1olp
yE2wDsOFQLgXu0yKUf+Q+/CVg15MAHvrBi9MLrC0tJs4rzvKlkKVdpzWKJTFwOTP
LkiScEZyjkjIw/ami3d0cibyoraZ4JKmHPkIyByNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUU5s2XAdD3QY18JNRE6QV71fUH70wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzU1MTg4MzlkLTZiOWUtNDQyNC04YjRhLWM1ZjMzNzgyODdjZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIQbnSg5xvoa6e5RdFUCOk4cONih
XU1+idfAiNuPoTWfU191cumIWMAQot/Sl43sTpSIll3WvVL4oyMSEouNY5DjdkNB
Lf1Wch13nskEamGk/LKMy5ZQ0t6jJ4fH+k7SHSVZSKeLn3ZkgyI70vhyXm6iqMMx
WhEGbJnTwTjIqezX5iGaCMn9oHL36NpSaMm9uPpZfz8c3b6HxCgMa4K7PtcPvHaq
End7wO4Zf6u17RGNO0blof6bAupJNxWCI53wpcx6vK8vHhfYRsJ4a5FTEUKu/NTo
CgDLXtiXMvYDNHK3d4nNiNR7GW3BbiYSE1siHct+mXvs579CvBRPN/mXzOI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:15:45 2025 by rpki-client