Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5903d560-6ce4-4d2f-a1c2-778031041fcb.roa
File: 5903d560-6ce4-4d2f-a1c2-778031041fcb.roa (raw, json)
Hash identifier: aylXA4rYA6s4fPtJobbmf6JmZYwDRLsFcSi4mlBGOg0=
Subject key identifier: 06:1E:1E:C6:5A:41:ED:F8:70:F1:D0:5A:F9:0E:D6:DD:24:BA:DB:1B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0CC90DE39D5A4C21DEB9F65328DD9C9933A063AE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5903d560-6ce4-4d2f-a1c2-778031041fcb.roa
Signing time: Sat 17 Jun 2023 00:00:00 +0000
ROA not before: Sat 17 Jun 2023 00:00:00 +0000
ROA not after: Sat 22 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c9:0d:e3:9d:5a:4c:21:de:b9:f6:53:28:dd:9c:99:33:a0:63:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 17 00:00:00 2023 GMT
Not After : Jul 22 23:59:59 2023 GMT
Subject: serialNumber=f3de957d6210b8d2623d4726f8d81e27349c4e7d4baea081e60c195924ce6be7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:9f:fa:71:2d:8f:46:91:ae:d2:46:63:06:
6a:3b:9e:30:9d:40:28:bf:00:8e:e4:8b:36:c0:0f:
d2:89:7f:40:a4:c0:22:1d:5f:8a:dd:c8:a1:df:e0:
dc:4f:59:fb:74:41:79:03:ea:bc:ce:28:64:65:11:
75:eb:78:c8:dd:44:3c:eb:13:ff:b4:45:8d:e6:27:
34:62:b5:7c:b1:8e:35:83:21:51:f5:4d:a3:8c:0a:
13:68:d0:96:c3:76:d2:ad:11:f0:c4:0b:81:2e:78:
01:52:ce:92:ff:06:83:ca:f6:18:9a:1f:f2:10:98:
3c:30:e2:b6:72:bd:f1:40:8c:c4:d7:ba:7a:e4:24:
21:49:a0:13:6d:d0:92:eb:c6:ad:b1:98:0a:28:e3:
1d:4f:b9:b3:19:84:e6:c7:be:c7:04:21:4f:3a:92:
c5:df:66:5c:b7:7a:23:99:58:37:34:eb:67:ce:38:
04:b9:df:11:64:20:81:82:db:7e:59:bf:f2:be:85:
c1:80:2d:b3:ac:31:67:6b:22:70:a4:7d:58:c7:a0:
ac:92:77:8a:78:71:57:e4:ec:51:00:3a:fa:25:53:
bc:37:17:5b:b3:c3:7f:59:3d:ee:7f:a3:34:4e:83:
d5:24:d4:44:3a:4f:2a:56:a2:b2:c0:10:50:a6:c1:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1E:1E:C6:5A:41:ED:F8:70:F1:D0:5A:F9:0E:D6:DD:24:BA:DB:1B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5903d560-6ce4-4d2f-a1c2-778031041fcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b2:54:7d:9d:aa:22:dd:39:78:b0:73:34:17:b4:0e:9c:12:
e7:eb:6f:b7:cc:c1:de:e7:bd:8b:ca:d1:92:a9:16:79:92:95:
d6:6f:0a:65:48:46:c7:49:2f:87:ba:f8:d3:1c:80:01:f5:42:
e8:fa:4a:11:9a:b5:5f:d7:de:c2:f2:c6:25:61:33:ae:2b:48:
80:80:ad:30:95:07:d7:4a:d0:7e:2b:f0:6d:90:97:f9:d6:e6:
3f:c4:3d:cd:b3:a7:e9:d9:ef:46:af:e9:57:f9:1d:e1:54:36:
8f:0f:4a:2a:88:43:6a:0a:b1:53:c2:ed:a2:ef:8c:a3:3a:c1:
ff:c1:c9:cb:57:c0:f4:f4:f2:d1:61:47:1f:75:80:14:30:85:
51:f0:4d:5a:6b:8e:6f:cb:1b:03:62:31:85:b9:f9:a2:fc:9c:
35:ae:40:02:2e:18:cd:2a:23:2c:80:31:ea:89:2a:8f:06:02:
e1:dc:e7:72:f6:f1:e8:d2:93:b4:6e:d8:d3:3c:49:a6:40:27:
69:d4:19:ab:7c:9e:cf:5a:d6:af:00:2c:6d:a6:21:f2:04:38:
4c:ca:44:3d:ca:c4:7e:ae:3f:c0:6f:e8:0a:50:7d:c3:69:b8:
9e:66:29:c3:6e:e7:c2:ed:53:99:83:28:11:07:b4:f3:de:e2:
d2:3f:ac:73
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDMkN451aTCHeufZTKN2cmTOgY64wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjE3MDAwMDAwWhcNMjMwNzIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BmM2RlOTU3ZDYyMTBiOGQyNjIzZDQ3MjZmOGQ4MWUyNzM0
OWM0ZTdkNGJhZWEwODFlNjBjMTk1OTI0Y2U2YmU3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCofp/6cS2PRpGu0kZjBmo7njCdQCi/AI7kizbAD9KJf0Ck
wCIdX4rdyKHf4NxPWft0QXkD6rzOKGRlEXXreMjdRDzrE/+0RY3mJzRitXyxjjWD
IVH1TaOMChNo0JbDdtKtEfDEC4EueAFSzpL/BoPK9hiaH/IQmDww4rZyvfFAjMTX
unrkJCFJoBNt0JLrxq2xmAoo4x1PubMZhObHvscEIU86ksXfZly3eiOZWDc062fO
OAS53xFkIIGC235Zv/K+hcGALbOsMWdrInCkfVjHoKySd4p4cVfk7FEAOvolU7w3
F1uzw39ZPe5/ozROg9Uk1EQ6TypWorLAEFCmwarTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUBh4exlpB7fhw8dBa+Q7W3SS62xswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzU5MDNkNTYwLTZjZTQtNGQyZi1hMWMyLTc3ODAzMTA0MWZjYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAF2yVH2dqiLdOXiwczQXtA6cEufr
b7fMwd7nvYvK0ZKpFnmSldZvCmVIRsdJL4e6+NMcgAH1Quj6ShGatV/X3sLyxiVh
M64rSICArTCVB9dK0H4r8G2Ql/nW5j/EPc2zp+nZ70av6Vf5HeFUNo8PSiqIQ2oK
sVPC7aLvjKM6wf/ByctXwPT08tFhRx91gBQwhVHwTVprjm/LGwNiMYW5+aL8nDWu
QAIuGM0qIyyAMeqJKo8GAuHc53L28ejSk7Ru2NM8SaZAJ2nUGat8ns9a1q8ALG2m
IfIEOEzKRD3KxH6uP8Bv6ApQfcNpuJ5mKcNu58LtU5mDKBEHtPPe4tI/rHM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:24:03 2025 by rpki-client