Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5f569e31-ca34-417a-bf4e-ec3e26751307.roa
File: 5f569e31-ca34-417a-bf4e-ec3e26751307.roa (raw, json)
Hash identifier: N/ZwVX3fgudPCpU9QlVmeeBGeUfpENIsfumxyMktuFU=
Subject key identifier: 8E:D4:A7:6D:CD:14:68:D4:43:D0:01:55:FE:43:F5:0F:3F:6B:BD:9E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4E323E060ADB89CA3D67A467D2AB475A7BB3CDA5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5f569e31-ca34-417a-bf4e-ec3e26751307.roa
Signing time: Wed 05 Mar 2025 07:13:21 +0000
ROA not before: Wed 05 Mar 2025 07:13:21 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:32:3e:06:0a:db:89:ca:3d:67:a4:67:d2:ab:47:5a:7b:b3:cd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 5 07:13:21 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: serialNumber=32eba97ad92028c7f15e75f7308dd8d34af92b08490b03f81db5990cd97eff73, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b9:48:ce:03:19:49:46:d0:02:81:36:15:a3:
50:39:41:99:49:b9:d5:d2:f4:1c:54:26:99:a2:50:
67:a9:50:15:6c:a4:6b:5a:33:66:65:ac:12:ce:14:
7c:00:28:4a:5d:99:82:8f:d1:21:5e:8d:5e:49:15:
a0:c4:b6:1d:df:30:9f:70:5f:82:f0:42:1c:8c:37:
9c:34:1c:e8:9c:be:99:45:af:8c:6d:e6:1f:dc:e7:
c7:c3:56:c7:3c:ac:f1:74:58:1b:29:e5:9a:21:31:
97:37:1b:b4:4e:1f:fc:95:5c:9c:a0:d6:61:37:7a:
62:ec:1e:ed:46:5a:b0:4f:36:d5:4f:7f:0e:e9:d7:
48:f4:5b:53:90:be:98:a3:93:28:cb:de:1a:e9:22:
7d:fc:bd:97:0f:95:fb:86:aa:e2:0d:dc:ea:9d:77:
40:03:f9:75:8b:56:e7:1f:7c:ee:6a:c0:ed:ef:3d:
f7:44:8f:23:00:e2:05:4f:74:d5:19:86:e6:c2:55:
73:ad:65:14:08:c3:19:ad:f3:ff:37:5f:c8:40:7f:
91:f5:20:52:9a:71:f7:6e:b6:03:65:fd:89:e8:68:
7e:0e:5d:1a:a7:38:e3:d8:7d:fa:e6:a3:30:9f:44:
be:5c:58:db:ce:33:5b:6f:50:d1:9f:59:1b:f9:28:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D4:A7:6D:CD:14:68:D4:43:D0:01:55:FE:43:F5:0F:3F:6B:BD:9E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5f569e31-ca34-417a-bf4e-ec3e26751307.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
37:20:c5:5a:b3:13:0b:0a:aa:4d:d5:53:01:17:5c:f2:21:1d:
37:ba:cb:5b:0d:29:19:61:32:aa:18:9a:82:d9:84:31:9c:e3:
29:16:80:08:0e:5c:2f:f9:a5:11:4f:f0:ed:51:89:bd:41:87:
26:2e:09:af:55:27:52:f2:56:a7:b2:25:1b:5c:b9:bd:44:4e:
6b:a9:d0:1d:19:ed:7c:1e:ac:dd:34:83:1a:da:34:21:23:b6:
bc:56:34:45:5a:46:4f:62:45:88:26:f5:a3:9d:b7:eb:af:7b:
ef:35:78:24:72:5c:09:20:fe:99:6a:64:a3:92:44:f1:01:58:
ae:af:7d:21:19:83:8d:a6:90:f7:67:89:23:5d:25:ac:fe:5c:
ec:1b:ef:82:bc:f9:4f:65:f4:fc:08:7b:58:49:b0:76:ee:08:
5d:d8:9e:56:dc:c6:f5:1b:2d:ea:67:81:a2:4e:8c:39:a8:f4:
75:06:99:1c:4f:e8:bf:13:99:7e:61:8c:c0:db:87:c8:82:3b:
d4:ea:28:3c:ad:b9:38:81:7b:71:aa:c5:68:07:d3:5f:37:d7:
8f:58:f6:ba:bd:fa:88:2c:00:bf:33:88:fd:b4:c0:95:d2:3f:
d9:17:70:aa:e1:f8:f3:63:57:48:43:ad:36:7e:0c:da:6b:50:
73:ab:00:47
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTjI+Bgrbico9Z6Rn0qtHWnuzzaUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMzA1MDcxMzIxWhcNMjUwNDA5MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMmViYTk3YWQ5MjAyOGM3ZjE1ZTc1ZjczMDhkZDhkMzRh
ZjkyYjA4NDkwYjAzZjgxZGI1OTkwY2Q5N2VmZjczMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCIuUjOAxlJRtACgTYVo1A5QZlJudXS9BxUJpmiUGepUBVs
pGtaM2ZlrBLOFHwAKEpdmYKP0SFejV5JFaDEth3fMJ9wX4LwQhyMN5w0HOicvplF
r4xt5h/c58fDVsc8rPF0WBsp5ZohMZc3G7ROH/yVXJyg1mE3emLsHu1GWrBPNtVP
fw7p10j0W1OQvpijkyjL3hrpIn38vZcPlfuGquIN3Oqdd0AD+XWLVucffO5qwO3v
PfdEjyMA4gVPdNUZhubCVXOtZRQIwxmt8/83X8hAf5H1IFKacfdutgNl/YnoaH4O
XRqnOOPYffrmozCfRL5cWNvOM1tvUNGfWRv5KKk7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjtSnbc0UaNRD0AFV/kP1Dz9rvZ4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzVmNTY5ZTMxLWNhMzQtNDE3YS1iZjRlLWVjM2UyNjc1MTMwNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADcgxVqzEwsKqk3VUwEXXPIhHTe6
y1sNKRlhMqoYmoLZhDGc4ykWgAgOXC/5pRFP8O1Rib1BhyYuCa9VJ1LyVqeyJRtc
ub1ETmup0B0Z7XwerN00gxraNCEjtrxWNEVaRk9iRYgm9aOdt+uve+81eCRyXAkg
/plqZKOSRPEBWK6vfSEZg42mkPdniSNdJaz+XOwb74K8+U9l9PwIe1hJsHbuCF3Y
nlbcxvUbLepngaJOjDmo9HUGmRxP6L8TmX5hjMDbh8iCO9TqKDytuTiBe3GqxWgH
0183149Y9rq9+ogsAL8ziP20wJXSP9kXcKrh+PNjV0hDrTZ+DNprUHOrAEc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:20:05 2025 by rpki-client