Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6132b4e3-ba94-40f2-87a4-719a75ffaf79.roa
File: 6132b4e3-ba94-40f2-87a4-719a75ffaf79.roa (raw, json)
Hash identifier: 6eXLLN8eucxeQp8oXaD3cSwUpL0ppHAw5XeJMJBtiqA=
Subject key identifier: 9B:F8:CF:91:F2:38:9F:99:71:BD:F2:5F:40:47:0F:4D:E1:0A:BA:BE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 351F923255DB82430FC70719D126A1972A7D8B10
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6132b4e3-ba94-40f2-87a4-719a75ffaf79.roa
Signing time: Fri 11 Oct 2024 00:00:00 +0000
ROA not before: Fri 11 Oct 2024 00:00:00 +0000
ROA not after: Fri 15 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1f:92:32:55:db:82:43:0f:c7:07:19:d1:26:a1:97:2a:7d:8b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 11 00:00:00 2024 GMT
Not After : Nov 15 23:59:59 2024 GMT
Subject: serialNumber=300e8e4998de60ff0483bf2da8d9f8765a7112d31586cc56fb9538bd27074661, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:0a:f2:d1:ba:c5:9e:75:63:9f:0b:8f:cb:
f5:41:29:ae:7e:36:02:a8:b9:44:84:cd:74:c1:be:
29:89:a5:b9:01:0e:e5:00:1f:2a:ac:b4:53:39:8b:
41:9e:81:a2:0c:2d:69:6b:63:be:7b:d9:c6:7d:ce:
25:e4:10:1c:e7:b5:38:c7:72:84:43:92:db:0c:a9:
73:d1:e5:9e:b9:a0:75:71:15:b4:1e:05:51:d4:ea:
35:a4:a2:13:c9:99:5d:8c:79:e1:c1:35:5f:2c:97:
d5:6d:ab:26:8d:39:b3:f7:9f:b2:b6:2a:51:03:ef:
80:c5:c0:0e:34:cf:33:08:4d:6c:80:81:fb:d7:e9:
f4:db:c5:a4:14:22:d4:ed:aa:50:9a:68:1e:40:97:
a6:2c:d6:87:f5:9f:ae:ae:61:61:54:93:c5:49:df:
c8:de:a7:59:d4:ad:3e:1a:ff:5d:f3:04:31:ca:c1:
da:55:e0:b6:56:28:ac:59:a4:a1:25:ea:54:49:5d:
9c:53:36:d0:b3:10:ff:e9:ab:db:91:67:f4:f5:c2:
c8:a3:06:e0:39:2b:38:9c:8e:6e:10:45:36:3b:67:
ad:03:a1:ce:36:10:6a:a3:3c:84:84:c4:f4:e4:c5:
03:d9:03:a4:eb:b5:78:8e:85:42:f1:09:1d:a8:0f:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F8:CF:91:F2:38:9F:99:71:BD:F2:5F:40:47:0F:4D:E1:0A:BA:BE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6132b4e3-ba94-40f2-87a4-719a75ffaf79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:b6:94:03:a6:ff:67:db:fa:f2:ad:90:ef:9d:0f:8c:d9:9a:
0f:d3:ab:d9:4f:5e:49:0b:a9:c9:91:c0:5e:45:9d:64:7d:20:
59:e4:cc:c7:8a:29:3e:e7:bc:27:3f:f9:a9:ec:f8:2f:5f:5c:
f5:a5:9a:66:53:4d:f4:be:5a:e0:60:15:99:28:e4:50:67:0c:
2e:73:81:6d:17:23:93:22:5d:ad:43:03:e3:26:23:20:eb:a4:
97:66:a2:a7:dc:34:6e:b5:96:62:9f:31:07:37:40:8c:aa:e7:
7e:64:44:14:3a:f8:3b:97:1d:84:d9:3e:b0:f8:2e:ac:03:83:
e1:65:14:2e:49:22:56:11:68:f2:ae:15:56:80:bc:e5:59:19:
d9:f7:0f:47:26:67:9e:2f:11:0b:63:bf:f1:a4:69:a2:bc:b5:
50:6e:63:9e:b0:65:57:15:cc:01:1d:ae:f5:a6:81:61:d1:4d:
31:dc:d7:4c:e8:92:40:b9:1c:40:5b:5b:df:d8:bc:7b:78:7e:
90:91:7a:76:6c:9a:88:98:0f:8e:dc:da:b2:25:58:cd:fb:97:
7a:52:d7:3e:08:97:20:dd:21:a2:e4:d1:d1:59:9f:04:24:31:
15:58:6c:6b:b8:64:58:4e:6b:d0:c2:e5:0c:48:91:5b:dc:94:
42:85:4c:26
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNR+SMlXbgkMPxwcZ0Sahlyp9ixAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDExMDAwMDAwWhcNMjQxMTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMDBlOGU0OTk4ZGU2MGZmMDQ4M2JmMmRhOGQ5Zjg3NjVh
NzExMmQzMTU4NmNjNTZmYjk1MzhiZDI3MDc0NjYxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPEgry0brFnnVjnwuPy/VBKa5+NgKouUSEzXTBvimJpbkB
DuUAHyqstFM5i0GegaIMLWlrY7572cZ9ziXkEBzntTjHcoRDktsMqXPR5Z65oHVx
FbQeBVHU6jWkohPJmV2MeeHBNV8sl9VtqyaNObP3n7K2KlED74DFwA40zzMITWyA
gfvX6fTbxaQUItTtqlCaaB5Al6Ys1of1n66uYWFUk8VJ38jep1nUrT4a/13zBDHK
wdpV4LZWKKxZpKEl6lRJXZxTNtCzEP/pq9uRZ/T1wsijBuA5Kzicjm4QRTY7Z60D
oc42EGqjPISExPTkxQPZA6TrtXiOhULxCR2oDyFDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUm/jPkfI4n5lxvfJfQEcPTeEKur4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzYxMzJiNGUzLWJhOTQtNDBmMi04N2E0LTcxOWE3NWZmYWY3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHq2lAOm/2fb+vKtkO+dD4zZmg/T
q9lPXkkLqcmRwF5FnWR9IFnkzMeKKT7nvCc/+ans+C9fXPWlmmZTTfS+WuBgFZko
5FBnDC5zgW0XI5MiXa1DA+MmIyDrpJdmoqfcNG61lmKfMQc3QIyq535kRBQ6+DuX
HYTZPrD4LqwDg+FlFC5JIlYRaPKuFVaAvOVZGdn3D0cmZ54vEQtjv/GkaaK8tVBu
Y56wZVcVzAEdrvWmgWHRTTHc10zokkC5HEBbW9/YvHt4fpCRenZsmoiYD47c2rIl
WM37l3pS1z4IlyDdIaLk0dFZnwQkMRVYbGu4ZFhOa9DC5QxIkVvclEKFTCY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:42 2025 by rpki-client