Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/63461930-ec14-45d8-87f1-405511b1bb63.roa
File: 63461930-ec14-45d8-87f1-405511b1bb63.roa (raw, json)
Hash identifier: Ehkf4SBBbVIF0e71+xtL9NgqOY1ROfGlFysQGrdRVak=
Subject key identifier: 12:13:8A:86:F0:63:64:56:8E:CB:4C:E1:23:F0:84:6C:55:75:48:10
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 53686F0DBD63F7EB9DF0E12796DAD6DEAC37658F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/63461930-ec14-45d8-87f1-405511b1bb63.roa
Signing time: Sat 12 Apr 2025 19:28:20 +0000
ROA not before: Sat 12 Apr 2025 19:28:20 +0000
ROA not after: Sat 17 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:68:6f:0d:bd:63:f7:eb:9d:f0:e1:27:96:da:d6:de:ac:37:65:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 12 19:28:20 2025 GMT
Not After : May 17 23:59:59 2025 GMT
Subject: serialNumber=dea00d455c93c67e34757192da8183b362ccd878dfc2153a8d38f6104500806c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:7f:e7:aa:36:a2:6a:13:a2:e4:0f:94:a5:
d3:68:ed:8b:59:e6:5c:48:c8:43:63:13:dc:66:f1:
d3:6b:e3:ef:9d:1d:5d:8d:3a:3f:ce:24:27:45:76:
db:e4:b9:d3:4d:ca:14:06:6c:b1:7b:c6:aa:fb:40:
d5:7b:91:93:be:2d:f7:91:49:13:e3:d3:01:12:b4:
d6:63:42:0f:d8:77:2c:0c:c2:ac:53:7c:93:16:f4:
33:67:0c:f9:81:4f:40:d3:03:5f:e4:bc:38:be:e4:
4e:f4:d8:3f:9c:1f:33:7c:45:9c:1a:ee:f8:6d:26:
5d:83:da:4f:c6:df:b1:3c:a3:71:21:71:cb:52:4d:
24:6b:60:66:b8:06:14:ed:d7:fd:da:53:9b:b0:21:
a7:5d:16:5e:50:b3:08:45:be:3c:15:f9:3c:07:1e:
00:5d:b5:10:cb:a8:b8:f1:5b:c7:0a:01:40:60:56:
ba:5c:be:d6:e8:46:d8:41:2c:9a:af:f4:40:78:e1:
5c:ac:46:d0:b4:0e:07:70:b6:86:29:fc:5c:f0:de:
66:4f:a1:78:ab:f9:2b:19:25:cf:bc:3c:86:2e:da:
44:a9:8f:31:8b:09:69:22:6c:32:ee:29:d0:fc:94:
a4:ac:d9:f4:3e:36:21:64:c3:75:7b:2d:6a:5b:6e:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:13:8A:86:F0:63:64:56:8E:CB:4C:E1:23:F0:84:6C:55:75:48:10
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/63461930-ec14-45d8-87f1-405511b1bb63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a4:19:e4:7d:58:02:29:3d:e1:b4:5d:09:a9:33:24:91:1e:
6c:4e:b9:2a:55:62:d3:dd:71:cc:06:dd:83:3e:a2:57:5f:79:
70:31:9c:11:42:d0:17:88:98:b2:9b:f2:22:50:e7:61:9d:ad:
c3:fb:6e:0f:4d:2f:1c:1e:0c:4b:ec:f3:21:69:48:e6:82:f5:
f2:4d:1b:2f:5d:4c:64:98:10:b9:0e:c1:e4:56:a7:ae:2a:87:
24:93:b0:78:bf:ed:1d:65:c8:28:8f:6d:63:90:ca:ba:6f:71:
00:22:29:c0:31:66:b6:74:0e:82:54:32:b1:6b:22:6e:56:2e:
2f:c4:ab:63:ee:91:98:3b:ba:31:66:82:94:68:39:18:a9:02:
40:2e:f6:35:81:21:f9:75:23:86:96:ec:ae:d3:9b:49:cf:f7:
53:e4:18:2a:c4:42:53:c6:88:08:da:46:a0:3e:4c:82:04:65:
f8:92:d2:e1:cd:28:e3:9f:7e:6f:c8:21:9f:06:ba:e7:c3:c5:
3c:62:15:54:d8:42:1c:f6:66:4e:9b:20:51:3e:2a:5d:da:36:
d7:ad:79:bc:99:e9:9b:65:be:86:70:0b:dd:06:fc:cf:9b:53:
12:0b:e3:5c:bd:fc:37:7e:1b:b0:b8:bb:5a:81:bf:3d:d5:54:
22:8c:43:15
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUU2hvDb1j9+ud8OEnltrW3qw3ZY8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDEyMTkyODIwWhcNMjUwNTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkZWEwMGQ0NTVjOTNjNjdlMzQ3NTcxOTJkYTgxODNiMzYy
Y2NkODc4ZGZjMjE1M2E4ZDM4ZjYxMDQ1MDA4MDZjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDYVX/nqjaiahOi5A+UpdNo7YtZ5lxIyENjE9xm8dNr4++d
HV2NOj/OJCdFdtvkudNNyhQGbLF7xqr7QNV7kZO+LfeRSRPj0wEStNZjQg/YdywM
wqxTfJMW9DNnDPmBT0DTA1/kvDi+5E702D+cHzN8RZwa7vhtJl2D2k/G37E8o3Eh
cctSTSRrYGa4BhTt1/3aU5uwIaddFl5QswhFvjwV+TwHHgBdtRDLqLjxW8cKAUBg
VrpcvtboRthBLJqv9EB44VysRtC0DgdwtoYp/Fzw3mZPoXir+SsZJc+8PIYu2kSp
jzGLCWkibDLuKdD8lKSs2fQ+NiFkw3V7LWpbbvnlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUEhOKhvBjZFaOy0zhI/CEbFV1SBAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzYzNDYxOTMwLWVjMTQtNDVkOC04N2YxLTQwNTUxMWIxYmI2My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJWkGeR9WAIpPeG0XQmpMySRHmxO
uSpVYtPdccwG3YM+oldfeXAxnBFC0BeImLKb8iJQ52GdrcP7bg9NLxweDEvs8yFp
SOaC9fJNGy9dTGSYELkOweRWp64qhySTsHi/7R1lyCiPbWOQyrpvcQAiKcAxZrZ0
DoJUMrFrIm5WLi/Eq2PukZg7ujFmgpRoORipAkAu9jWBIfl1I4aW7K7Tm0nP91Pk
GCrEQlPGiAjaRqA+TIIEZfiS0uHNKOOffm/IIZ8GuufDxTxiFVTYQhz2Zk6bIFE+
Kl3aNtetebyZ6ZtlvoZwC90G/M+bUxIL41y9/Dd+G7C4u1qBvz3VVCKMQxU=
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:31:34 2025 by rpki-client