Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/636ea7af-0734-4673-8edb-5629da03fdbc.roa
File: 636ea7af-0734-4673-8edb-5629da03fdbc.roa (raw, json)
Hash identifier: abzj8rpLEIV0UmaGugrVkbxnAkZnXytgISVIWQp1kZo=
Subject key identifier: 1C:04:18:E1:A4:31:6C:C0:80:53:D9:FB:50:F8:5A:6D:F6:30:A5:E6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5392B63C0EFE49197D4F1338DAF7B2E01FE72EFF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/636ea7af-0734-4673-8edb-5629da03fdbc.roa
Signing time: Fri 28 Feb 2025 04:03:19 +0000
ROA not before: Fri 28 Feb 2025 04:03:19 +0000
ROA not after: Fri 04 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:92:b6:3c:0e:fe:49:19:7d:4f:13:38:da:f7:b2:e0:1f:e7:2e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 28 04:03:19 2025 GMT
Not After : Apr 4 23:59:59 2025 GMT
Subject: serialNumber=82b99db21c17e045e2c6de80c8dff97e22ed34d2ef9ce656a88a24b81350e22d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:b0:e1:b0:b7:d0:3d:ac:cb:5d:47:4b:56:
49:f9:31:11:2f:fe:3f:c5:0a:da:3a:fa:f5:ce:91:
14:7b:66:4b:ab:dc:07:ee:63:51:1e:70:67:21:8c:
9b:eb:b6:b9:f5:48:7f:a7:eb:89:e8:d0:05:09:0b:
fa:84:8d:49:ff:01:fa:d9:41:a4:98:18:d5:74:de:
a4:c8:e8:9c:d5:04:82:a6:8a:37:54:8d:78:b1:85:
8f:a5:b8:29:8d:d9:85:77:7f:de:5b:c3:20:bf:ae:
16:28:d9:f6:62:8d:47:38:76:d4:11:e6:de:0c:30:
78:af:4f:7a:c6:39:1b:ea:d8:37:17:b3:b9:23:b5:
db:46:8f:00:88:1a:14:28:8f:22:be:51:2a:2a:47:
13:c7:b2:ed:30:08:5d:14:76:7d:98:9e:b6:65:be:
20:da:a3:d7:e7:f7:24:ac:e6:85:eb:07:c8:05:e2:
df:9b:24:eb:2e:ec:28:33:4a:4c:34:c0:68:07:3e:
62:1a:4c:9b:03:29:97:ed:a6:0e:a1:47:59:e8:e8:
ab:b0:9c:76:44:2d:bd:e6:62:1d:90:73:dd:82:9e:
eb:77:90:01:04:7f:ee:bf:f0:6e:a7:10:b8:a6:f6:
16:30:e3:e0:51:39:28:9f:86:83:c2:7e:d3:54:3a:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:04:18:E1:A4:31:6C:C0:80:53:D9:FB:50:F8:5A:6D:F6:30:A5:E6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/636ea7af-0734-4673-8edb-5629da03fdbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
33:a2:59:0b:4f:81:d1:14:98:55:d9:11:47:53:6a:d4:25:d2:
8a:4d:50:fb:fb:8f:e4:2a:d8:1f:72:dd:e5:b8:ff:a7:58:84:
35:20:19:53:45:2c:fb:f7:8a:a0:2e:30:33:5c:a9:46:34:72:
70:96:29:90:72:92:cf:21:cb:a5:47:d6:f2:61:5c:52:49:00:
ff:6b:a7:f7:aa:aa:f0:60:51:a9:c3:dc:9c:c7:25:20:5c:7b:
06:28:08:88:d8:26:ae:fc:ec:ac:7c:0d:dd:3a:10:02:01:a8:
95:ab:93:b4:bb:ca:87:c1:64:cd:ed:38:96:95:70:da:a5:b4:
cf:bc:82:bd:48:dc:df:c2:b3:b5:80:41:0e:01:84:a2:01:62:
dd:25:03:7e:12:85:44:c0:7c:7b:91:2f:38:b0:39:7f:c2:96:
1c:92:91:ce:7a:9c:3b:c2:f9:d5:5a:5d:df:b7:b1:fc:5b:cc:
a3:71:46:f3:5e:01:b6:de:1d:2a:bc:b5:fb:aa:39:99:09:3c:
ba:e6:30:ff:3d:92:9a:db:0b:49:e1:c8:70:8c:c5:21:9f:81:
fa:f3:8c:d9:61:d7:1a:58:ab:a7:26:59:8b:1f:6b:74:de:0a:
8e:cc:26:ef:c7:07:6c:3e:92:53:1d:24:63:e9:6b:0e:69:c2:
63:51:f7:cc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUU5K2PA7+SRl9TxM42vey4B/nLv8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMjI4MDQwMzE5WhcNMjUwNDA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MmI5OWRiMjFjMTdlMDQ1ZTJjNmRlODBjOGRmZjk3ZTIy
ZWQzNGQyZWY5Y2U2NTZhODhhMjRiODEzNTBlMjJkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyt7DhsLfQPazLXUdLVkn5MREv/j/FCto6+vXOkRR7Zkur
3AfuY1EecGchjJvrtrn1SH+n64no0AUJC/qEjUn/AfrZQaSYGNV03qTI6JzVBIKm
ijdUjXixhY+luCmN2YV3f95bwyC/rhYo2fZijUc4dtQR5t4MMHivT3rGORvq2DcX
s7kjtdtGjwCIGhQojyK+USoqRxPHsu0wCF0Udn2YnrZlviDao9fn9ySs5oXrB8gF
4t+bJOsu7CgzSkw0wGgHPmIaTJsDKZftpg6hR1no6KuwnHZELb3mYh2Qc92Cnut3
kAEEf+6/8G6nELim9hYw4+BROSifhoPCftNUOhNhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHAQY4aQxbMCAU9n7UPhabfYwpeYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzYzNmVhN2FmLTA3MzQtNDY3My04ZWRiLTU2MjlkYTAzZmRiYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADOiWQtPgdEUmFXZEUdTatQl0opN
UPv7j+Qq2B9y3eW4/6dYhDUgGVNFLPv3iqAuMDNcqUY0cnCWKZByks8hy6VH1vJh
XFJJAP9rp/eqqvBgUanD3JzHJSBcewYoCIjYJq787Kx8Dd06EAIBqJWrk7S7yofB
ZM3tOJaVcNqltM+8gr1I3N/Cs7WAQQ4BhKIBYt0lA34ShUTAfHuRLziwOX/ClhyS
kc56nDvC+dVaXd+3sfxbzKNxRvNeAbbeHSq8tfuqOZkJPLrmMP89kprbC0nhyHCM
xSGfgfrzjNlh1xpYq6cmWYsfa3TeCo7MJu/HB2w+klMdJGPpaw5pwmNR98w=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:24:25 2025 by rpki-client