Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/696f5358-b10d-4263-9d84-82e26451a7e4.roa
File: 696f5358-b10d-4263-9d84-82e26451a7e4.roa (raw, json)
Hash identifier: MU9m599v6W0PCc+s5ixSff1n4zfRX01FIAoxG1QCPMk=
Subject key identifier: 34:40:F7:67:C4:1E:93:6D:C3:FD:48:E4:F7:C0:4C:60:F0:B4:B0:18
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4079605AC844E4311FCB973E4270538146AF4F64
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/696f5358-b10d-4263-9d84-82e26451a7e4.roa
Signing time: Mon 29 Jan 2024 00:00:00 +0000
ROA not before: Mon 29 Jan 2024 00:00:00 +0000
ROA not after: Mon 04 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:79:60:5a:c8:44:e4:31:1f:cb:97:3e:42:70:53:81:46:af:4f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 29 00:00:00 2024 GMT
Not After : Mar 4 23:59:59 2024 GMT
Subject: serialNumber=7449d001ff1f69ea37ef51703404604953195603573b6b2e2a4105f72dd65bf4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:fb:0f:7d:70:2b:4a:5e:42:09:d6:cb:24:
a5:84:78:d7:b8:40:65:cf:05:76:5c:8e:bd:a9:47:
90:86:f2:10:93:d0:01:60:d5:c9:71:24:a3:e1:0e:
49:53:aa:25:32:58:53:1c:b1:7a:db:8e:75:01:15:
35:84:29:68:1f:a4:3a:e0:0f:21:cd:37:cd:ff:c0:
eb:1c:29:6a:7d:bb:51:61:d4:cf:d4:3c:02:1d:bd:
cf:a7:26:0d:ff:53:b5:68:d9:5a:d2:3d:00:43:7f:
0c:48:31:41:ce:d1:d7:db:5d:22:80:dd:4d:3e:05:
61:c7:8c:bf:8a:76:1b:0e:be:6d:04:49:c0:64:86:
98:3f:0c:11:e0:f8:43:86:52:3b:d2:ae:da:35:7e:
d9:60:d6:56:f5:e1:31:4e:e8:cb:fb:71:0d:e4:41:
57:29:a0:97:75:ad:bc:75:a8:8e:4c:1a:62:f6:7e:
f6:bc:99:4e:ff:6e:1f:60:7d:ca:14:96:85:0b:fa:
a8:b0:31:7a:81:62:e4:f4:7b:9d:9a:7d:18:94:c7:
8c:02:88:8c:c3:92:56:15:99:8c:3f:80:88:08:36:
32:2a:ed:83:39:04:d7:9a:cf:fb:95:24:c8:82:06:
0d:2c:d6:30:11:18:2e:e3:0c:59:f3:45:e3:22:8b:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:40:F7:67:C4:1E:93:6D:C3:FD:48:E4:F7:C0:4C:60:F0:B4:B0:18
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/696f5358-b10d-4263-9d84-82e26451a7e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:8a:94:f4:61:9f:5b:3b:d3:86:5a:0a:7e:a1:ae:2a:c6:07:
46:c5:1e:f7:6d:a9:44:d5:06:ad:50:e6:fd:78:3c:56:fc:41:
9c:91:7d:2a:5c:b1:46:d6:93:dd:e4:8c:14:be:f8:ad:10:75:
7e:69:36:ea:2b:e3:4c:4c:7e:b8:3d:7b:87:b8:c4:2e:81:86:
01:a7:12:ae:90:83:89:b2:a8:b7:2a:ce:bc:03:61:62:04:ad:
6c:e2:20:0c:9f:b3:9a:28:3b:07:a2:c6:c5:68:1f:69:b4:38:
99:81:4c:64:fb:14:40:6c:47:ff:9c:d7:58:a1:df:b9:95:49:
8f:73:48:97:5f:47:2d:0e:77:79:20:34:61:c3:d4:c9:8e:9b:
eb:07:30:d3:8a:fe:8f:91:c0:78:cc:3a:5f:de:56:93:65:37:
cd:25:31:45:46:b2:58:ef:19:7b:4e:80:ee:66:eb:b3:23:06:
35:ff:d5:9c:6d:2f:15:78:30:c3:e2:9a:ff:f9:20:bb:2a:eb:
84:61:ec:c7:75:77:a2:5d:3a:e4:aa:da:66:15:da:a0:d6:7f:
06:4d:5d:5d:b0:f7:dc:c4:ed:6e:22:01:2d:be:af:81:66:b3:
bf:21:3f:7b:30:4f:d8:00:81:86:15:a3:d0:2e:04:c0:1b:06:
c1:a9:68:40
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQHlgWshE5DEfy5c+QnBTgUavT2QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMTI5MDAwMDAwWhcNMjQwMzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NDQ5ZDAwMWZmMWY2OWVhMzdlZjUxNzAzNDA0NjA0OTUz
MTk1NjAzNTczYjZiMmUyYTQxMDVmNzJkZDY1YmY0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4rvsPfXArSl5CCdbLJKWEeNe4QGXPBXZcjr2pR5CG8hCT
0AFg1clxJKPhDklTqiUyWFMcsXrbjnUBFTWEKWgfpDrgDyHNN83/wOscKWp9u1Fh
1M/UPAIdvc+nJg3/U7Vo2VrSPQBDfwxIMUHO0dfbXSKA3U0+BWHHjL+KdhsOvm0E
ScBkhpg/DBHg+EOGUjvSrto1ftlg1lb14TFO6Mv7cQ3kQVcpoJd1rbx1qI5MGmL2
fva8mU7/bh9gfcoUloUL+qiwMXqBYuT0e52afRiUx4wCiIzDklYVmYw/gIgINjIq
7YM5BNeaz/uVJMiCBg0s1jARGC7jDFnzReMii5yrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNED3Z8Qek23D/Ujk98BMYPC0sBgwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzY5NmY1MzU4LWIxMGQtNDI2My05ZDg0LTgyZTI2NDUxYTdlNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALKKlPRhn1s704ZaCn6hrirGB0bF
HvdtqUTVBq1Q5v14PFb8QZyRfSpcsUbWk93kjBS++K0QdX5pNuor40xMfrg9e4e4
xC6BhgGnEq6Qg4myqLcqzrwDYWIErWziIAyfs5ooOweixsVoH2m0OJmBTGT7FEBs
R/+c11ih37mVSY9zSJdfRy0Od3kgNGHD1MmOm+sHMNOK/o+RwHjMOl/eVpNlN80l
MUVGsljvGXtOgO5m67MjBjX/1ZxtLxV4MMPimv/5ILsq64Rh7Md1d6JdOuSq2mYV
2qDWfwZNXV2w99zE7W4iAS2+r4Fms78hP3swT9gAgYYVo9AuBMAbBsGpaEA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:38:04 2025 by rpki-client