Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6de6ee3c-7160-4f9a-8810-abb19364464e.roa
File: 6de6ee3c-7160-4f9a-8810-abb19364464e.roa (raw, json)
Hash identifier: jL3R7eVygxW9W8onVN49NDSTvnUjXDhv0YDRCXauTK8=
Subject key identifier: DE:37:65:5F:C7:2A:41:5E:04:A6:CE:74:2A:90:B6:62:A3:86:DF:1D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 06B53BB569EAF606324C56FD34BB36B8414925F5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6de6ee3c-7160-4f9a-8810-abb19364464e.roa
Signing time: Wed 31 Jul 2024 00:00:00 +0000
ROA not before: Wed 31 Jul 2024 00:00:00 +0000
ROA not after: Wed 04 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b5:3b:b5:69:ea:f6:06:32:4c:56:fd:34:bb:36:b8:41:49:25:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 31 00:00:00 2024 GMT
Not After : Sep 4 23:59:59 2024 GMT
Subject: serialNumber=7c84403f31efe747d3303ec50334c34cbee1b1a7bd0b2c4c6dd71b71673cfa82, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:74:35:ba:da:17:50:d3:38:fb:98:bf:c0:
38:7b:cb:48:e7:49:84:32:1a:4f:ab:78:aa:1c:5e:
a9:db:88:eb:16:32:3f:9e:f2:3f:c3:32:16:89:5f:
5d:32:60:8b:57:ce:a2:e7:f2:2b:b2:45:17:f7:2c:
3b:ea:81:0d:64:f1:2d:6d:dc:fe:dc:b5:a1:19:ff:
95:e6:98:9e:9f:b8:0b:69:41:48:90:3e:f6:32:1e:
d7:4e:66:9d:5b:5a:a6:f1:ba:5c:93:32:1c:45:3c:
d7:86:9c:f5:c3:90:bb:d7:0e:a9:b7:4b:26:e7:cf:
32:c3:59:ef:91:85:ef:84:e0:ba:67:40:7a:d2:6c:
d6:2b:cd:43:dc:d5:c7:7d:89:f0:f1:a5:7c:ca:5e:
fd:2d:34:96:b1:1c:62:1d:12:78:e2:82:e6:41:79:
20:db:87:ad:6f:65:95:1c:a7:b4:2f:d2:bd:e0:ba:
bd:36:42:db:21:7c:18:ca:0d:ea:1f:05:fd:45:c0:
47:56:68:0f:79:20:11:fb:83:d0:eb:87:df:b7:e4:
3d:a4:0f:fa:cb:31:55:b6:ec:3e:d4:dc:d5:6f:47:
98:25:4f:27:ab:26:3d:26:f4:02:83:83:fe:2b:dc:
58:3b:29:1e:78:40:c7:07:cf:2d:e8:fa:46:ff:41:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:37:65:5F:C7:2A:41:5E:04:A6:CE:74:2A:90:B6:62:A3:86:DF:1D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6de6ee3c-7160-4f9a-8810-abb19364464e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
02:25:20:a8:a4:06:ea:62:7a:96:d3:26:d4:94:85:ca:62:cd:
6b:42:bb:07:42:5a:27:e5:ae:c6:86:b5:fa:5b:88:4f:b1:76:
eb:f8:c4:d8:40:a0:40:5b:ee:69:5e:46:18:30:a9:2f:2e:f4:
69:8e:38:68:ea:fc:5a:0b:0b:82:0f:25:14:99:1c:e5:15:5a:
c3:63:e4:45:14:d5:20:aa:8d:11:54:8d:0f:06:18:1a:6d:e8:
28:b4:7a:f2:c1:19:29:94:0c:3a:d2:8f:e0:9d:c3:04:59:e1:
ff:1e:e6:33:ac:8c:08:28:db:60:ca:f0:04:a7:2d:7a:c0:3d:
01:ef:6d:28:59:0c:af:bd:58:e0:eb:b6:69:9d:93:6e:ac:87:
b3:77:fa:0b:bc:bb:ff:b7:7a:a7:f4:61:0f:b6:b5:3f:08:6d:
ac:ce:a9:0b:c3:c5:20:ff:a5:39:84:05:e1:77:84:54:b1:11:
e9:7e:d8:54:ba:4e:ec:aa:8d:4a:e3:37:71:d3:e7:e5:fd:dd:
83:7f:40:4a:01:fb:4d:4b:b1:63:a1:4a:38:bf:d1:c6:5a:fd:
24:4f:22:9a:aa:ff:48:8a:b1:27:17:d5:72:b4:df:94:bd:24:
f2:73:4d:a7:fb:9e:3e:c0:cc:c0:c0:57:49:3c:80:4c:b0:5e:
a7:c8:f4:45
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBrU7tWnq9gYyTFb9NLs2uEFJJfUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNzMxMDAwMDAwWhcNMjQwOTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3Yzg0NDAzZjMxZWZlNzQ3ZDMzMDNlYzUwMzM0YzM0Y2Jl
ZTFiMWE3YmQwYjJjNGM2ZGQ3MWI3MTY3M2NmYTgyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4bHQ1utoXUNM4+5i/wDh7y0jnSYQyGk+reKocXqnbiOsW
Mj+e8j/DMhaJX10yYItXzqLn8iuyRRf3LDvqgQ1k8S1t3P7ctaEZ/5XmmJ6fuAtp
QUiQPvYyHtdOZp1bWqbxulyTMhxFPNeGnPXDkLvXDqm3SybnzzLDWe+Rhe+E4Lpn
QHrSbNYrzUPc1cd9ifDxpXzKXv0tNJaxHGIdEnjiguZBeSDbh61vZZUcp7Qv0r3g
ur02QtshfBjKDeofBf1FwEdWaA95IBH7g9Drh9+35D2kD/rLMVW27D7U3NVvR5gl
TyerJj0m9AKDg/4r3Fg7KR54QMcHzy3o+kb/QQt/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU3jdlX8cqQV4Eps50KpC2YqOG3x0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzZkZTZlZTNjLTcxNjAtNGY5YS04ODEwLWFiYjE5MzY0NDY0ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAIlIKikBupiepbTJtSUhcpizWtC
uwdCWiflrsaGtfpbiE+xduv4xNhAoEBb7mleRhgwqS8u9GmOOGjq/FoLC4IPJRSZ
HOUVWsNj5EUU1SCqjRFUjQ8GGBpt6Ci0evLBGSmUDDrSj+CdwwRZ4f8e5jOsjAgo
22DK8ASnLXrAPQHvbShZDK+9WODrtmmdk26sh7N3+gu8u/+3eqf0YQ+2tT8IbazO
qQvDxSD/pTmEBeF3hFSxEel+2FS6TuyqjUrjN3HT5+X93YN/QEoB+01LsWOhSji/
0cZa/SRPIpqq/0iKsScX1XK035S9JPJzTaf7nj7AzMDAV0k8gEywXqfI9EU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:21:01 2025 by rpki-client