Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7261d26d-93ce-4847-b2ec-d29380b5026d.roa
File: 7261d26d-93ce-4847-b2ec-d29380b5026d.roa (raw, json)
Hash identifier: SWx6tx+4r1gA62jvnfz1qq1L6UN/C/CbfKOuzeEEjrI=
Subject key identifier: AD:77:19:4F:22:8E:B6:8C:4A:64:7E:92:6C:88:CB:16:93:34:CD:52
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6ED9A6E5E3C9BCD4FF99DF8946C47D341E20DB9C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7261d26d-93ce-4847-b2ec-d29380b5026d.roa
Signing time: Mon 05 Aug 2024 00:00:00 +0000
ROA not before: Mon 05 Aug 2024 00:00:00 +0000
ROA not after: Mon 09 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d9:a6:e5:e3:c9:bc:d4:ff:99:df:89:46:c4:7d:34:1e:20:db:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 5 00:00:00 2024 GMT
Not After : Sep 9 23:59:59 2024 GMT
Subject: serialNumber=12729f47d01bebd81a5043bdbbd4c24c30b0f28a7c30d15b85d82a7ba63c041e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:8f:26:3e:17:dc:b7:ea:33:11:57:26:d2:
44:6d:e7:0a:da:ef:cb:34:68:f7:03:29:21:44:99:
f3:a1:9c:b5:a1:94:26:2c:38:b4:ae:34:1a:f1:89:
03:01:07:c0:bc:42:75:fc:30:fb:81:55:48:70:75:
70:45:d8:68:78:65:64:d9:2a:54:06:3f:bb:d7:65:
64:ed:a3:47:a0:e2:a6:ae:f5:5e:02:53:9d:0c:f1:
75:f4:f5:6c:4f:16:97:87:3f:cc:6c:ea:43:84:29:
56:8c:06:d0:5f:50:37:b7:15:5b:7f:0c:31:7b:64:
18:a1:54:2d:a3:40:ab:df:f6:ef:e3:d8:54:a1:f1:
b6:23:f8:ee:c9:ef:3d:63:6c:2a:0e:a2:ee:78:45:
cd:f0:cb:6f:dd:5e:f0:08:52:b6:9f:63:08:41:c0:
98:e7:46:09:42:cf:08:14:25:8e:d4:b1:e2:54:ab:
a2:f9:c3:a6:a0:5e:3d:fa:7b:69:aa:23:e8:62:c2:
18:18:cd:d4:08:74:cc:39:2f:a3:09:bd:5d:39:06:
df:2a:38:42:23:cb:79:01:40:79:4b:35:20:99:26:
e8:1b:fe:94:5a:0a:19:2d:f5:94:69:2e:78:81:57:
52:cc:d4:5b:0d:8f:82:5d:63:8b:5a:d8:81:33:3b:
c5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:77:19:4F:22:8E:B6:8C:4A:64:7E:92:6C:88:CB:16:93:34:CD:52
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7261d26d-93ce-4847-b2ec-d29380b5026d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:cf:35:6c:59:f4:0a:75:04:8d:3b:83:65:a9:dd:75:5b:1c:
d7:4a:a0:19:68:32:c4:4f:3d:f4:ae:59:85:64:20:b8:be:a6:
4e:c8:1e:92:12:c3:3f:c9:5c:a1:9d:01:33:4e:45:17:8f:82:
4c:28:d8:96:16:7d:79:dd:2c:cb:15:6c:d2:7a:3e:23:00:82:
02:3c:a0:f4:36:05:b8:d1:62:49:f1:cd:72:69:5e:1d:f7:ad:
f7:60:bc:28:5d:0f:3b:73:be:8b:9c:f4:a4:38:d7:c8:31:66:
e9:6a:67:36:37:db:58:af:ff:5b:33:d0:58:f9:5e:6e:94:9f:
a4:10:3d:66:23:e7:5d:7d:6a:3b:97:25:e1:57:24:60:a9:6a:
c7:75:98:ac:f6:9c:a3:8f:9e:b2:33:df:71:bc:f5:43:92:70:
11:2a:dc:52:78:2d:04:e4:33:9d:84:89:7d:e0:07:ef:3a:5c:
4b:65:d3:dc:3b:fa:8b:2c:c3:ea:e5:85:f0:27:16:7c:84:10:
9f:2f:85:62:25:d9:e4:a7:86:49:0b:9f:6d:90:66:0f:65:b5:
b1:9a:9d:b1:9b:3a:8b:9f:a8:a5:5e:c1:f5:4b:f7:cc:59:2c:
a0:0c:d0:28:27:6b:45:5b:ea:cf:47:98:b2:2f:65:0a:f2:5b:
25:35:b3:8f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbtmm5ePJvNT/md+JRsR9NB4g25wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwODA1MDAwMDAwWhcNMjQwOTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0AxMjcyOWY0N2QwMWJlYmQ4MWE1MDQzYmRiYmQ0YzI0YzMw
YjBmMjhhN2MzMGQxNWI4NWQ4MmE3YmE2M2MwNDFlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmqo8mPhfct+ozEVcm0kRt5wra78s0aPcDKSFEmfOhnLWh
lCYsOLSuNBrxiQMBB8C8QnX8MPuBVUhwdXBF2Gh4ZWTZKlQGP7vXZWTto0eg4qau
9V4CU50M8XX09WxPFpeHP8xs6kOEKVaMBtBfUDe3FVt/DDF7ZBihVC2jQKvf9u/j
2FSh8bYj+O7J7z1jbCoOou54Rc3wy2/dXvAIUrafYwhBwJjnRglCzwgUJY7UseJU
q6L5w6agXj36e2mqI+hiwhgYzdQIdMw5L6MJvV05Bt8qOEIjy3kBQHlLNSCZJugb
/pRaChkt9ZRpLniBV1LM1FsNj4JdY4ta2IEzO8WnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrXcZTyKOtoxKZH6SbIjLFpM0zVIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzcyNjFkMjZkLTkzY2UtNDg0Ny1iMmVjLWQyOTM4MGI1MDI2ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKHPNWxZ9Ap1BI07g2Wp3XVbHNdK
oBloMsRPPfSuWYVkILi+pk7IHpISwz/JXKGdATNORRePgkwo2JYWfXndLMsVbNJ6
PiMAggI8oPQ2BbjRYknxzXJpXh33rfdgvChdDztzvouc9KQ418gxZulqZzY321iv
/1sz0Fj5Xm6Un6QQPWYj5119ajuXJeFXJGCpasd1mKz2nKOPnrIz33G89UOScBEq
3FJ4LQTkM52EiX3gB+86XEtl09w7+ossw+rlhfAnFnyEEJ8vhWIl2eSnhkkLn22Q
Zg9ltbGanbGbOoufqKVewfVL98xZLKAM0Cgna0Vb6s9HmLIvZQryWyU1s48=
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:15:05 2025 by rpki-client