Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/73024c9c-9a2b-4686-ab96-72812e70b8c4.roa
File: 73024c9c-9a2b-4686-ab96-72812e70b8c4.roa (raw, json)
Hash identifier: 4rYDGD4CRB6sbXGrsCxdsDzM1ifsUr7LE9okuYwctus=
Subject key identifier: EF:07:7D:B7:D6:E6:4D:11:7B:56:F9:01:41:F6:DB:5C:7C:1C:C8:BB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7B1C721FF5994526038DC556D385739AFF767686
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/73024c9c-9a2b-4686-ab96-72812e70b8c4.roa
Signing time: Tue 04 Jun 2024 00:00:00 +0000
ROA not before: Tue 04 Jun 2024 00:00:00 +0000
ROA not after: Tue 09 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:1c:72:1f:f5:99:45:26:03:8d:c5:56:d3:85:73:9a:ff:76:76:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 4 00:00:00 2024 GMT
Not After : Jul 9 23:59:59 2024 GMT
Subject: serialNumber=a8577b9eeabfd128d4a40b5d77738135c19a728003ca73ee7c1b6bed6966dbd5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ac:a4:04:fe:b6:1c:ab:39:ce:c3:5f:7f:11:
2d:98:5f:50:f1:67:28:d8:51:34:c4:d3:df:0d:79:
be:86:ab:97:01:53:fa:a7:2a:3b:23:e5:e2:50:6c:
75:78:3d:7b:63:6c:7c:37:0d:d8:9a:5e:86:d6:e2:
97:ff:f1:b1:92:81:ac:94:92:2e:12:3c:9a:5e:0d:
a7:ac:54:e9:19:e1:ae:aa:8e:79:19:bb:cc:e5:1d:
ca:39:bd:a1:45:92:e2:cd:ef:c0:e1:f1:00:59:cc:
bd:7b:83:6a:e3:fe:8e:60:33:dd:ba:9e:d3:d3:de:
14:af:97:ef:70:0d:f0:e3:18:3f:70:89:fd:65:c0:
ae:38:84:5b:ac:bb:6a:07:02:44:a5:38:df:c9:34:
30:36:cc:d5:09:0b:99:cc:0a:f7:3c:38:db:7b:54:
9a:d6:e0:17:fd:53:88:19:19:a4:d1:69:8c:c6:97:
7b:60:6e:52:f4:a6:33:ff:77:60:56:3b:fd:7f:bd:
76:ae:65:44:87:55:17:cd:87:c4:69:c2:24:c6:a9:
ae:d3:a9:16:7a:6b:a0:b6:aa:8d:a3:ce:bd:7f:e5:
2a:88:94:63:c1:05:8c:10:8f:c0:dd:ae:1b:dd:e1:
4c:0f:5e:c9:81:dd:bc:e4:28:ed:fa:eb:dd:ed:03:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:07:7D:B7:D6:E6:4D:11:7B:56:F9:01:41:F6:DB:5C:7C:1C:C8:BB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/73024c9c-9a2b-4686-ab96-72812e70b8c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:fd:9d:3c:8a:49:58:5b:93:3f:fc:0d:e9:5c:21:7b:4d:32:
86:0b:23:76:fe:c3:ee:de:dc:98:aa:7e:91:b2:5d:4c:f8:ed:
b4:74:6f:21:fe:d7:1c:8c:ef:7f:f6:7c:1a:2c:46:89:f1:70:
9c:f9:5e:f4:ed:eb:ed:8d:ec:80:6c:98:a0:9a:4c:09:a6:fb:
6a:d2:3f:a5:ee:8c:eb:1f:5e:0b:a1:c4:96:22:c1:1c:24:4a:
ab:c3:85:92:f7:16:a5:05:6d:13:32:82:b7:96:51:b7:4d:0b:
25:29:c9:e2:45:ec:c4:98:3d:0f:d0:cc:32:d5:6c:26:60:34:
30:66:0c:2c:3d:46:4a:62:1b:3b:9e:c8:11:59:71:0c:75:e9:
da:72:54:e0:8b:1c:6b:75:e8:07:9c:a7:c5:30:26:63:a4:a3:
56:80:93:fa:02:20:1d:a6:95:f3:7e:c7:33:1d:92:82:b3:86:
01:1f:d9:86:68:1b:29:96:44:6d:47:2a:45:a9:c0:c8:f8:a2:
3c:ca:e8:8a:71:c3:c3:c3:ab:bf:9a:19:e6:b6:50:bb:6b:ec:
5e:c7:95:26:db:d4:40:90:8d:06:4d:91:f0:9e:25:c6:d3:68:
c8:61:83:4a:36:6e:f6:f3:26:84:2e:00:89:da:e4:30:12:6b:
57:1e:a4:8b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUexxyH/WZRSYDjcVW04Vzmv92doYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNjA0MDAwMDAwWhcNMjQwNzA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BhODU3N2I5ZWVhYmZkMTI4ZDRhNDBiNWQ3NzczODEzNWMx
OWE3MjgwMDNjYTczZWU3YzFiNmJlZDY5NjZkYmQ1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDxrKQE/rYcqznOw19/ES2YX1DxZyjYUTTE098Neb6Gq5cB
U/qnKjsj5eJQbHV4PXtjbHw3DdiaXobW4pf/8bGSgayUki4SPJpeDaesVOkZ4a6q
jnkZu8zlHco5vaFFkuLN78Dh8QBZzL17g2rj/o5gM926ntPT3hSvl+9wDfDjGD9w
if1lwK44hFusu2oHAkSlON/JNDA2zNUJC5nMCvc8ONt7VJrW4Bf9U4gZGaTRaYzG
l3tgblL0pjP/d2BWO/1/vXauZUSHVRfNh8RpwiTGqa7TqRZ6a6C2qo2jzr1/5SqI
lGPBBYwQj8Ddrhvd4UwPXsmB3bzkKO36693tA8/3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU7wd9t9bmTRF7VvkBQfbbXHwcyLswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzczMDI0YzljLTlhMmItNDY4Ni1hYjk2LTcyODEyZTcwYjhjNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALL9nTyKSVhbkz/8DelcIXtNMoYL
I3b+w+7e3JiqfpGyXUz47bR0byH+1xyM73/2fBosRonxcJz5XvTt6+2N7IBsmKCa
TAmm+2rSP6XujOsfXguhxJYiwRwkSqvDhZL3FqUFbRMygreWUbdNCyUpyeJF7MSY
PQ/QzDLVbCZgNDBmDCw9RkpiGzueyBFZcQx16dpyVOCLHGt16Aecp8UwJmOko1aA
k/oCIB2mlfN+xzMdkoKzhgEf2YZoGymWRG1HKkWpwMj4ojzK6Ipxw8PDq7+aGea2
ULtr7F7HlSbb1ECQjQZNkfCeJcbTaMhhg0o2bvbzJoQuAIna5DASa1cepIs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:02:48 2025 by rpki-client