Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/732f823a-c2f8-4c66-b6ee-d7025fdecbf7.roa
File: 732f823a-c2f8-4c66-b6ee-d7025fdecbf7.roa (raw, json)
Hash identifier: RAbfcSxiGLvAIfMnrAjRcPSeChafjjcNcp4MslU5elY=
Subject key identifier: 48:39:B2:91:91:D6:67:2C:40:7D:D1:1A:AC:65:8D:21:A1:44:0A:55
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 597D1B82DB7048899BB14F551D50503E7C75773E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/732f823a-c2f8-4c66-b6ee-d7025fdecbf7.roa
Signing time: Mon 26 Aug 2024 00:00:00 +0000
ROA not before: Mon 26 Aug 2024 00:00:00 +0000
ROA not after: Mon 30 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:7d:1b:82:db:70:48:89:9b:b1:4f:55:1d:50:50:3e:7c:75:77:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 26 00:00:00 2024 GMT
Not After : Sep 30 23:59:59 2024 GMT
Subject: serialNumber=fac1a2cfa05eb6ba73f2984ff96fdf84eca0f992fe238b6c68a4af2440d678e5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:73:da:2d:68:96:03:58:07:b4:bb:20:cf:
60:49:95:6a:4f:7f:20:27:9f:36:36:c3:8c:d8:fc:
8e:cc:b5:0c:9b:6f:c0:dc:9c:c1:0e:0b:c9:33:50:
42:99:3f:3e:36:6c:dc:33:4b:60:83:fc:42:5b:36:
62:f0:24:8a:0d:df:39:9d:82:99:c2:c1:40:78:d6:
29:22:22:90:be:e5:6c:23:3c:51:bc:55:bf:69:a7:
d0:84:17:d2:16:71:3f:7f:62:4b:14:1b:46:35:f2:
0e:94:4c:2e:5d:cc:68:97:19:eb:6f:37:ba:c5:8c:
3a:27:b0:1d:b7:06:55:71:77:e5:b8:9f:b0:9f:23:
6c:c9:33:cb:86:11:4c:86:af:ab:b3:f2:96:b2:cb:
28:2d:19:5a:01:6d:d8:24:77:0e:6d:d5:e1:c2:38:
0d:ac:da:bf:00:17:01:f0:e2:54:0c:34:06:26:3e:
f2:6a:a8:b1:96:c8:15:51:d7:5a:7f:1e:ca:f2:43:
2e:57:3c:b1:4c:08:58:2e:a4:cb:0e:1e:02:ee:8f:
63:bc:99:e7:53:9c:b1:4a:a2:3b:f8:12:5a:a9:7f:
04:ea:96:d5:0b:05:dd:31:9f:66:db:e3:f9:a0:b9:
cf:b5:6b:5c:8f:84:3d:71:ca:0d:e4:f7:6d:df:85:
ad:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:39:B2:91:91:D6:67:2C:40:7D:D1:1A:AC:65:8D:21:A1:44:0A:55
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/732f823a-c2f8-4c66-b6ee-d7025fdecbf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a2:40:07:41:3d:28:69:5a:25:c6:04:c2:1e:32:cc:11:18:
2e:8f:48:2f:56:d4:bc:3c:18:0c:8b:b5:10:4e:d4:10:ca:9f:
2f:76:15:97:67:c2:4e:b5:93:56:e9:e1:15:6f:34:14:27:63:
88:a1:96:9a:d3:37:35:c4:97:e3:10:b8:d7:b3:f2:35:ae:34:
26:6b:cf:93:ab:4f:93:45:b9:2d:b7:ed:e8:f9:ec:8c:45:88:
ab:5e:81:6b:89:cf:06:a6:90:df:81:ef:a4:3c:0e:5e:62:76:
ff:52:97:95:c4:df:e5:f7:0d:88:57:07:5c:b2:44:f0:5d:ee:
db:71:da:5c:5b:aa:50:9a:a9:a5:bd:3d:56:57:35:99:4f:14:
2a:30:5d:e9:e2:95:b1:28:df:05:7b:af:94:10:37:c1:2c:e4:
a8:5e:f9:4a:b6:fe:fb:c2:b9:60:bf:c3:53:8f:27:94:f2:dc:
b3:1f:f7:9e:3b:9d:a1:49:85:91:3a:b1:c1:b8:7d:40:b5:01:
1e:58:bb:9b:33:fa:35:7b:14:f9:1e:c9:8f:38:17:ed:40:c3:
a4:83:89:23:fc:5a:d4:eb:2a:2f:51:7c:8b:79:fd:65:51:f1:
af:25:29:96:1c:61:b6:f1:f1:fd:29:cf:76:5b:5b:b7:ba:cc:
ee:08:01:f6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWX0bgttwSImbsU9VHVBQPnx1dz4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwODI2MDAwMDAwWhcNMjQwOTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmYWMxYTJjZmEwNWViNmJhNzNmMjk4NGZmOTZmZGY4NGVj
YTBmOTkyZmUyMzhiNmM2OGE0YWYyNDQwZDY3OGU1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHKXPaLWiWA1gHtLsgz2BJlWpPfyAnnzY2w4zY/I7MtQyb
b8DcnMEOC8kzUEKZPz42bNwzS2CD/EJbNmLwJIoN3zmdgpnCwUB41ikiIpC+5Wwj
PFG8Vb9pp9CEF9IWcT9/YksUG0Y18g6UTC5dzGiXGetvN7rFjDonsB23BlVxd+W4
n7CfI2zJM8uGEUyGr6uz8payyygtGVoBbdgkdw5t1eHCOA2s2r8AFwHw4lQMNAYm
PvJqqLGWyBVR11p/HsryQy5XPLFMCFgupMsOHgLuj2O8medTnLFKojv4ElqpfwTq
ltULBd0xn2bb4/mguc+1a1yPhD1xyg3k923fha27AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSDmykZHWZyxAfdEarGWNIaFEClUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzczMmY4MjNhLWMyZjgtNGM2Ni1iNmVlLWQ3MDI1ZmRlY2JmNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAISiQAdBPShpWiXGBMIeMswRGC6P
SC9W1Lw8GAyLtRBO1BDKny92FZdnwk61k1bp4RVvNBQnY4ihlprTNzXEl+MQuNez
8jWuNCZrz5OrT5NFuS237ej57IxFiKtegWuJzwamkN+B76Q8Dl5idv9Sl5XE3+X3
DYhXB1yyRPBd7ttx2lxbqlCaqaW9PVZXNZlPFCowXenilbEo3wV7r5QQN8Es5Khe
+Uq2/vvCuWC/w1OPJ5Ty3LMf9547naFJhZE6scG4fUC1AR5Yu5sz+jV7FPkeyY84
F+1Aw6SDiSP8WtTrKi9RfIt5/WVR8a8lKZYcYbbx8f0pz3ZbW7e6zO4IAfY=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:41:44 2025 by rpki-client