Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78651388-ca4f-4914-87ff-b415642d45f1.roa
File: 78651388-ca4f-4914-87ff-b415642d45f1.roa (raw, json)
Hash identifier: x8FdMU1eWla/FLhGsvYWDIEiHIhHnvbumkZO8iaZKu0=
Subject key identifier: 42:E3:2C:78:28:40:BF:90:AC:D9:9A:D4:BC:44:89:3B:0C:25:2E:F8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2CDF3DF189DF7E096F8F6EE92DC2BF86A527BB06
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78651388-ca4f-4914-87ff-b415642d45f1.roa
Signing time: Wed 07 May 2025 11:03:19 +0000
ROA not before: Wed 07 May 2025 11:03:19 +0000
ROA not after: Wed 11 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:df:3d:f1:89:df:7e:09:6f:8f:6e:e9:2d:c2:bf:86:a5:27:bb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 7 11:03:19 2025 GMT
Not After : Jun 11 23:59:59 2025 GMT
Subject: serialNumber=392548b8456f8528c19aee03ff60a823fbad80493d023d549ac1c6b036190877, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:dd:a9:58:8a:9f:5c:27:a1:71:4e:be:1d:
74:48:ad:ca:5e:ed:65:35:d7:a4:b9:7a:ee:a9:59:
01:f1:0c:57:2f:32:6b:96:e6:e1:32:8d:66:62:39:
45:6c:fa:9e:c3:4c:53:fc:b1:0f:92:f8:3d:1d:c0:
86:9f:13:86:0f:85:87:b3:4f:59:a1:f7:fd:b6:a2:
c3:fc:ba:13:97:1a:7c:25:1c:61:44:52:ff:15:61:
6b:05:fb:c5:f9:40:c7:48:77:a7:55:2c:6f:55:5a:
b9:88:be:14:3e:d0:a0:11:41:93:a7:e1:84:07:e3:
b6:de:b3:1c:77:a6:50:41:6f:d5:f9:df:58:12:37:
c4:55:39:48:7f:0d:a3:75:7c:38:f4:c6:96:c3:db:
fb:19:84:e1:13:d7:cd:38:ef:5b:86:bd:20:fe:49:
23:47:24:87:c5:0d:0b:36:22:f7:cb:22:01:52:55:
a6:1e:f9:79:0f:43:17:eb:49:ad:b6:a8:d2:b1:71:
19:32:74:e3:75:e6:aa:62:13:67:b4:74:c0:9f:08:
e0:96:67:9c:fc:5a:82:8b:6b:5f:ce:a1:59:78:16:
bd:f3:c2:b7:b5:8d:65:33:c5:71:91:1b:2c:e2:44:
72:aa:9d:55:93:f5:65:23:67:54:1a:ca:04:ea:10:
e9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E3:2C:78:28:40:BF:90:AC:D9:9A:D4:BC:44:89:3B:0C:25:2E:F8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78651388-ca4f-4914-87ff-b415642d45f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
75:47:5e:c9:f8:e5:41:24:0b:c8:b8:17:1e:9c:4c:85:09:bc:
7c:c5:5f:ce:f8:81:a3:5c:d3:c7:eb:52:a3:8a:5a:a6:00:bc:
b3:e1:52:a4:f0:52:64:2d:19:47:6e:15:53:83:95:ee:3d:a5:
07:f6:49:84:2e:0b:b0:5d:6e:9e:c1:0a:08:b3:6b:53:da:f7:
27:2b:4a:f0:8a:cb:bb:9d:4b:e2:a6:49:e3:8e:48:5e:f8:13:
1b:83:36:71:a5:13:1d:c1:9c:bf:af:da:b6:f5:f5:e3:ac:04:
e4:ea:1e:66:54:d5:78:52:bd:c6:c8:b8:61:71:1b:37:43:3f:
93:2e:81:e7:00:bd:d7:e2:a3:b4:f7:88:5c:80:63:a6:c9:b1:
ab:89:a8:a1:12:cd:73:5c:59:7b:60:27:03:be:a6:f9:97:fd:
b1:cf:8a:5b:de:a4:b5:56:70:89:28:76:8f:29:09:6a:64:34:
e3:f0:fc:8a:1b:29:a3:c6:90:d1:1a:42:8f:0b:4f:12:c2:9c:
e8:08:80:39:0a:4d:47:dc:89:e4:0f:8a:22:cb:5e:13:2e:01:
c4:36:5f:44:c4:d5:5c:fa:31:e2:80:5e:c4:fd:8f:7f:66:25:
61:07:ee:81:e7:72:5c:fd:df:b2:9b:9d:1b:67:26:60:d3:96:
38:9a:e1:9b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULN898Ynffglvj27pLcK/hqUnuwYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNTA3MTEwMzE5WhcNMjUwNjExMjM1OTU5
WjB6MUkwRwYDVQQFE0AzOTI1NDhiODQ1NmY4NTI4YzE5YWVlMDNmZjYwYTgyM2Zi
YWQ4MDQ5M2QwMjNkNTQ5YWMxYzZiMDM2MTkwODc3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUJt2pWIqfXCehcU6+HXRIrcpe7WU116S5eu6pWQHxDFcv
MmuW5uEyjWZiOUVs+p7DTFP8sQ+S+D0dwIafE4YPhYezT1mh9/22osP8uhOXGnwl
HGFEUv8VYWsF+8X5QMdId6dVLG9VWrmIvhQ+0KARQZOn4YQH47besxx3plBBb9X5
31gSN8RVOUh/DaN1fDj0xpbD2/sZhOET180471uGvSD+SSNHJIfFDQs2IvfLIgFS
VaYe+XkPQxfrSa22qNKxcRkydON15qpiE2e0dMCfCOCWZ5z8WoKLa1/OoVl4Fr3z
wre1jWUzxXGRGyziRHKqnVWT9WUjZ1QaygTqEOnlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUQuMseChAv5Cs2ZrUvESJOwwlLvgwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzc4NjUxMzg4LWNhNGYtNDkxNC04N2ZmLWI0MTU2NDJkNDVmMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHVHXsn45UEkC8i4Fx6cTIUJvHzF
X874gaNc08frUqOKWqYAvLPhUqTwUmQtGUduFVODle49pQf2SYQuC7Bdbp7BCgiz
a1Pa9ycrSvCKy7udS+KmSeOOSF74ExuDNnGlEx3BnL+v2rb19eOsBOTqHmZU1XhS
vcbIuGFxGzdDP5MugecAvdfio7T3iFyAY6bJsauJqKESzXNcWXtgJwO+pvmX/bHP
ilvepLVWcIkodo8pCWpkNOPw/IobKaPGkNEaQo8LTxLCnOgIgDkKTUfcieQPiiLL
XhMuAcQ2X0TE1Vz6MeKAXsT9j39mJWEH7oHnclz937KbnRtnJmDTljia4Zs=
-----END CERTIFICATE-----
Generated at Wed Jun 18 23:45:27 2025 by rpki-client