Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c1e758b-146b-49cf-bef1-70bd9a5bb7a4.roa
File: 7c1e758b-146b-49cf-bef1-70bd9a5bb7a4.roa (raw, json)
Hash identifier: G9BW/SGeKagn+aT5uga/JH1K7YmI9szVKVg9UQNb1Zg=
Subject key identifier: F2:66:C9:7D:B3:96:CC:C7:B9:01:4F:D8:51:3A:F7:70:B8:BE:BD:C0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 40A38EB95A28A3046437BD4896D17EB15D0AF251
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c1e758b-146b-49cf-bef1-70bd9a5bb7a4.roa
Signing time: Thu 31 Oct 2024 00:00:00 +0000
ROA not before: Thu 31 Oct 2024 00:00:00 +0000
ROA not after: Thu 05 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a3:8e:b9:5a:28:a3:04:64:37:bd:48:96:d1:7e:b1:5d:0a:f2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 31 00:00:00 2024 GMT
Not After : Dec 5 23:59:59 2024 GMT
Subject: serialNumber=c94986db0a51c9da1e705b3a230f1c6fa08fda73c573a48b720c11239f7ac03e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:c2:a5:f6:18:4a:e9:60:c4:8e:7e:f1:61:
8f:e7:96:2d:d0:f3:8d:f7:28:2d:13:c9:62:9f:ca:
e8:59:94:45:b6:a8:00:e7:0a:2a:4e:4d:8e:1b:0f:
34:41:43:6d:d8:db:38:3b:3b:93:01:45:b1:a4:32:
70:a3:fa:51:58:0c:5d:7d:33:b0:59:e2:f4:f7:65:
83:91:67:3a:1b:da:80:09:fb:0f:b0:a7:4e:06:69:
4a:1a:e9:48:27:95:a6:66:e7:a7:d2:61:e0:b3:e0:
c2:25:98:8d:d3:48:b4:9b:bc:7e:94:c5:86:98:43:
30:5a:1e:08:fb:f6:4c:68:14:41:07:a6:66:ba:43:
ce:25:fc:79:c8:0c:e7:3a:1a:50:9d:0d:31:ff:6d:
ff:5c:b6:05:70:31:dd:8e:3a:79:ee:de:55:5c:7c:
81:13:d0:5e:c7:a9:fe:58:a0:bb:20:d7:d2:68:59:
03:91:f3:58:a6:ed:58:d4:f5:1a:90:8c:eb:f9:92:
04:f5:75:11:2c:57:7f:4c:05:7e:f8:b8:76:40:a9:
a9:9a:4b:54:95:b7:fd:0c:7f:36:bb:78:e3:67:68:
33:2e:79:7f:56:0d:c2:9a:07:68:bc:b8:f2:6b:4f:
94:16:ee:0d:a8:f8:ff:d9:67:0c:ef:ef:8b:60:a7:
75:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:66:C9:7D:B3:96:CC:C7:B9:01:4F:D8:51:3A:F7:70:B8:BE:BD:C0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c1e758b-146b-49cf-bef1-70bd9a5bb7a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:2a:ec:e6:61:84:17:f8:ea:1b:45:f8:86:01:aa:a4:db:10:
22:5a:98:6d:0b:9a:59:c4:5a:d4:df:fc:fd:77:5f:6a:e3:f8:
61:4e:54:e0:72:57:68:23:c9:9f:12:27:39:9f:9c:b9:78:30:
a9:c0:81:8a:89:60:5b:d9:b6:63:5f:49:11:e4:22:1e:08:fc:
9f:f6:84:bf:62:7e:ea:13:c0:ea:76:e6:00:b8:5a:91:be:c4:
55:ca:0c:f1:83:d7:e7:00:7d:db:9c:e3:b3:5e:d0:06:80:ae:
00:3e:84:ee:2a:ea:18:38:97:fc:66:16:0b:7f:9a:47:73:6c:
16:d4:cc:fa:78:2b:2f:9f:de:72:63:87:47:43:ef:a6:99:79:
7d:5c:31:07:f7:97:bd:7f:39:93:73:9d:89:a0:01:4f:3a:d3:
24:a7:51:47:85:ee:7a:b6:d0:ef:9c:8f:a4:df:c5:b6:fb:f6:
b5:b8:5e:77:cf:e1:02:e0:1c:b2:74:96:61:99:f8:d3:38:ed:
e8:8c:bb:33:ce:e5:c7:9c:15:60:af:98:63:92:a0:31:02:2d:
dc:e8:c0:48:8b:d9:21:0a:cd:ad:69:0c:4a:4f:87:32:9e:a2:
4b:83:7d:4b:14:bd:9f:77:38:f1:d6:5c:31:bf:08:e8:60:e8:
c7:15:80:f4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQKOOuVooowRkN71IltF+sV0K8lEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDMxMDAwMDAwWhcNMjQxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjOTQ5ODZkYjBhNTFjOWRhMWU3MDViM2EyMzBmMWM2ZmEw
OGZkYTczYzU3M2E0OGI3MjBjMTEyMzlmN2FjMDNlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWWMKl9hhK6WDEjn7xYY/nli3Q8433KC0TyWKfyuhZlEW2
qADnCipOTY4bDzRBQ23Y2zg7O5MBRbGkMnCj+lFYDF19M7BZ4vT3ZYORZzob2oAJ
+w+wp04GaUoa6UgnlaZm56fSYeCz4MIlmI3TSLSbvH6UxYaYQzBaHgj79kxoFEEH
pma6Q84l/HnIDOc6GlCdDTH/bf9ctgVwMd2OOnnu3lVcfIET0F7Hqf5YoLsg19Jo
WQOR81im7VjU9RqQjOv5kgT1dREsV39MBX74uHZAqamaS1SVt/0Mfza7eONnaDMu
eX9WDcKaB2i8uPJrT5QW7g2o+P/ZZwzv74tgp3WFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU8mbJfbOWzMe5AU/YUTr3cLi+vcAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzdjMWU3NThiLTE0NmItNDljZi1iZWYxLTcwYmQ5YTViYjdhNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHwq7OZhhBf46htF+IYBqqTbECJa
mG0LmlnEWtTf/P13X2rj+GFOVOByV2gjyZ8SJzmfnLl4MKnAgYqJYFvZtmNfSRHk
Ih4I/J/2hL9ifuoTwOp25gC4WpG+xFXKDPGD1+cAfduc47Ne0AaArgA+hO4q6hg4
l/xmFgt/mkdzbBbUzPp4Ky+f3nJjh0dD76aZeX1cMQf3l71/OZNznYmgAU860ySn
UUeF7nq20O+cj6Tfxbb79rW4XnfP4QLgHLJ0lmGZ+NM47eiMuzPO5cecFWCvmGOS
oDECLdzowEiL2SEKza1pDEpPhzKeokuDfUsUvZ93OPHWXDG/COhg6McVgPQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:45:01 2025 by rpki-client