Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f94b4f0-8208-4a07-8150-60bb218cd96f.roa
File: 7f94b4f0-8208-4a07-8150-60bb218cd96f.roa (raw, json)
Hash identifier: HEGQ1EI+TpfbRpqpt2KACNH6ZJly+pkZmJQmpuAgkw8=
Subject key identifier: CC:72:2A:9B:69:A4:B1:3C:26:15:73:2D:FA:B6:B6:54:0F:DE:85:07
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 28750937A85DA55CA5FCB86FE92152992DF68D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f94b4f0-8208-4a07-8150-60bb218cd96f.roa
Signing time: Fri 26 Jul 2024 00:00:00 +0000
ROA not before: Fri 26 Jul 2024 00:00:00 +0000
ROA not after: Fri 30 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:75:09:37:a8:5d:a5:5c:a5:fc:b8:6f:e9:21:52:99:2d:f6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 26 00:00:00 2024 GMT
Not After : Aug 30 23:59:59 2024 GMT
Subject: serialNumber=e7db2f708b70954e1e85f2a5fbb36a18950aa6dd4bc56f429f0a3ad2d4f6f08c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:eb:d1:1f:4b:64:ff:da:35:af:bf:93:f4:ff:
7c:8e:b6:96:5d:25:7f:6b:26:db:d1:5b:52:32:c6:
f1:13:f8:57:eb:03:73:7e:e2:0d:72:6e:fd:46:86:
35:54:a6:2d:df:08:5f:8e:72:9a:b5:0f:61:dc:65:
2a:9b:f3:00:ac:23:6c:76:ca:db:01:bb:ef:a3:7f:
80:c1:b4:31:da:3c:a5:9a:a6:47:58:24:b9:2e:40:
d3:fb:ac:1d:ea:0c:f3:03:97:fb:19:5b:9a:a5:87:
36:fe:1e:13:c6:d0:fc:96:85:1b:fc:e9:3d:96:85:
d9:2e:f4:75:9e:f8:a7:96:bf:81:38:d5:46:a9:43:
0b:dd:a0:4c:d8:eb:41:9a:bc:90:9a:f3:59:15:1f:
00:84:6e:2b:39:e0:6f:c4:c0:1d:5b:f7:50:44:fb:
3f:42:9a:15:3f:7c:fa:a4:42:72:af:f3:fd:4f:cd:
c1:27:c4:92:a1:1e:db:00:66:cf:b2:57:ec:86:b5:
09:f0:a1:84:69:95:44:8a:0c:24:06:23:27:df:e2:
4b:ff:47:e8:b0:b9:70:8a:d8:ae:3c:b2:c2:ea:38:
23:89:fc:bb:6f:9a:04:eb:20:99:26:9d:f9:b1:4a:
50:b6:80:e2:59:9e:2d:23:27:fc:51:88:2e:05:11:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:72:2A:9B:69:A4:B1:3C:26:15:73:2D:FA:B6:B6:54:0F:DE:85:07
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f94b4f0-8208-4a07-8150-60bb218cd96f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:50:b2:50:a3:b8:44:0c:75:41:59:93:f5:5a:52:79:ef:bc:
73:c6:7a:2c:1f:1e:d7:8f:6b:48:e2:1c:77:ee:90:d0:61:12:
5b:73:22:80:96:4d:25:89:17:a0:2e:45:93:c2:79:db:94:66:
a5:85:d3:32:f8:24:8d:b5:53:ed:18:f2:97:65:39:8b:42:8b:
e4:dc:7a:e1:12:b3:33:23:31:df:25:80:ff:da:63:07:c7:b3:
a7:28:3a:c8:45:44:31:78:59:80:99:85:80:c5:71:5b:61:9f:
05:85:f6:9b:8f:74:f2:e6:10:1a:20:13:b6:f2:ee:6d:2e:e3:
e2:4c:8e:1c:1f:44:68:8e:20:4c:fe:42:c3:8c:e6:7f:e2:9a:
f2:1d:2c:45:c8:df:76:8e:86:5f:bc:82:55:6d:99:40:74:a8:
5d:3d:95:b9:eb:24:e5:0b:5c:32:87:e6:8e:09:77:04:0f:cd:
a4:fc:c4:29:cc:df:96:27:b7:9f:18:6d:5e:6d:7a:7c:0e:e3:
56:72:ef:5d:13:b9:df:7e:15:49:21:9b:12:01:d0:f3:95:32:
51:5f:8a:d6:fd:7a:80:19:f9:6b:33:60:47:ae:63:2d:38:1e:
0e:7f:8b:68:b6:e9:9d:1e:ad:3e:8f:ce:a3:74:40:5a:f9:f3:
9b:99:46:91
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITKHUJN6hdpVyl/Lhv6SFSmS32jTANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzIyNzhhYWI4NzhmMjY2MmNlMTRlOTA1ZTE4ZWJjYjc1MjJm
OTJiMzY4NGJjNDg2NWI0ZDAeFw0yNDA3MjYwMDAwMDBaFw0yNDA4MzAyMzU5NTla
MHoxSTBHBgNVBAUTQGU3ZGIyZjcwOGI3MDk1NGUxZTg1ZjJhNWZiYjM2YTE4OTUw
YWE2ZGQ0YmM1NmY0MjlmMGEzYWQyZDRmNmYwOGMxLTArBgNVBAMTJGMwY2UyM2Vh
LTQzZmMtNGJlNC1iZWVlLWMwMTQ3ODEyMmEwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOPr0R9LZP/aNa+/k/T/fI62ll0lf2sm29FbUjLG8RP4V+sD
c37iDXJu/UaGNVSmLd8IX45ymrUPYdxlKpvzAKwjbHbK2wG776N/gMG0Mdo8pZqm
R1gkuS5A0/usHeoM8wOX+xlbmqWHNv4eE8bQ/JaFG/zpPZaF2S70dZ74p5a/gTjV
RqlDC92gTNjrQZq8kJrzWRUfAIRuKzngb8TAHVv3UET7P0KaFT98+qRCcq/z/U/N
wSfEkqEe2wBmz7JX7Ia1CfChhGmVRIoMJAYjJ9/iS/9H6LC5cIrYrjyywuo4I4n8
u2+aBOsgmSad+bFKULaA4lmeLSMn/FGILgURH/8CAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBTMciqbaaSxPCYVcy36trZUD96FBzAfBgNVHSMEGDAWgBRVqN1F2UQT+dGS
9Sxjzoz7xhSWuDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzE0MzNlYmZmLWRm
ZDYtNGM1Yy1iN2ZmLTk5Yzg1MTM5ZDRhOC8yNzhhYWI4NzhmMjY2MmNlMTRlOTA1
ZTE4ZWJjYjc1MjJmOTJiMzY4NGJjNDg2NWI0ZC5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8xNmYxZmZlZS03NDYxLTQ2NzQtYmIwNS1mZGRl
ZmE5YTAyYzYvN2Y5NGI0ZjAtODIwOC00YTA3LTgxNTAtNjBiYjIxOGNkOTZmLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUt
ZmRkZWZhOWEwMmM2L0ptTE9GT2tGNFk2OHQxSXZrck5vUzhTR1cwMC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMckeDANBgkqhkiG9w0BAQsFAAOCAQEAP1CyUKO4RAx1QVmT9VpSee+8c8Z6
LB8e149rSOIcd+6Q0GESW3MigJZNJYkXoC5Fk8J525RmpYXTMvgkjbVT7Rjyl2U5
i0KL5Nx64RKzMyMx3yWA/9pjB8ezpyg6yEVEMXhZgJmFgMVxW2GfBYX2m4908uYQ
GiATtvLubS7j4kyOHB9EaI4gTP5Cw4zmf+Ka8h0sRcjfdo6GX7yCVW2ZQHSoXT2V
uesk5QtcMofmjgl3BA/NpPzEKczflie3nxhtXm16fA7jVnLvXRO5334VSSGbEgHQ
85UyUV+K1v16gBn5azNgR65jLTgeDn+LaLbpnR6tPo/Oo3RAWvnzm5lGkQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:04 2025 by rpki-client