Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8045ebfc-3ef1-4a8e-b801-5c67eacb7acb.roa
File: 8045ebfc-3ef1-4a8e-b801-5c67eacb7acb.roa (raw, json)
Hash identifier: ux5Pl5Lypok1sEfYl3p/R+zT3y+t+Bi+83uZ6gdo+pU=
Subject key identifier: 46:AD:8F:3A:61:21:58:64:70:FA:89:8A:6E:8B:F9:A8:C3:C0:43:DC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 03303483CB59FFF4B668806A4C196E49A7746540
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8045ebfc-3ef1-4a8e-b801-5c67eacb7acb.roa
Signing time: Sat 23 Dec 2023 00:00:00 +0000
ROA not before: Sat 23 Dec 2023 00:00:00 +0000
ROA not after: Sat 27 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:30:34:83:cb:59:ff:f4:b6:68:80:6a:4c:19:6e:49:a7:74:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 23 00:00:00 2023 GMT
Not After : Jan 27 23:59:59 2024 GMT
Subject: serialNumber=2556d7cdf21510ed3e959b7c073b431348188689d78ae9eec95f8b24c01dffea, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:5e:57:c6:4c:58:10:f0:28:be:d0:e0:6c:
e2:25:07:1e:f2:7a:b7:f2:4a:cb:0e:d8:86:4d:0f:
c6:43:37:ab:cc:0b:aa:80:2e:f6:85:48:44:9e:30:
0d:ac:db:ed:88:75:90:11:02:e1:52:cb:a3:22:8d:
fa:c5:eb:6b:f2:99:08:64:b1:56:5b:25:82:69:16:
c1:60:8e:8b:55:90:36:da:02:b1:11:7a:b4:19:e3:
51:3b:a9:c8:53:ef:b3:0d:d7:07:3e:da:b7:c7:a4:
56:d9:8f:b5:61:b7:e7:dd:49:2c:48:8d:fd:c5:a5:
bc:f4:d0:56:5e:90:88:68:e6:27:3c:94:92:f0:b7:
28:55:cb:35:f5:c1:bf:bc:0d:63:a8:b7:74:00:24:
c5:d4:0e:86:28:fa:28:58:63:19:5d:d1:98:af:03:
57:d2:86:64:73:93:46:2c:48:92:16:22:fe:bb:39:
4a:3e:fe:33:c2:80:6b:26:04:f8:a6:71:f5:26:32:
2a:97:5d:35:80:8b:36:67:ff:db:5d:50:55:1e:c6:
4b:f6:28:87:9b:26:b4:5e:54:1a:4d:ed:34:02:39:
4f:f3:3c:5e:b9:c8:9a:9e:d7:1d:99:57:03:f3:bc:
37:1e:9a:61:ff:b4:ea:8a:16:30:70:ee:8c:58:c4:
95:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AD:8F:3A:61:21:58:64:70:FA:89:8A:6E:8B:F9:A8:C3:C0:43:DC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8045ebfc-3ef1-4a8e-b801-5c67eacb7acb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f3:43:d2:77:be:d6:bc:92:26:76:b4:e1:2f:50:00:d6:35:
13:76:0d:9b:df:7b:e2:39:aa:c0:4e:e5:44:ab:27:b4:21:7c:
7c:30:92:7f:42:33:da:8c:e7:ea:e0:ed:94:61:e8:fe:02:25:
8a:29:19:ff:a5:0f:69:a2:0d:45:5a:70:77:26:e5:b8:e9:53:
1b:4e:fb:c2:ba:89:3f:af:82:72:e4:b3:d4:00:3b:ba:e1:ff:
e2:b5:21:20:be:27:b0:ae:1d:51:72:38:9f:ae:24:ff:5a:74:
1e:de:41:43:cc:7d:07:3b:ab:e6:d9:5e:b3:a9:6d:4b:ae:1f:
6c:33:11:f0:17:7e:9a:8c:37:84:80:cb:7e:e3:f1:c6:02:40:
86:db:87:1b:27:26:69:ae:9b:1c:aa:b7:c2:36:28:7e:ae:ab:
aa:fa:b9:60:40:f5:2a:3b:66:8b:b0:ea:e1:ab:96:6e:a6:57:
4d:c2:d2:9e:49:85:d3:11:cb:0d:13:76:08:cb:36:4d:b1:66:
01:23:6d:c8:c2:87:b3:48:f5:c0:49:4a:8d:69:5a:59:27:ad:
c4:e4:9b:d7:d6:a1:14:57:1e:b0:f4:cb:27:ce:10:2e:96:0d:
e0:5b:a2:08:84:b1:31:d0:15:72:24:17:8d:b3:20:18:17:73:
bf:d3:e8:fd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAzA0g8tZ//S2aIBqTBluSad0ZUAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjIzMDAwMDAwWhcNMjQwMTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNTU2ZDdjZGYyMTUxMGVkM2U5NTliN2MwNzNiNDMxMzQ4
MTg4Njg5ZDc4YWU5ZWVjOTVmOGIyNGMwMWRmZmVhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzQV5XxkxYEPAovtDgbOIlBx7yerfySssO2IZND8ZDN6vM
C6qALvaFSESeMA2s2+2IdZARAuFSy6MijfrF62vymQhksVZbJYJpFsFgjotVkDba
ArERerQZ41E7qchT77MN1wc+2rfHpFbZj7Vht+fdSSxIjf3Fpbz00FZekIho5ic8
lJLwtyhVyzX1wb+8DWOot3QAJMXUDoYo+ihYYxld0ZivA1fShmRzk0YsSJIWIv67
OUo+/jPCgGsmBPimcfUmMiqXXTWAizZn/9tdUFUexkv2KIebJrReVBpN7TQCOU/z
PF65yJqe1x2ZVwPzvDcemmH/tOqKFjBw7oxYxJURAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURq2POmEhWGRw+omKbov5qMPAQ9wwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzgwNDVlYmZjLTNlZjEtNGE4ZS1iODAxLTVjNjdlYWNiN2FjYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAPzQ9J3vta8kiZ2tOEvUADWNRN2
DZvfe+I5qsBO5USrJ7QhfHwwkn9CM9qM5+rg7ZRh6P4CJYopGf+lD2miDUVacHcm
5bjpUxtO+8K6iT+vgnLks9QAO7rh/+K1ISC+J7CuHVFyOJ+uJP9adB7eQUPMfQc7
q+bZXrOpbUuuH2wzEfAXfpqMN4SAy37j8cYCQIbbhxsnJmmumxyqt8I2KH6uq6r6
uWBA9So7Zouw6uGrlm6mV03C0p5JhdMRyw0TdgjLNk2xZgEjbcjCh7NI9cBJSo1p
WlknrcTkm9fWoRRXHrD0yyfOEC6WDeBbogiEsTHQFXIkF42zIBgXc7/T6P0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:39 2025 by rpki-client