Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83c37a48-d759-41a1-9855-4c0c2f14646c.roa
File: 83c37a48-d759-41a1-9855-4c0c2f14646c.roa (raw, json)
Hash identifier: Uy1j19V36FyjNCDe+nXNnIyUxXuUbrpHX1+m8LlIUTY=
Subject key identifier: 48:BA:3A:11:12:CF:77:D8:E2:50:B3:8A:2A:94:75:CC:1C:B2:99:3C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 084E8242FCD8E6BD47940526B580535CD5B185EF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83c37a48-d759-41a1-9855-4c0c2f14646c.roa
Signing time: Mon 30 Sep 2024 00:00:00 +0000
ROA not before: Mon 30 Sep 2024 00:00:00 +0000
ROA not after: Mon 04 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:4e:82:42:fc:d8:e6:bd:47:94:05:26:b5:80:53:5c:d5:b1:85:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 30 00:00:00 2024 GMT
Not After : Nov 4 23:59:59 2024 GMT
Subject: serialNumber=0320a4bb1abf4ad56d01b03ad3208eca0651bf4f150735c7c92f136bb4131764, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:b7:ca:b2:fd:01:84:c2:67:b0:92:50:bc:
53:93:c3:3d:c5:92:e0:c9:12:cd:20:5c:03:1b:28:
de:79:e6:3a:c9:46:13:ba:f0:51:9b:ba:0d:5c:be:
f3:17:1c:88:38:71:0a:65:04:c5:03:7e:98:dd:db:
ff:80:83:bd:cb:2f:a8:47:64:22:da:06:46:c6:ee:
ff:cf:09:60:40:30:e8:45:63:b5:6e:96:9f:13:c4:
be:cd:ea:95:be:61:26:d4:20:af:90:3f:2a:50:44:
26:9b:87:29:0d:e4:35:bd:92:ee:73:a6:5c:3c:48:
65:7a:62:7a:d0:c2:35:2c:31:da:48:bf:36:d8:9c:
f8:e9:48:ff:62:a5:d5:b8:32:03:d4:b3:af:45:19:
82:bc:30:8c:54:b9:49:2f:6e:3c:54:d0:40:65:bb:
c7:97:4b:31:81:97:4a:96:d2:2a:9b:93:57:7a:d1:
5f:29:21:49:be:43:e6:8b:0a:fa:c3:dd:6f:d7:e0:
3f:c7:fa:23:0d:52:2d:ea:af:34:09:9a:9c:61:8c:
6c:30:4e:68:03:8b:bf:5f:63:81:83:b6:56:db:d7:
f1:60:c7:79:ce:64:73:a6:88:e8:b3:9b:ba:d1:8d:
1a:10:69:a5:65:41:23:b7:bb:4d:4e:c8:91:4c:86:
87:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BA:3A:11:12:CF:77:D8:E2:50:B3:8A:2A:94:75:CC:1C:B2:99:3C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83c37a48-d759-41a1-9855-4c0c2f14646c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
03:aa:69:07:41:ab:33:00:60:3e:96:54:fa:ac:0b:3e:ad:94:
f7:0c:28:41:0e:70:80:b7:aa:10:7c:b2:cc:53:eb:34:76:4b:
ae:cb:d2:5f:7a:45:c9:63:06:5e:16:5d:ef:c2:10:c9:49:0b:
dd:8b:c8:d2:de:8f:8e:1a:dd:5d:c1:6f:ae:9e:dd:03:03:75:
ea:ed:5a:e7:e9:2c:1d:77:a6:09:a8:4d:07:f4:79:81:2c:3c:
ab:21:13:99:5f:58:85:16:f8:c9:8f:c7:eb:80:d0:93:15:b4:
f1:24:0f:2e:ea:7d:0c:0c:38:79:58:a6:7f:15:28:26:43:bd:
fd:2c:a9:f9:ad:35:8c:c4:40:11:f8:ca:78:04:94:c7:62:de:
e1:18:a7:ea:f5:f5:ba:6f:6a:0f:4d:85:d8:ab:8e:a0:1d:8f:
87:80:f6:2d:e3:17:1d:98:ae:ee:64:ce:50:9d:0f:3c:4c:2c:
aa:61:d3:9e:e2:66:21:ed:27:6e:69:b8:1a:f9:ff:ca:c7:68:
d4:b8:f6:6b:7b:1d:e9:53:7c:23:ee:36:5c:21:7d:d9:aa:b3:
ba:4b:5c:f4:23:92:61:67:e7:bc:a4:09:13:73:9b:4b:19:a2:
59:a0:0e:e4:a2:37:17:60:e5:b7:e7:85:3c:f5:f2:be:40:b5:
28:b2:0c:94
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCE6CQvzY5r1HlAUmtYBTXNWxhe8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwOTMwMDAwMDAwWhcNMjQxMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMzIwYTRiYjFhYmY0YWQ1NmQwMWIwM2FkMzIwOGVjYTA2
NTFiZjRmMTUwNzM1YzdjOTJmMTM2YmI0MTMxNzY0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+4rfKsv0BhMJnsJJQvFOTwz3FkuDJEs0gXAMbKN555jrJ
RhO68FGbug1cvvMXHIg4cQplBMUDfpjd2/+Ag73LL6hHZCLaBkbG7v/PCWBAMOhF
Y7Vulp8TxL7N6pW+YSbUIK+QPypQRCabhykN5DW9ku5zplw8SGV6YnrQwjUsMdpI
vzbYnPjpSP9ipdW4MgPUs69FGYK8MIxUuUkvbjxU0EBlu8eXSzGBl0qW0iqbk1d6
0V8pIUm+Q+aLCvrD3W/X4D/H+iMNUi3qrzQJmpxhjGwwTmgDi79fY4GDtlbb1/Fg
x3nOZHOmiOizm7rRjRoQaaVlQSO3u01OyJFMhodlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSLo6ERLPd9jiULOKKpR1zByymTwwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzgzYzM3YTQ4LWQ3NTktNDFhMS05ODU1LTRjMGMyZjE0NjQ2Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAOqaQdBqzMAYD6WVPqsCz6tlPcM
KEEOcIC3qhB8ssxT6zR2S67L0l96RcljBl4WXe/CEMlJC92LyNLej44a3V3Bb66e
3QMDdertWufpLB13pgmoTQf0eYEsPKshE5lfWIUW+MmPx+uA0JMVtPEkDy7qfQwM
OHlYpn8VKCZDvf0sqfmtNYzEQBH4yngElMdi3uEYp+r19bpvag9NhdirjqAdj4eA
9i3jFx2Yru5kzlCdDzxMLKph057iZiHtJ25puBr5/8rHaNS49mt7HelTfCPuNlwh
fdmqs7pLXPQjkmFn57ykCRNzm0sZolmgDuSiNxdg5bfnhTz18r5AtSiyDJQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:39:16 2025 by rpki-client