Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8521c07e-10a1-4598-acec-e6b2876c3ed0.roa
File: 8521c07e-10a1-4598-acec-e6b2876c3ed0.roa (raw, json)
Hash identifier: biZtkJ6suNJAZyhwcjHofNhCgl5Xw3Z7h+kq0MX2Sb4=
Subject key identifier: F8:B2:37:2C:36:AE:BF:36:FE:67:5C:D4:F4:62:64:22:3B:A6:6F:69
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 33A4EEBA640D5B661EF8D076D8A4F4F108AED428
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8521c07e-10a1-4598-acec-e6b2876c3ed0.roa
Signing time: Sat 28 Sep 2024 00:00:00 +0000
ROA not before: Sat 28 Sep 2024 00:00:00 +0000
ROA not after: Sat 02 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:a4:ee:ba:64:0d:5b:66:1e:f8:d0:76:d8:a4:f4:f1:08:ae:d4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 28 00:00:00 2024 GMT
Not After : Nov 2 23:59:59 2024 GMT
Subject: serialNumber=75b6c066259a5631c5b336fea145d5ec941a80812685008115b287f41d7d2531, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:1c:ea:ba:50:f3:41:f5:91:6c:96:32:16:
ac:f3:7f:9c:6a:fa:3f:32:0f:52:70:b1:3c:b9:bd:
0c:29:e8:6d:55:49:72:9c:05:72:c2:0d:ee:65:23:
7e:1f:03:a4:77:c8:67:39:4f:ee:e2:a2:95:94:2c:
e1:46:a9:6f:ef:aa:6c:26:87:08:9a:96:04:2b:32:
f4:1e:ef:3a:1b:d0:8e:ea:41:ff:6b:91:c3:ea:56:
a8:be:d3:01:d1:81:94:36:09:94:5e:17:c9:48:fc:
30:84:93:b6:73:47:52:5b:71:1e:af:c1:a4:36:7c:
17:ae:27:44:66:8e:6e:b1:c2:15:e0:3e:6e:7d:4b:
96:e0:46:70:19:52:d3:a9:97:0e:ff:4f:f1:bf:bc:
5f:3e:10:32:38:76:73:f5:85:a4:d6:2a:6e:d0:4f:
d3:fd:4b:c7:44:7c:0d:96:14:e7:0f:d7:6e:a4:b3:
cc:48:5d:57:c4:e7:5c:0d:77:61:3f:05:75:5f:74:
26:55:e2:18:8f:ff:44:b5:ce:63:df:ac:79:58:b6:
13:d8:ad:17:63:65:2f:c6:03:fd:3f:a5:61:88:2e:
55:fa:12:da:26:5c:c1:7e:26:1e:f2:9b:b8:f6:f9:
f4:1b:d3:52:bb:e1:ee:da:c9:0f:3d:f1:e3:9f:1e:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B2:37:2C:36:AE:BF:36:FE:67:5C:D4:F4:62:64:22:3B:A6:6F:69
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8521c07e-10a1-4598-acec-e6b2876c3ed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
03:54:e8:03:69:d6:7a:9c:c7:b8:cc:93:50:5a:d7:48:c0:20:
52:66:8f:ca:b3:dd:22:8e:28:c7:97:ec:09:37:41:17:de:08:
94:99:9c:66:8f:9a:97:93:b2:84:63:54:3b:ad:97:28:80:6f:
47:f9:9c:ff:f4:7d:77:8a:50:f2:34:e9:17:75:c2:90:06:b4:
a2:8b:42:27:91:ab:ee:e6:0e:51:5b:60:e2:36:e2:05:fa:5d:
0b:fb:7d:55:99:e7:ba:78:2f:b0:16:c3:13:05:5e:2d:45:b7:
82:00:7a:0f:6b:f0:b6:b1:a5:d5:6f:d5:e0:f5:db:53:13:0b:
e1:1e:5e:25:83:24:c2:ac:9d:3b:6c:cb:5d:2f:77:0c:e1:58:
c8:c7:37:30:ad:49:dc:89:06:82:30:b2:36:4e:2d:e7:0f:bb:
51:84:bc:df:4b:1c:c6:b7:0c:65:49:88:1d:68:42:b4:e5:0b:
28:59:ce:09:27:49:bb:38:15:3c:2d:f0:5d:c2:a9:9e:5b:59:
7f:7c:bc:31:88:53:66:a9:54:78:50:81:ee:04:48:9a:bd:e4:
c4:65:0b:e1:da:b1:75:2a:df:21:c0:b5:ee:2d:d6:96:6a:34:
29:d9:51:e9:49:19:3a:d6:56:eb:54:6c:98:49:85:68:75:7c:
24:97:37:36
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUM6TuumQNW2Ye+NB22KT08Qiu1CgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwOTI4MDAwMDAwWhcNMjQxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NWI2YzA2NjI1OWE1NjMxYzViMzM2ZmVhMTQ1ZDVlYzk0
MWE4MDgxMjY4NTAwODExNWIyODdmNDFkN2QyNTMxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDLGxzqulDzQfWRbJYyFqzzf5xq+j8yD1JwsTy5vQwp6G1V
SXKcBXLCDe5lI34fA6R3yGc5T+7iopWULOFGqW/vqmwmhwialgQrMvQe7zob0I7q
Qf9rkcPqVqi+0wHRgZQ2CZReF8lI/DCEk7ZzR1JbcR6vwaQ2fBeuJ0Rmjm6xwhXg
Pm59S5bgRnAZUtOplw7/T/G/vF8+EDI4dnP1haTWKm7QT9P9S8dEfA2WFOcP126k
s8xIXVfE51wNd2E/BXVfdCZV4hiP/0S1zmPfrHlYthPYrRdjZS/GA/0/pWGILlX6
EtomXMF+Jh7ym7j2+fQb01K74e7ayQ898eOfHswxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+LI3LDauvzb+Z1zU9GJkIjumb2kwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzg1MjFjMDdlLTEwYTEtNDU5OC1hY2VjLWU2YjI4NzZjM2VkMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAANU6ANp1nqcx7jMk1Ba10jAIFJm
j8qz3SKOKMeX7Ak3QRfeCJSZnGaPmpeTsoRjVDutlyiAb0f5nP/0fXeKUPI06Rd1
wpAGtKKLQieRq+7mDlFbYOI24gX6XQv7fVWZ57p4L7AWwxMFXi1Ft4IAeg9r8Lax
pdVv1eD121MTC+EeXiWDJMKsnTtsy10vdwzhWMjHNzCtSdyJBoIwsjZOLecPu1GE
vN9LHMa3DGVJiB1oQrTlCyhZzgknSbs4FTwt8F3CqZ5bWX98vDGIU2apVHhQge4E
SJq95MRlC+HasXUq3yHAte4t1pZqNCnZUelJGTrWVutUbJhJhWh1fCSXNzY=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:31:51 2025 by rpki-client