Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/883f5b5f-ee58-4048-8cf2-224afb2aed18.roa
File: 883f5b5f-ee58-4048-8cf2-224afb2aed18.roa (raw, json)
Hash identifier: UwaoMfT5jpOnbVTyI4EC/ttV4Xg4e6OdSzHIruwxFZQ=
Subject key identifier: 3B:1A:4F:2A:54:85:3F:C3:26:D3:4C:D7:84:AB:9B:F1:44:61:2F:25
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 799D37346863D95C514B1A3CF386FE626E178063
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/883f5b5f-ee58-4048-8cf2-224afb2aed18.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:9d:37:34:68:63:d9:5c:51:4b:1a:3c:f3:86:fe:62:6e:17:80:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: serialNumber=35cca389ba26cc167b6bc55de39a07d87ca13981ef10e71f53ba7eac6e3169eb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:6c:54:26:38:f9:3b:95:63:07:d3:22:24:
3a:ec:39:6d:4a:f0:03:2c:4d:46:4d:a7:11:db:87:
67:e6:46:73:d5:31:e3:11:75:4e:a8:09:33:4f:48:
82:f3:70:e3:0a:ef:d0:1f:10:8a:65:c9:9e:a9:ed:
8a:a3:4e:e4:ea:9a:ec:7e:38:e8:80:05:38:13:e7:
f6:66:a6:ba:1e:50:b9:f5:8b:8e:03:75:e1:88:67:
5f:50:b7:ec:6c:b6:56:94:b8:ed:bf:d5:d2:9e:7f:
9c:8c:07:23:b9:50:2c:08:03:35:d6:a1:2a:91:20:
c8:f8:6f:3b:21:ad:92:70:43:ab:fc:92:d9:98:a1:
01:75:89:9b:3f:a3:02:cf:a5:fe:fe:ce:6a:86:ce:
79:72:f0:3f:30:d3:60:72:ba:3c:72:37:2b:5f:e0:
dd:57:12:70:28:e6:e5:b5:c8:c5:bf:a7:48:8f:06:
f7:e8:97:9b:1a:6a:ff:eb:b3:74:ae:f6:0b:5c:5b:
4c:a6:15:63:ae:28:60:40:37:32:c6:2b:6c:8b:93:
68:93:17:71:e1:87:97:c5:a1:4f:d1:ab:32:03:fc:
f1:f6:65:4d:72:06:d6:9b:1e:4f:2e:0d:f3:45:38:
3a:43:09:ce:bb:82:27:71:e2:d8:c0:da:cd:ed:fc:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1A:4F:2A:54:85:3F:C3:26:D3:4C:D7:84:AB:9B:F1:44:61:2F:25
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/883f5b5f-ee58-4048-8cf2-224afb2aed18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d3:fd:83:72:c1:a6:93:57:97:50:64:ce:f0:ce:de:03:2f:
4b:66:ad:9f:73:21:ff:e7:7d:fe:f6:63:10:5d:5b:b9:a1:ea:
8f:cc:2c:4c:b4:f4:90:f3:e5:d5:78:ff:d9:62:1c:3b:3e:88:
2c:0a:91:f6:45:07:5f:17:a9:56:74:5b:ef:6f:21:5c:13:16:
04:40:74:86:ac:e6:0f:3f:11:c7:75:a8:b4:f4:4f:99:6c:b4:
0b:07:e3:1b:50:9d:38:7a:ff:af:dc:9d:1c:89:7c:b6:c6:98:
4c:91:eb:f1:8b:05:88:03:8f:41:91:de:cd:6d:e0:da:44:d5:
1d:aa:d9:c8:12:05:f3:f1:f0:3a:70:fd:26:67:dd:9a:e7:1b:
b4:79:1b:08:ae:ad:35:9f:4c:36:e0:90:4b:bc:4e:80:c2:06:
1d:8e:72:6a:54:e8:f7:ff:d1:b1:dc:37:22:a9:b9:c2:41:52:
e3:ee:88:a3:ee:cd:e8:36:b8:6a:6b:1b:87:5d:cc:94:c7:df:
7d:85:cb:bc:73:7b:09:ab:1c:97:d3:01:a4:74:8a:60:f2:84:
de:fe:c0:f2:63:d8:f0:0c:c7:b5:cf:a5:eb:a6:72:1a:28:a3:
dd:ad:c9:56:f8:68:07:26:d7:ca:f0:7a:5c:5a:1c:69:2c:7d:
78:a2:3f:00
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeZ03NGhj2VxRSxo884b+Ym4XgGMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMjAzMDAwMDAwWhcNMjUwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNWNjYTM4OWJhMjZjYzE2N2I2YmM1NWRlMzlhMDdkODdj
YTEzOTgxZWYxMGU3MWY1M2JhN2VhYzZlMzE2OWViMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDG8GxUJjj5O5VjB9MiJDrsOW1K8AMsTUZNpxHbh2fmRnPV
MeMRdU6oCTNPSILzcOMK79AfEIplyZ6p7YqjTuTqmux+OOiABTgT5/ZmproeULn1
i44DdeGIZ19Qt+xstlaUuO2/1dKef5yMByO5UCwIAzXWoSqRIMj4bzshrZJwQ6v8
ktmYoQF1iZs/owLPpf7+zmqGznly8D8w02ByujxyNytf4N1XEnAo5uW1yMW/p0iP
Bvfol5saav/rs3Su9gtcW0ymFWOuKGBANzLGK2yLk2iTF3Hhh5fFoU/RqzID/PH2
ZU1yBtabHk8uDfNFODpDCc67gidx4tjA2s3t/MQ5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOxpPKlSFP8Mm00zXhKub8URhLyUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzg4M2Y1YjVmLWVlNTgtNDA0OC04Y2YyLTIyNGFmYjJhZWQxOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAELT/YNywaaTV5dQZM7wzt4DL0tm
rZ9zIf/nff72YxBdW7mh6o/MLEy09JDz5dV4/9liHDs+iCwKkfZFB18XqVZ0W+9v
IVwTFgRAdIas5g8/Ecd1qLT0T5lstAsH4xtQnTh6/6/cnRyJfLbGmEyR6/GLBYgD
j0GR3s1t4NpE1R2q2cgSBfPx8Dpw/SZn3ZrnG7R5GwiurTWfTDbgkEu8ToDCBh2O
cmpU6Pf/0bHcNyKpucJBUuPuiKPuzeg2uGprG4ddzJTH332Fy7xzewmrHJfTAaR0
imDyhN7+wPJj2PAMx7XPpeumchooo92tyVb4aAcm18rwelxaHGksfXiiPwA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:12:31 2025 by rpki-client