Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8a14554c-1996-4d93-a0ad-b93f19babe7a.roa
File: 8a14554c-1996-4d93-a0ad-b93f19babe7a.roa (raw, json)
Hash identifier: lhPAffE+wl+tLbEKEfOkp693QcUezCKbc6z0dHIAvlI=
Subject key identifier: 4B:1C:56:56:B9:C1:44:FA:6B:A5:9D:E4:35:A3:08:5A:8B:FD:D8:68
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0BCDFEC4ED092E70D96BB0601A806BFC7231163A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8a14554c-1996-4d93-a0ad-b93f19babe7a.roa
Signing time: Thu 25 Apr 2024 00:00:00 +0000
ROA not before: Thu 25 Apr 2024 00:00:00 +0000
ROA not after: Thu 30 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:cd:fe:c4:ed:09:2e:70:d9:6b:b0:60:1a:80:6b:fc:72:31:16:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 25 00:00:00 2024 GMT
Not After : May 30 23:59:59 2024 GMT
Subject: serialNumber=ca50907df6b8591f9b8a8d0c1b6c508e73798581524a52a16c549c3ae9c9f3b8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:f9:1a:a0:5b:96:db:4e:77:c6:96:ed:99:
84:21:b5:9e:dc:a2:f0:74:3f:d4:4d:d2:c3:4a:bb:
47:3e:4c:be:22:5a:5e:9f:1b:0b:c9:8c:c4:8e:65:
e8:14:e7:2e:e6:72:7f:cc:2e:28:80:69:f3:0e:27:
ee:23:bb:51:d6:50:39:f5:6b:2d:bc:51:4a:9f:72:
00:84:dd:f4:58:18:1c:62:9b:d6:ab:a0:d2:05:c9:
1a:63:93:03:8b:38:f5:f3:b4:5c:56:97:37:7d:8b:
01:df:e8:0a:a9:63:aa:6a:53:3b:a7:2d:72:12:4c:
a0:24:b5:de:09:2d:c7:5b:8d:07:f1:67:83:77:8b:
5e:01:4a:64:fc:0d:04:09:be:3a:17:6a:65:8a:fa:
69:9b:8a:75:69:4f:d0:d8:64:81:af:a6:12:5c:86:
7b:fa:32:a5:7f:44:1b:83:4b:ba:f1:66:66:65:2c:
1e:cf:5e:41:e0:84:7e:cc:c6:bd:0d:a0:3b:6c:1e:
28:72:91:17:7c:72:ca:d1:d5:b8:d5:fe:83:1d:85:
2c:02:44:51:23:59:fa:dd:48:3e:3c:02:d4:37:fc:
0f:0d:05:cb:31:b4:7e:d0:1c:96:58:b3:ac:d7:5e:
86:22:a0:0f:7b:1e:b0:04:ef:32:6e:4d:d7:5a:0e:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1C:56:56:B9:C1:44:FA:6B:A5:9D:E4:35:A3:08:5A:8B:FD:D8:68
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8a14554c-1996-4d93-a0ad-b93f19babe7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a7:04:13:78:02:11:67:c0:7f:b9:b9:18:0a:73:b4:60:c2:
b9:5b:e3:e8:0b:4f:27:50:6c:c2:52:35:31:c8:00:55:67:51:
13:08:ef:50:9b:de:51:60:e2:3d:f6:d6:55:7e:40:e8:9c:d5:
40:cd:4e:1d:85:23:0f:b2:4f:ae:21:98:9f:06:8f:48:eb:8b:
94:d3:8c:cc:b0:9a:2d:bb:b7:65:3d:0e:fb:a3:a8:25:92:30:
aa:c8:d7:f0:43:56:37:1d:ef:7f:7d:9a:26:37:d8:7d:16:32:
24:93:6b:c8:ae:c0:02:01:2a:d3:0f:ce:e4:a8:9e:8f:13:cf:
e5:93:0a:12:e6:8b:9c:c3:f5:5c:13:5c:63:64:da:f6:70:ee:
ca:60:8c:48:93:56:66:57:4b:9c:da:0b:08:a0:4e:2a:7f:ec:
ff:87:5f:9a:82:4a:34:e0:cb:ac:3c:d3:9c:37:e7:64:0a:0a:
95:4b:28:a9:e8:20:0a:99:e4:c7:3a:7b:9f:54:76:45:92:79:
30:f0:13:99:e2:71:e1:59:16:90:5e:94:db:f9:ea:74:4d:79:
0e:44:7b:e2:e1:6f:3b:38:d9:76:f4:75:44:94:75:44:99:4e:
d9:0d:cf:92:3a:cb:ab:8d:bf:ae:98:7d:15:1a:6b:f5:19:0e:
af:dc:ba:bc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUC83+xO0JLnDZa7BgGoBr/HIxFjowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNDI1MDAwMDAwWhcNMjQwNTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjYTUwOTA3ZGY2Yjg1OTFmOWI4YThkMGMxYjZjNTA4ZTcz
Nzk4NTgxNTI0YTUyYTE2YzU0OWMzYWU5YzlmM2I4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC63vkaoFuW2053xpbtmYQhtZ7covB0P9RN0sNKu0c+TL4i
Wl6fGwvJjMSOZegU5y7mcn/MLiiAafMOJ+4ju1HWUDn1ay28UUqfcgCE3fRYGBxi
m9aroNIFyRpjkwOLOPXztFxWlzd9iwHf6AqpY6pqUzunLXISTKAktd4JLcdbjQfx
Z4N3i14BSmT8DQQJvjoXamWK+mmbinVpT9DYZIGvphJchnv6MqV/RBuDS7rxZmZl
LB7PXkHghH7Mxr0NoDtsHihykRd8csrR1bjV/oMdhSwCRFEjWfrdSD48AtQ3/A8N
BcsxtH7QHJZYs6zXXoYioA97HrAE7zJuTddaDv6HAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSxxWVrnBRPprpZ3kNaMIWov92GgwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzhhMTQ1NTRjLTE5OTYtNGQ5My1hMGFkLWI5M2YxOWJhYmU3YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFqnBBN4AhFnwH+5uRgKc7Rgwrlb
4+gLTydQbMJSNTHIAFVnURMI71Cb3lFg4j321lV+QOic1UDNTh2FIw+yT64hmJ8G
j0jri5TTjMywmi27t2U9DvujqCWSMKrI1/BDVjcd7399miY32H0WMiSTa8iuwAIB
KtMPzuSono8Tz+WTChLmi5zD9VwTXGNk2vZw7spgjEiTVmZXS5zaCwigTip/7P+H
X5qCSjTgy6w805w352QKCpVLKKnoIAqZ5Mc6e59UdkWSeTDwE5niceFZFpBelNv5
6nRNeQ5Ee+Lhbzs42Xb0dUSUdUSZTtkNz5I6y6uNv66YfRUaa/UZDq/curw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:20:20 2025 by rpki-client