Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b4326bd-e500-4771-b6b0-a68c977b47d9.roa
File: 8b4326bd-e500-4771-b6b0-a68c977b47d9.roa (raw, json)
Hash identifier: s70tXWK7k0oq2p/P+K0A1Mu0txdGk1xqQSEMGOJGPZs=
Subject key identifier: B4:2D:00:28:2C:19:02:9E:1A:E5:03:B6:DF:15:80:AA:86:8F:57:6E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 630C03DF74EBFE5CF86264044FE8FA417D09DC95
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b4326bd-e500-4771-b6b0-a68c977b47d9.roa
Signing time: Sun 17 Dec 2023 00:00:00 +0000
ROA not before: Sun 17 Dec 2023 00:00:00 +0000
ROA not after: Sun 21 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0c:03:df:74:eb:fe:5c:f8:62:64:04:4f:e8:fa:41:7d:09:dc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 17 00:00:00 2023 GMT
Not After : Jan 21 23:59:59 2024 GMT
Subject: serialNumber=adb9e3e2ae66105a93242d79b31ef1c91954446d67e9e2602a4c332bc8430eb2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:2b:74:93:80:f7:29:8a:19:ad:c3:26:23:
0b:8f:c7:08:ef:44:14:34:6b:e1:90:fc:01:4b:79:
27:16:8a:7e:f0:26:71:b6:1d:04:0c:e7:c4:65:9c:
b8:81:56:35:e5:09:b8:2a:1e:f9:79:f3:e4:f2:f8:
b9:87:1b:74:dd:87:01:5d:63:20:e0:b9:f6:9c:d4:
d0:5f:38:60:a8:d7:bb:d2:c0:49:9d:71:85:82:a2:
d9:17:22:ec:99:bb:49:63:9c:06:04:44:20:67:56:
e7:15:46:50:1a:9b:2a:97:d1:b0:8e:53:c8:cd:5e:
0d:77:dd:1c:5d:2c:03:9a:a8:6b:39:aa:22:41:15:
ec:da:6b:fb:66:69:4b:06:0d:ab:da:c4:0a:66:33:
3d:a0:59:4d:42:b6:fb:1d:07:f9:7f:e2:46:f2:27:
c4:a7:14:6b:af:cb:f4:7c:9b:7e:87:ca:0f:69:ea:
4f:d9:7b:03:76:b4:b4:e5:30:d6:68:39:67:96:fc:
a2:ca:80:f9:dd:8d:0c:f8:55:f7:1a:76:92:b1:0a:
9d:30:e5:2c:94:03:2a:3f:16:1d:9e:f6:1d:56:e6:
7a:c8:b2:9a:5d:a7:e3:94:a0:fd:0a:1a:2c:bd:ef:
f2:25:21:73:46:94:22:49:bf:06:d0:e2:c8:d9:53:
ee:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2D:00:28:2C:19:02:9E:1A:E5:03:B6:DF:15:80:AA:86:8F:57:6E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b4326bd-e500-4771-b6b0-a68c977b47d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
56:0d:a4:dc:b1:c5:1a:86:c3:55:53:7a:6e:fe:a3:42:2c:7e:
22:dc:1d:6c:40:dc:05:65:b2:07:75:ef:15:d5:e7:fd:38:61:
3a:7e:c5:33:52:78:d2:f4:40:90:53:36:42:8b:a1:6a:52:a0:
15:0b:ba:19:f6:4e:2f:22:d0:61:b6:d6:d0:f2:e8:38:dd:91:
20:64:91:b2:f1:1f:26:4f:0b:fb:d3:0a:cd:3d:df:ce:2e:b5:
e7:77:16:92:32:a3:a1:02:30:dc:b6:ab:7a:cf:a7:4f:59:f8:
74:f9:3d:a5:69:54:e0:ca:40:0c:c8:22:fa:ca:15:ea:9c:56:
25:82:59:1e:ad:39:67:f5:ed:a1:d8:5a:41:03:4e:af:df:f6:
60:6f:a1:98:7b:de:dd:51:31:ed:28:5b:2b:22:c5:c0:57:3d:
b5:9a:f3:00:f6:e8:b9:9e:5c:f6:05:7e:cd:33:38:2a:dd:72:
22:03:7c:75:79:dc:e5:5a:e1:c7:fe:6f:53:1a:10:5f:1b:20:
ee:28:01:af:bc:a1:38:e6:84:bb:68:18:7e:55:2f:90:48:9a:
4e:94:ac:52:37:85:11:78:ae:21:7a:41:05:df:47:62:95:96:
62:dd:da:03:b3:f7:78:46:53:4d:ea:b7:2f:dd:42:11:0e:3a:
d4:d4:4d:cb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYwwD33Tr/lz4YmQET+j6QX0J3JUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjE3MDAwMDAwWhcNMjQwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BhZGI5ZTNlMmFlNjYxMDVhOTMyNDJkNzliMzFlZjFjOTE5
NTQ0NDZkNjdlOWUyNjAyYTRjMzMyYmM4NDMwZWIyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClsCt0k4D3KYoZrcMmIwuPxwjvRBQ0a+GQ/AFLeScWin7w
JnG2HQQM58RlnLiBVjXlCbgqHvl58+Ty+LmHG3TdhwFdYyDgufac1NBfOGCo17vS
wEmdcYWCotkXIuyZu0ljnAYERCBnVucVRlAamyqX0bCOU8jNXg133RxdLAOaqGs5
qiJBFezaa/tmaUsGDavaxApmMz2gWU1CtvsdB/l/4kbyJ8SnFGuvy/R8m36Hyg9p
6k/ZewN2tLTlMNZoOWeW/KLKgPndjQz4VfcadpKxCp0w5SyUAyo/Fh2e9h1W5nrI
sppdp+OUoP0KGiy97/IlIXNGlCJJvwbQ4sjZU+7dAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtC0AKCwZAp4a5QO23xWAqoaPV24wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzhiNDMyNmJkLWU1MDAtNDc3MS1iNmIwLWE2OGM5NzdiNDdkOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFYNpNyxxRqGw1VTem7+o0IsfiLc
HWxA3AVlsgd17xXV5/04YTp+xTNSeNL0QJBTNkKLoWpSoBULuhn2Ti8i0GG21tDy
6DjdkSBkkbLxHyZPC/vTCs09384uted3FpIyo6ECMNy2q3rPp09Z+HT5PaVpVODK
QAzIIvrKFeqcViWCWR6tOWf17aHYWkEDTq/f9mBvoZh73t1RMe0oWysixcBXPbWa
8wD26LmeXPYFfs0zOCrdciIDfHV53OVa4cf+b1MaEF8bIO4oAa+8oTjmhLtoGH5V
L5BImk6UrFI3hRF4riF6QQXfR2KVlmLd2gOz93hGU03qty/dQhEOOtTUTcs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:02:46 2025 by rpki-client