Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8c38d2e8-ae7c-419a-a8b7-1be645317bb2.roa
File: 8c38d2e8-ae7c-419a-a8b7-1be645317bb2.roa (raw, json)
Hash identifier: OmuIep9bEykxI5fiSn3U2sVOb8lJcvrq5BKCYf6bYow=
Subject key identifier: F8:79:9A:E0:BE:2C:96:37:8E:73:EE:8E:C1:2D:D5:8E:21:C7:3B:2F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 30E4301DD5077AB3152E36CE8429A5F664BA49CD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8c38d2e8-ae7c-419a-a8b7-1be645317bb2.roa
Signing time: Sun 07 Jan 2024 00:00:00 +0000
ROA not before: Sun 07 Jan 2024 00:00:00 +0000
ROA not after: Sun 11 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e4:30:1d:d5:07:7a:b3:15:2e:36:ce:84:29:a5:f6:64:ba:49:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 7 00:00:00 2024 GMT
Not After : Feb 11 23:59:59 2024 GMT
Subject: serialNumber=fd25e3c39cd6c7af9b0fde29eb169ed2bcbb3f2b3000e6c92bc4f0667454e028, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:4e:f1:0e:03:d2:24:3d:55:8e:da:39:ca:
17:e6:96:53:4f:1e:2f:ad:b1:b9:5a:30:e5:8b:42:
fd:e2:12:6b:63:87:f9:1d:54:1c:af:a3:29:56:b7:
86:ce:7c:c7:85:78:e0:54:19:63:9e:bd:d9:9f:f2:
c1:89:c9:66:0d:c2:85:1b:6e:90:e5:b1:8d:1e:a5:
6b:8e:18:fa:d8:c9:cf:c9:17:07:53:9a:dd:3d:23:
21:b5:60:aa:d7:85:46:bd:6e:c4:2a:5b:6d:f1:95:
40:00:88:4f:49:0c:3e:ef:b9:f1:a4:10:9a:c2:f9:
cb:4d:4d:b1:d5:87:da:e3:46:4f:21:06:86:b7:25:
10:8c:46:05:c7:06:b5:64:dd:83:00:5a:35:c5:d8:
eb:2f:1f:bc:d3:51:64:c4:f1:9d:b7:e2:96:84:89:
b4:0d:62:d1:4e:ec:81:64:fa:6f:3c:b2:c8:89:c7:
f1:ad:2c:e4:ce:f9:01:48:42:11:24:39:74:00:e4:
ee:59:26:72:35:0f:c6:fc:53:03:eb:d3:52:94:fe:
33:3a:70:13:20:1c:81:35:3a:06:71:3b:22:aa:64:
66:1a:20:c6:98:06:61:cd:b3:b6:4d:b6:90:dd:97:
a0:bb:a3:39:26:00:4a:17:7a:32:20:49:b6:f4:67:
18:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:79:9A:E0:BE:2C:96:37:8E:73:EE:8E:C1:2D:D5:8E:21:C7:3B:2F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8c38d2e8-ae7c-419a-a8b7-1be645317bb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f1:9a:04:1f:0d:90:0c:0b:6a:4d:19:fc:13:f2:e2:f5:33:
dc:5a:0d:6a:a2:57:82:c5:e1:90:aa:58:7d:76:79:0d:73:b0:
fc:a2:7f:6c:fa:aa:db:5c:ae:b6:c6:f4:47:2b:b9:2c:77:4b:
a3:7b:59:8c:32:14:22:b6:68:71:9a:9a:af:f7:da:b7:f3:33:
d2:20:e6:2a:b4:5e:24:1a:42:ca:1e:65:f5:61:5f:e4:28:7d:
47:b7:c9:23:81:1f:dd:6c:62:ff:cb:17:59:61:1d:e1:b3:13:
c5:d2:16:67:a9:df:50:85:28:d1:b2:b3:d2:fa:cb:c0:61:de:
55:d5:a4:d2:ff:91:22:10:ea:3c:dc:51:e3:f9:4e:f9:43:54:
1d:0e:2f:33:bc:f6:22:53:49:63:d4:f4:d2:22:f4:d2:0c:55:
99:ff:68:2d:cf:b4:88:d2:aa:68:a6:a9:1a:66:61:f5:d2:3c:
55:4b:11:b5:7b:9b:b6:4a:99:19:4a:f5:b1:1d:b0:1b:d2:b6:
3d:54:e5:c2:26:cf:7e:9d:af:23:4b:b0:58:f4:6f:b1:a4:1c:
c5:77:ce:69:ca:6c:86:34:fe:af:5c:ea:5a:5d:3f:49:c3:2e:
36:53:1e:7a:a8:6b:27:4b:07:db:e1:16:e5:77:09:69:ec:eb:
3a:aa:89:6a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMOQwHdUHerMVLjbOhCml9mS6Sc0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMTA3MDAwMDAwWhcNMjQwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0BmZDI1ZTNjMzljZDZjN2FmOWIwZmRlMjllYjE2OWVkMmJj
YmIzZjJiMzAwMGU2YzkyYmM0ZjA2Njc0NTRlMDI4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUBU7xDgPSJD1Vjto5yhfmllNPHi+tsblaMOWLQv3iEmtj
h/kdVByvoylWt4bOfMeFeOBUGWOevdmf8sGJyWYNwoUbbpDlsY0epWuOGPrYyc/J
FwdTmt09IyG1YKrXhUa9bsQqW23xlUAAiE9JDD7vufGkEJrC+ctNTbHVh9rjRk8h
Boa3JRCMRgXHBrVk3YMAWjXF2OsvH7zTUWTE8Z234paEibQNYtFO7IFk+m88ssiJ
x/GtLOTO+QFIQhEkOXQA5O5ZJnI1D8b8UwPr01KU/jM6cBMgHIE1OgZxOyKqZGYa
IMaYBmHNs7ZNtpDdl6C7ozkmAEoXejIgSbb0ZxjVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+Hma4L4sljeOc+6OwS3VjiHHOy8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzhjMzhkMmU4LWFlN2MtNDE5YS1hOGI3LTFiZTY0NTMxN2JiMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAjxmgQfDZAMC2pNGfwT8uL1M9xa
DWqiV4LF4ZCqWH12eQ1zsPyif2z6qttcrrbG9EcruSx3S6N7WYwyFCK2aHGamq/3
2rfzM9Ig5iq0XiQaQsoeZfVhX+QofUe3ySOBH91sYv/LF1lhHeGzE8XSFmep31CF
KNGys9L6y8Bh3lXVpNL/kSIQ6jzcUeP5TvlDVB0OLzO89iJTSWPU9NIi9NIMVZn/
aC3PtIjSqmimqRpmYfXSPFVLEbV7m7ZKmRlK9bEdsBvStj1U5cImz36dryNLsFj0
b7GkHMV3zmnKbIY0/q9c6lpdP0nDLjZTHnqoaydLB9vhFuV3CWns6zqqiWo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:29:01 2025 by rpki-client