Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93aa6800-d17a-4dc8-8b4a-07f187522c21.roa
File: 93aa6800-d17a-4dc8-8b4a-07f187522c21.roa (raw, json)
Hash identifier: 3UtqWGyscVsCtomB6wdDXtOtH/Y4e1xpTohwEawyGMA=
Subject key identifier: 66:4A:78:02:D6:9F:64:07:61:52:BF:12:9A:9A:BD:AD:F0:7E:82:BE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6102452C827243363A6CEC585EEFA0795A3C29EF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93aa6800-d17a-4dc8-8b4a-07f187522c21.roa
Signing time: Sun 02 Jun 2024 00:00:00 +0000
ROA not before: Sun 02 Jun 2024 00:00:00 +0000
ROA not after: Sun 07 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:02:45:2c:82:72:43:36:3a:6c:ec:58:5e:ef:a0:79:5a:3c:29:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 2 00:00:00 2024 GMT
Not After : Jul 7 23:59:59 2024 GMT
Subject: serialNumber=5db4d35aff4aef26e8a4bd24feca0460db4cecc317814e2a61e7b741dfcdba59, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:01:c3:5f:2d:13:b2:33:59:a1:b1:76:22:
dd:d5:20:2a:75:24:b0:2d:eb:13:0c:23:7e:5b:86:
5b:ef:39:7e:2c:84:e5:a1:ee:09:a1:bc:0e:93:d9:
8e:2b:4e:fe:e4:45:73:8a:73:8e:61:c7:f4:c4:75:
b1:16:8d:34:21:f8:38:01:cc:ed:d7:7e:73:b6:89:
a9:1e:47:d5:d9:0f:10:f8:ff:56:34:78:ef:6a:34:
b1:21:d1:68:f9:61:ca:fd:4f:7e:a2:59:6f:a3:f6:
c3:d6:cd:26:f4:39:bd:5a:3c:2b:4a:7e:7f:1b:31:
14:74:ef:18:76:bd:2e:02:59:65:3d:c0:5f:fc:f1:
b0:21:59:7f:36:5b:0c:0a:73:23:16:7a:7a:a9:fd:
fd:08:49:01:96:d6:91:74:10:ca:8a:9b:29:b9:5d:
be:34:c7:66:6d:95:a4:b5:09:3b:60:10:0d:dc:61:
0d:ab:5a:e8:05:eb:6f:1f:f5:b2:92:2a:0b:8f:6a:
e5:a3:f5:93:44:16:ca:f1:03:5a:be:69:9e:8a:ba:
33:85:78:15:d2:62:01:52:30:81:b1:17:74:a7:8b:
50:50:ca:56:dc:5a:c1:da:87:47:9e:5c:3b:29:fe:
3a:c8:62:9b:9a:6a:40:16:60:cc:48:46:87:b2:c9:
df:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4A:78:02:D6:9F:64:07:61:52:BF:12:9A:9A:BD:AD:F0:7E:82:BE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93aa6800-d17a-4dc8-8b4a-07f187522c21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:fa:6e:82:18:6b:f9:fe:7f:3b:68:3e:d9:fb:c5:d1:a3:0a:
19:a3:ac:5a:aa:c9:84:18:84:1f:ce:32:e1:ac:52:f3:76:80:
ed:fa:d1:79:24:72:69:f5:f6:93:aa:1a:c6:2c:2c:f3:63:aa:
79:36:6e:b3:f8:c6:63:d1:4d:38:8f:ee:bb:d7:8a:35:b4:be:
6b:12:45:96:c8:65:84:7a:e6:e5:8f:01:44:48:40:ae:5a:d2:
64:d7:f7:82:64:8d:1a:a9:13:57:ff:68:6f:61:8a:85:3a:60:
1f:3d:1d:ae:3b:77:42:62:57:f9:7b:80:e1:4f:0d:15:7c:9c:
e5:61:bd:f5:11:03:85:03:0e:5b:ce:dd:cb:db:7c:45:c9:e4:
47:fb:4a:42:8e:d7:76:bc:50:c3:1f:54:42:8c:e5:d2:63:5b:
b4:aa:0b:34:e2:06:a9:15:5e:69:d3:72:99:1b:bc:7b:07:f9:
b1:38:18:6e:3e:e4:af:73:42:72:03:b7:4c:95:b8:55:18:62:
e8:de:1e:71:6f:e0:f1:90:c9:a5:a0:43:01:98:1b:7b:b2:96:
cb:bf:37:4c:64:13:06:02:ae:e5:6a:d1:0b:64:88:1e:43:2c:
d1:db:a8:a9:12:92:bb:33:ca:9e:8d:88:11:2a:9f:53:ea:05:
7a:33:e1:6a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYQJFLIJyQzY6bOxYXu+geVo8Ke8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNjAyMDAwMDAwWhcNMjQwNzA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZGI0ZDM1YWZmNGFlZjI2ZThhNGJkMjRmZWNhMDQ2MGRi
NGNlY2MzMTc4MTRlMmE2MWU3Yjc0MWRmY2RiYTU5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjnAHDXy0TsjNZobF2It3VICp1JLAt6xMMI35bhlvvOX4s
hOWh7gmhvA6T2Y4rTv7kRXOKc45hx/TEdbEWjTQh+DgBzO3XfnO2iakeR9XZDxD4
/1Y0eO9qNLEh0Wj5Ycr9T36iWW+j9sPWzSb0Ob1aPCtKfn8bMRR07xh2vS4CWWU9
wF/88bAhWX82WwwKcyMWenqp/f0ISQGW1pF0EMqKmym5Xb40x2ZtlaS1CTtgEA3c
YQ2rWugF628f9bKSKguPauWj9ZNEFsrxA1q+aZ6KujOFeBXSYgFSMIGxF3Sni1BQ
ylbcWsHah0eeXDsp/jrIYpuaakAWYMxIRoeyyd+rAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZkp4AtafZAdhUr8Smpq9rfB+gr4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzkzYWE2ODAwLWQxN2EtNGRjOC04YjRhLTA3ZjE4NzUyMmMyMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAC36boIYa/n+fztoPtn7xdGjChmj
rFqqyYQYhB/OMuGsUvN2gO360Xkkcmn19pOqGsYsLPNjqnk2brP4xmPRTTiP7rvX
ijW0vmsSRZbIZYR65uWPAURIQK5a0mTX94JkjRqpE1f/aG9hioU6YB89Ha47d0Ji
V/l7gOFPDRV8nOVhvfURA4UDDlvO3cvbfEXJ5Ef7SkKO13a8UMMfVEKM5dJjW7Sq
CzTiBqkVXmnTcpkbvHsH+bE4GG4+5K9zQnIDt0yVuFUYYujeHnFv4PGQyaWgQwGY
G3uylsu/N0xkEwYCruVq0QtkiB5DLNHbqKkSkrszyp6NiBEqn1PqBXoz4Wo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:04:57 2025 by rpki-client