Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/94671f6f-00c7-4645-a19b-033bb5fac3de.roa
File: 94671f6f-00c7-4645-a19b-033bb5fac3de.roa (raw, json)
Hash identifier: V4KLLKdjPtc6SAVDKoTPN4ukLQMArcdMT17l6VjVpgM=
Subject key identifier: 2A:B3:5F:C5:E9:26:A9:58:86:C4:0F:CA:FD:AF:4C:54:EB:C9:AE:D6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0F427E7BE448FD006E69CC7653F6CBA0FC7A21C6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/94671f6f-00c7-4645-a19b-033bb5fac3de.roa
Signing time: Sat 03 May 2025 06:08:17 +0000
ROA not before: Sat 03 May 2025 06:08:17 +0000
ROA not after: Sat 07 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:42:7e:7b:e4:48:fd:00:6e:69:cc:76:53:f6:cb:a0:fc:7a:21:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 3 06:08:17 2025 GMT
Not After : Jun 7 23:59:59 2025 GMT
Subject: serialNumber=fa408478d4cdf95bbd4fad6e063f7fa7e59a9bfd112ffcf551cb5893e07acfd3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:d4:14:ed:76:fa:0d:76:9b:49:5f:3e:da:
90:73:75:1a:5d:2c:cf:55:8c:8e:cd:23:8c:c9:8e:
ae:42:bf:c1:db:f9:1f:b4:16:3e:35:ca:01:b8:f6:
67:f6:23:e0:e7:9b:5c:58:80:18:55:92:5b:fa:6f:
45:63:7b:0f:bd:09:94:46:14:10:39:da:8e:72:02:
47:a3:a5:18:b6:70:1f:19:a8:09:b7:8d:10:51:95:
22:7d:e1:70:37:20:18:0c:01:78:ed:e6:8a:4d:85:
0b:b9:6e:04:f1:78:85:d4:47:f2:34:b1:1e:6d:89:
ba:c1:fe:b7:c7:d3:28:82:2c:e5:d0:fb:11:33:2e:
b6:8a:e5:b3:b7:03:66:76:37:29:c2:ec:c6:6b:be:
fc:c3:c7:f2:54:a2:1c:9c:ba:5a:69:94:71:32:ff:
5b:60:a0:62:4c:c9:26:b8:bf:b0:7b:dd:56:63:2c:
3a:45:35:2b:b7:0e:d0:2a:ac:14:4f:15:02:c7:ca:
56:3b:50:b6:f9:60:bd:d3:1b:e5:a1:c1:1c:89:e6:
29:3c:9a:d4:30:e5:bb:91:c5:62:21:90:b6:3a:db:
c6:ba:df:17:2b:97:11:1c:60:1f:9a:bb:07:c7:af:
04:ab:ee:54:a8:f8:c3:62:7e:0d:04:56:d7:b0:05:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B3:5F:C5:E9:26:A9:58:86:C4:0F:CA:FD:AF:4C:54:EB:C9:AE:D6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/94671f6f-00c7-4645-a19b-033bb5fac3de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
07:0e:fc:19:b3:db:3a:51:48:9d:77:84:59:82:46:c3:b8:a9:
ba:9c:63:04:12:a9:7d:f9:35:95:a7:40:48:bc:3e:21:4e:da:
58:3e:8a:c1:7c:61:e5:65:fb:34:ca:96:46:ac:2c:eb:33:e1:
8c:b1:f0:ff:98:55:32:0e:9d:fc:d9:24:e9:1e:62:02:54:95:
29:46:51:61:ac:53:bc:33:a7:65:49:80:3a:33:3d:16:03:cb:
a4:e1:61:2b:be:08:8e:a9:a6:e1:7a:3c:97:52:d4:a0:10:b4:
c7:0c:37:37:a6:59:bc:ec:a0:a5:ca:61:fb:dd:ea:cc:9b:95:
bc:74:c6:31:1f:e8:86:c5:06:a0:04:62:6c:52:ce:d1:e8:92:
8b:33:2b:fb:7f:4a:77:77:7a:44:a0:00:84:31:ad:28:b6:7f:
a4:c0:d3:ba:c7:c8:ab:91:af:33:ca:c5:1d:51:09:6b:ad:01:
d5:5e:78:54:17:a4:df:95:1e:c4:fb:1c:30:1b:fa:fe:21:80:
18:11:33:b4:96:fd:af:28:3a:78:33:99:eb:54:7d:1a:80:b8:
4a:e3:12:15:ad:1e:a2:e6:3d:26:1d:2d:da:a7:af:6e:25:4e:
e1:cc:86:29:1a:ec:6a:70:86:70:d7:25:b0:68:b9:a0:d0:86:
07:29:79:9d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUD0J+e+RI/QBuacx2U/bLoPx6IcYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNTAzMDYwODE3WhcNMjUwNjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BmYTQwODQ3OGQ0Y2RmOTViYmQ0ZmFkNmUwNjNmN2ZhN2U1
OWE5YmZkMTEyZmZjZjU1MWNiNTg5M2UwN2FjZmQzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8ItQU7Xb6DXabSV8+2pBzdRpdLM9VjI7NI4zJjq5Cv8Hb
+R+0Fj41ygG49mf2I+Dnm1xYgBhVklv6b0Vjew+9CZRGFBA52o5yAkejpRi2cB8Z
qAm3jRBRlSJ94XA3IBgMAXjt5opNhQu5bgTxeIXUR/I0sR5tibrB/rfH0yiCLOXQ
+xEzLraK5bO3A2Z2NynC7MZrvvzDx/JUohyculpplHEy/1tgoGJMySa4v7B73VZj
LDpFNSu3DtAqrBRPFQLHylY7ULb5YL3TG+WhwRyJ5ik8mtQw5buRxWIhkLY628a6
3xcrlxEcYB+auwfHrwSr7lSo+MNifg0EVtewBVPBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKrNfxekmqViGxA/K/a9MVOvJrtYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzk0NjcxZjZmLTAwYzctNDY0NS1hMTliLTAzM2JiNWZhYzNkZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAcO/Bmz2zpRSJ13hFmCRsO4qbqc
YwQSqX35NZWnQEi8PiFO2lg+isF8YeVl+zTKlkasLOsz4Yyx8P+YVTIOnfzZJOke
YgJUlSlGUWGsU7wzp2VJgDozPRYDy6ThYSu+CI6ppuF6PJdS1KAQtMcMNzemWbzs
oKXKYfvd6syblbx0xjEf6IbFBqAEYmxSztHokoszK/t/Snd3ekSgAIQxrSi2f6TA
07rHyKuRrzPKxR1RCWutAdVeeFQXpN+VHsT7HDAb+v4hgBgRM7SW/a8oOngzmetU
fRqAuErjEhWtHqLmPSYdLdqnr24lTuHMhika7GpwhnDXJbBouaDQhgcpeZ0=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:36:59 2025 by rpki-client