Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9ad23ecd-b255-4d7a-9f62-d624d9406a1b.roa
File: 9ad23ecd-b255-4d7a-9f62-d624d9406a1b.roa (raw, json)
Hash identifier: rkQ5b9m4xkWfHzbLEPHUt7ez/66GLyY3H9Q6SXSADM8=
Subject key identifier: 9D:53:65:8B:6F:D1:C6:DD:D2:A3:47:40:D6:63:71:D2:94:5A:2F:F6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1728FE2949035DFC16481CDFC286AB8798B8C1FC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9ad23ecd-b255-4d7a-9f62-d624d9406a1b.roa
Signing time: Sun 13 Aug 2023 00:00:00 +0000
ROA not before: Sun 13 Aug 2023 00:00:00 +0000
ROA not after: Sun 17 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:28:fe:29:49:03:5d:fc:16:48:1c:df:c2:86:ab:87:98:b8:c1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 13 00:00:00 2023 GMT
Not After : Sep 17 23:59:59 2023 GMT
Subject: serialNumber=170bf5b17aa6aeed2c3a86c5cea827c2a132cfefc829636ee013acc1636f6ea1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:2d:6d:4c:6a:08:c9:12:57:64:b1:68:d0:
9a:16:de:7f:a1:74:ab:a7:30:cc:ce:c2:e8:0a:16:
a6:55:29:e7:78:c9:15:18:4e:22:4b:e9:a2:b9:f4:
07:c1:8f:24:d2:e0:90:e8:c6:b4:7e:5b:9a:87:d6:
fc:85:85:c1:8b:1b:21:37:d0:af:43:17:c2:49:02:
77:fe:01:bf:15:95:f3:79:73:9d:07:74:8a:f8:d4:
1a:28:90:17:a9:76:71:b0:96:7b:1c:9e:f8:6b:03:
75:4c:a1:19:66:ca:2d:dc:21:83:58:8a:ba:22:17:
f5:b6:6c:81:f7:da:02:f1:08:1c:36:85:f5:54:bb:
12:92:dc:38:49:d5:8a:27:d2:50:95:11:6c:05:d6:
22:79:db:c7:8c:c7:0b:d5:fc:33:f9:6f:49:5c:a6:
65:cb:d8:13:fb:50:65:a5:03:40:4b:0a:15:1e:8f:
2e:f3:d6:f5:79:99:6a:23:a5:e5:c2:cc:23:d0:dd:
ac:f7:ed:96:ce:b2:2f:3a:4d:72:83:80:94:49:2f:
80:74:b7:f9:ac:76:69:ee:e3:71:0b:55:13:57:f0:
e7:f8:85:38:38:db:c2:f3:45:b1:ac:96:5b:87:fb:
d7:41:23:63:35:20:ba:b5:6c:53:4e:65:77:11:69:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:53:65:8B:6F:D1:C6:DD:D2:A3:47:40:D6:63:71:D2:94:5A:2F:F6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9ad23ecd-b255-4d7a-9f62-d624d9406a1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:33:b7:eb:c3:cf:b7:45:62:73:49:d9:ca:33:2c:91:55:92:
02:18:58:b3:f9:6a:9a:bc:9b:b0:87:4b:b3:4f:71:04:45:5b:
a2:db:fc:b0:5f:78:aa:7d:7c:6b:bd:f4:45:5d:a8:d1:5d:57:
35:d6:fc:e0:cd:29:36:15:6c:86:83:13:7a:11:94:93:8a:ee:
74:59:cd:28:be:73:cd:5f:e3:8a:91:c2:0a:38:ad:74:b5:aa:
ef:45:7e:40:d6:cf:71:93:01:70:a8:60:2c:59:3e:5c:24:dc:
fb:4b:5f:4c:a0:b8:12:1a:71:83:b9:0a:38:41:ee:c3:e2:05:
47:5a:a8:c5:65:e9:93:5c:d2:76:6e:ed:1f:5c:0e:f7:a3:01:
a4:f6:fd:b0:d9:1f:49:9b:51:e2:6b:f8:8a:fc:de:30:b8:d7:
38:bb:e6:d7:b4:d0:8b:34:2b:20:aa:e1:8a:59:60:6c:0d:73:
bd:19:48:3d:0c:80:b4:7a:e3:14:e4:8a:3f:89:ce:6d:f3:6e:
e9:67:16:6d:d8:04:76:28:30:56:3b:fb:18:73:3a:a4:a4:db:
80:c8:4e:0b:0a:63:89:46:71:68:7e:e0:3e:fa:4c:67:9b:4b:
77:cd:ac:e5:ec:e9:0f:7f:b7:8e:6e:03:4c:d8:65:36:81:81:
4c:75:78:e2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFyj+KUkDXfwWSBzfwoarh5i4wfwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODEzMDAwMDAwWhcNMjMwOTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNzBiZjViMTdhYTZhZWVkMmMzYTg2YzVjZWE4MjdjMmEx
MzJjZmVmYzgyOTYzNmVlMDEzYWNjMTYzNmY2ZWExMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzuy1tTGoIyRJXZLFo0JoW3n+hdKunMMzOwugKFqZVKed4
yRUYTiJL6aK59AfBjyTS4JDoxrR+W5qH1vyFhcGLGyE30K9DF8JJAnf+Ab8VlfN5
c50HdIr41BookBepdnGwlnscnvhrA3VMoRlmyi3cIYNYiroiF/W2bIH32gLxCBw2
hfVUuxKS3DhJ1Yon0lCVEWwF1iJ528eMxwvV/DP5b0lcpmXL2BP7UGWlA0BLChUe
jy7z1vV5mWojpeXCzCPQ3az37ZbOsi86TXKDgJRJL4B0t/msdmnu43ELVRNX8Of4
hTg428LzRbGslluH+9dBI2M1ILq1bFNOZXcRadgRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnVNli2/Rxt3So0dA1mNx0pRaL/YwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzlhZDIzZWNkLWIyNTUtNGQ3YS05ZjYyLWQ2MjRkOTQwNmExYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACozt+vDz7dFYnNJ2cozLJFVkgIY
WLP5apq8m7CHS7NPcQRFW6Lb/LBfeKp9fGu99EVdqNFdVzXW/ODNKTYVbIaDE3oR
lJOK7nRZzSi+c81f44qRwgo4rXS1qu9FfkDWz3GTAXCoYCxZPlwk3PtLX0yguBIa
cYO5CjhB7sPiBUdaqMVl6ZNc0nZu7R9cDvejAaT2/bDZH0mbUeJr+Ir83jC41zi7
5te00Is0KyCq4YpZYGwNc70ZSD0MgLR64xTkij+Jzm3zbulnFm3YBHYoMFY7+xhz
OqSk24DITgsKY4lGcWh+4D76TGebS3fNrOXs6Q9/t45uA0zYZTaBgUx1eOI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:06 2025 by rpki-client