Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9ada0c9c-4a4f-4ffb-b221-961e9dfa4f34.roa
File: 9ada0c9c-4a4f-4ffb-b221-961e9dfa4f34.roa (raw, json)
Hash identifier: DY+FJRC2bbu8LChIj0JES2JFbtG94Ic9kvGG6zTRipw=
Subject key identifier: D7:92:CF:95:C3:5A:A2:C8:CB:11:9E:B4:97:EA:78:BF:6E:5F:BA:11
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 04191570EC6D1F7C896227A9AE62B2996AB8FC38
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9ada0c9c-4a4f-4ffb-b221-961e9dfa4f34.roa
Signing time: Tue 06 Aug 2024 00:00:00 +0000
ROA not before: Tue 06 Aug 2024 00:00:00 +0000
ROA not after: Tue 10 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:19:15:70:ec:6d:1f:7c:89:62:27:a9:ae:62:b2:99:6a:b8:fc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 6 00:00:00 2024 GMT
Not After : Sep 10 23:59:59 2024 GMT
Subject: serialNumber=e99a7c63da930523aa16fb6c4f8cd94c54bec1f57d1879acc9d5c2d2fab6c74c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:be:b1:2a:0f:f0:99:b8:ce:e1:c9:4e:4c:
ca:64:e1:ac:05:ec:69:54:25:07:f0:0b:2c:85:32:
38:02:b8:48:91:96:cc:fa:bf:f8:41:90:f3:02:0f:
d5:de:66:96:e0:15:c1:cc:b1:d3:89:3f:fd:70:54:
72:51:aa:e9:e0:f1:1c:07:3a:2e:55:a9:f9:28:1f:
5a:2a:08:33:5b:b0:6a:c3:8b:b6:32:10:9c:65:34:
8a:61:5c:0c:b3:6c:17:25:11:76:53:53:bf:25:45:
16:65:7f:16:1f:2a:fd:4f:61:a2:ec:c2:f4:45:ea:
af:e1:35:5c:8c:63:cf:90:5c:d3:c8:37:91:af:cc:
21:4c:e2:32:ac:53:6a:53:23:0b:55:92:c1:1d:34:
96:9b:93:ce:e9:c0:60:08:20:18:ca:eb:8a:68:c4:
f1:90:21:7c:74:0f:6a:de:67:37:a3:7a:6f:89:74:
c5:8b:1c:a8:51:3a:59:69:5c:80:e2:4b:fd:37:84:
f3:bc:e7:90:35:99:3e:be:d2:2e:cf:c8:90:1f:44:
b8:0d:a0:6d:90:eb:39:15:a9:76:fb:06:e5:90:16:
73:93:db:31:8e:24:bb:9c:0f:8c:30:7e:8f:db:4c:
b4:02:b3:5d:da:39:87:02:81:2b:34:e6:ca:9b:d8:
37:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:92:CF:95:C3:5A:A2:C8:CB:11:9E:B4:97:EA:78:BF:6E:5F:BA:11
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9ada0c9c-4a4f-4ffb-b221-961e9dfa4f34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
73:02:45:fb:a1:11:22:21:bf:ad:85:4d:8b:fd:85:d6:55:95:
72:8f:c8:b6:11:2a:9b:f0:94:28:43:74:e4:04:18:f5:1c:e8:
17:88:d7:3a:bb:9b:80:6e:45:77:29:59:a7:b8:d9:bb:19:97:
76:6f:bc:37:44:a9:af:2c:96:2b:0f:8a:c7:cc:5d:52:29:7a:
39:4f:cc:ae:a1:02:8c:df:58:61:e0:c1:15:fd:4c:a4:f7:3a:
b2:74:f1:6f:f0:d6:8d:a2:b1:88:2e:69:94:ff:65:5b:bc:e8:
d3:80:71:9f:38:f4:90:e1:30:84:1a:10:f4:7a:25:16:eb:a5:
e6:3a:06:c2:37:e5:6f:26:4b:ed:e8:f9:aa:5a:a9:d5:eb:3f:
b2:fc:50:4e:a5:09:a7:db:0c:aa:ce:d7:7b:08:7c:9c:70:70:
4d:79:51:17:75:fe:00:19:be:a7:18:cf:ff:46:57:7a:b7:24:
23:bf:09:54:de:39:4a:d0:3a:12:53:f8:7d:de:6e:74:75:9d:
4d:2a:df:48:d2:3f:29:ab:6f:b6:f4:1b:2f:ca:90:f3:4f:a3:
44:63:99:48:6c:4e:aa:83:fb:12:db:2c:02:eb:62:4d:d0:bb:
3a:1f:0d:36:11:03:82:59:34:a3:18:0a:76:7e:fe:99:0d:b2:
0f:b6:a6:d5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBBkVcOxtH3yJYieprmKymWq4/DgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwODA2MDAwMDAwWhcNMjQwOTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlOTlhN2M2M2RhOTMwNTIzYWExNmZiNmM0ZjhjZDk0YzU0
YmVjMWY1N2QxODc5YWNjOWQ1YzJkMmZhYjZjNzRjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsYL6xKg/wmbjO4clOTMpk4awF7GlUJQfwCyyFMjgCuEiR
lsz6v/hBkPMCD9XeZpbgFcHMsdOJP/1wVHJRqung8RwHOi5VqfkoH1oqCDNbsGrD
i7YyEJxlNIphXAyzbBclEXZTU78lRRZlfxYfKv1PYaLswvRF6q/hNVyMY8+QXNPI
N5GvzCFM4jKsU2pTIwtVksEdNJabk87pwGAIIBjK64poxPGQIXx0D2reZzejem+J
dMWLHKhROllpXIDiS/03hPO855A1mT6+0i7PyJAfRLgNoG2Q6zkVqXb7BuWQFnOT
2zGOJLucD4wwfo/bTLQCs13aOYcCgSs05sqb2DdLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU15LPlcNaosjLEZ60l+p4v25fuhEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzlhZGEwYzljLTRhNGYtNGZmYi1iMjIxLTk2MWU5ZGZhNGYzNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHMCRfuhESIhv62FTYv9hdZVlXKP
yLYRKpvwlChDdOQEGPUc6BeI1zq7m4BuRXcpWae42bsZl3ZvvDdEqa8slisPisfM
XVIpejlPzK6hAozfWGHgwRX9TKT3OrJ08W/w1o2isYguaZT/ZVu86NOAcZ849JDh
MIQaEPR6JRbrpeY6BsI35W8mS+3o+apaqdXrP7L8UE6lCafbDKrO13sIfJxwcE15
URd1/gAZvqcYz/9GV3q3JCO/CVTeOUrQOhJT+H3ebnR1nU0q30jSPymrb7b0Gy/K
kPNPo0RjmUhsTqqD+xLbLALrYk3QuzofDTYRA4JZNKMYCnZ+/pkNsg+2ptU=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:49:40 2025 by rpki-client