Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9dee7391-5f66-4d7a-b7da-1cdd930f5243.roa
File: 9dee7391-5f66-4d7a-b7da-1cdd930f5243.roa (raw, json)
Hash identifier: ZwD8Yxf50jayDSng7CB0HiZ2mVAoH3OymjMicpoqBnU=
Subject key identifier: 14:EE:3E:04:E8:1D:38:63:41:F1:D1:1C:45:23:42:2E:B4:A9:05:37
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 523CBB4F2F3DFC4749B408BDE5BB3926C95E035C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9dee7391-5f66-4d7a-b7da-1cdd930f5243.roa
Signing time: Thu 07 Dec 2023 00:00:00 +0000
ROA not before: Thu 07 Dec 2023 00:00:00 +0000
ROA not after: Thu 11 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:3c:bb:4f:2f:3d:fc:47:49:b4:08:bd:e5:bb:39:26:c9:5e:03:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 7 00:00:00 2023 GMT
Not After : Jan 11 23:59:59 2024 GMT
Subject: serialNumber=960ed78b1ab925b3a434b4d85477b86f5bcf77428904026504704e3e7c7268c9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:68:99:a0:2b:8b:ca:11:fd:bf:f1:29:58:05:
f6:2c:a7:03:6f:78:91:19:55:73:3d:d1:06:5b:50:
80:e2:1d:3d:f0:e2:c6:db:43:ac:b9:9a:90:7e:b6:
0e:bc:43:7f:37:24:f1:2f:1a:ba:66:86:73:07:d0:
64:45:e3:6a:45:46:82:59:28:e5:67:0c:bd:b7:fb:
7f:7c:cc:a7:7c:7c:25:d4:c6:17:ca:f4:ef:ed:f8:
3e:5a:d6:6e:6e:d2:a6:e8:7d:38:6a:a2:8e:36:2a:
f4:0e:b3:cc:77:8d:0c:17:00:8f:c1:48:c1:e7:ab:
ef:b2:2c:e3:7c:2d:8c:43:8c:ea:64:55:1f:b1:af:
7b:e0:76:47:09:10:22:8f:7e:89:3e:52:9a:a7:12:
1d:5a:ef:57:a3:4d:ca:9a:0e:4a:f3:a7:81:81:b8:
64:97:96:ca:40:49:aa:8e:88:7f:47:87:07:f4:e6:
f4:f6:b6:27:28:46:79:ee:52:84:f1:e0:77:60:2b:
bd:5b:31:ca:55:aa:d1:6d:2f:f4:07:4e:ed:35:0e:
5b:b5:66:0b:72:42:09:6e:1c:ad:05:5c:40:c1:1b:
8c:5d:74:37:48:57:f1:a1:d8:97:e9:3f:d7:9b:e1:
60:9c:91:14:49:a2:31:18:ec:6a:90:20:6b:f4:b2:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EE:3E:04:E8:1D:38:63:41:F1:D1:1C:45:23:42:2E:B4:A9:05:37
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9dee7391-5f66-4d7a-b7da-1cdd930f5243.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4f:dc:36:76:e3:df:e5:c6:db:6d:ac:6b:cf:a7:b5:53:7f:
55:e0:08:40:41:e0:45:96:77:7c:cc:ee:39:10:1c:ab:7b:63:
15:51:7b:68:db:6a:ff:55:79:ee:77:d3:59:fb:8b:2a:df:79:
8a:97:24:b6:d0:db:b9:ab:ff:2f:54:3b:8b:88:18:7b:d7:8e:
4e:b9:d1:98:30:57:87:e0:6d:12:97:bd:c7:0c:a7:d4:31:f6:
ff:5a:06:40:44:45:92:36:ab:ab:c0:65:fc:17:56:ff:1a:2b:
9e:11:2e:c7:10:1f:db:d8:d9:55:11:51:f7:8f:9f:c7:f7:18:
8d:c9:75:a2:e8:96:8e:52:99:62:aa:fe:0f:fe:85:a5:cf:28:
1e:66:60:34:49:76:42:94:ea:d6:a5:18:2a:e8:6d:e9:98:b8:
b3:e6:a3:fb:c8:be:e3:9d:70:7a:ef:e2:7d:4e:ea:fd:75:b3:
4e:be:01:57:bb:d7:c0:23:f8:6e:4d:9a:45:2e:b6:ff:f2:bc:
0d:e0:53:20:a7:cb:a2:fa:ae:10:f6:b4:23:ac:1a:f5:0d:3d:
67:75:43:59:d6:71:52:31:ac:f8:08:0c:c4:43:06:d9:09:47:
19:20:33:ef:14:e2:86:f1:f3:74:ae:cc:c7:3a:6a:3b:73:2a:
24:4b:36:ec
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUjy7Ty89/EdJtAi95bs5JsleA1wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjA3MDAwMDAwWhcNMjQwMTExMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NjBlZDc4YjFhYjkyNWIzYTQzNGI0ZDg1NDc3Yjg2ZjVi
Y2Y3NzQyODkwNDAyNjUwNDcwNGUzZTdjNzI2OGM5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDlaJmgK4vKEf2/8SlYBfYspwNveJEZVXM90QZbUIDiHT3w
4sbbQ6y5mpB+tg68Q383JPEvGrpmhnMH0GRF42pFRoJZKOVnDL23+398zKd8fCXU
xhfK9O/t+D5a1m5u0qbofThqoo42KvQOs8x3jQwXAI/BSMHnq++yLON8LYxDjOpk
VR+xr3vgdkcJECKPfok+UpqnEh1a71ejTcqaDkrzp4GBuGSXlspASaqOiH9Hhwf0
5vT2ticoRnnuUoTx4HdgK71bMcpVqtFtL/QHTu01Dlu1ZgtyQgluHK0FXEDBG4xd
dDdIV/Gh2JfpP9eb4WCckRRJojEY7GqQIGv0soBxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUFO4+BOgdOGNB8dEcRSNCLrSpBTcwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzlkZWU3MzkxLTVmNjYtNGQ3YS1iN2RhLTFjZGQ5MzBmNTI0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEhP3DZ249/lxtttrGvPp7VTf1Xg
CEBB4EWWd3zM7jkQHKt7YxVRe2jbav9Vee5301n7iyrfeYqXJLbQ27mr/y9UO4uI
GHvXjk650ZgwV4fgbRKXvccMp9Qx9v9aBkBERZI2q6vAZfwXVv8aK54RLscQH9vY
2VURUfePn8f3GI3JdaLolo5SmWKq/g/+haXPKB5mYDRJdkKU6talGCrobemYuLPm
o/vIvuOdcHrv4n1O6v11s06+AVe718Aj+G5NmkUutv/yvA3gUyCny6L6rhD2tCOs
GvUNPWd1Q1nWcVIxrPgIDMRDBtkJRxkgM+8U4obx83SuzMc6ajtzKiRLNuw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:26 2025 by rpki-client