Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a07896a2-e897-49f5-a5e3-7a9fe6fdc169.roa
File: a07896a2-e897-49f5-a5e3-7a9fe6fdc169.roa (raw, json)
Hash identifier: tNbXnF85FCWffxZ/tM2Cpgupkh8fGw3WWN4E1VARao0=
Subject key identifier: 34:91:C0:D2:A0:C3:66:03:A5:3A:D0:4F:F0:B8:F9:AA:FF:F0:FD:D8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 23FC8BC728D7117505600F5A767077ADA011DD5C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a07896a2-e897-49f5-a5e3-7a9fe6fdc169.roa
Signing time: Wed 21 Jun 2023 00:00:00 +0000
ROA not before: Wed 21 Jun 2023 00:00:00 +0000
ROA not after: Wed 26 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:fc:8b:c7:28:d7:11:75:05:60:0f:5a:76:70:77:ad:a0:11:dd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 21 00:00:00 2023 GMT
Not After : Jul 26 23:59:59 2023 GMT
Subject: serialNumber=6250411f69dfaf93c99988b194819fdf2c1cc0d9abc2c27f53aba29a377b806f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:ea:16:c1:bf:6d:c4:1d:1b:20:ba:ae:7c:
83:9d:0d:db:04:40:78:c0:0e:7a:17:19:2e:56:c5:
42:7e:3b:d3:e0:a9:e4:ce:57:c4:6a:f3:53:fb:1c:
3e:fa:3d:1d:61:c1:9c:bc:ab:20:7e:70:6b:78:79:
9a:71:df:bc:0c:72:e5:37:f4:08:64:95:c2:c6:4b:
8e:cd:7c:96:2e:00:b8:49:0d:4b:48:15:63:77:86:
14:fc:a0:4c:bc:d2:0a:ab:dc:f9:0a:a4:98:b3:37:
9e:26:7b:b0:04:b0:dd:79:eb:8b:9e:51:77:31:af:
18:eb:d7:42:6a:6f:ce:63:4c:b7:02:f5:10:ca:bb:
1b:34:a5:6a:f5:f6:a1:8f:f8:04:22:a8:95:b9:95:
57:29:3b:c2:7a:05:ff:98:96:77:25:44:e0:f6:66:
8c:5f:3d:45:04:d3:0a:82:6a:06:f4:27:e4:c7:b4:
d6:70:28:76:47:71:a7:ab:11:b1:30:bd:94:31:c1:
87:ae:7c:26:83:ca:ac:f1:3e:97:cf:d1:d9:2c:34:
df:a7:a6:7c:66:75:a3:3a:69:d3:93:4b:a6:7a:3a:
86:4c:6a:3b:8e:6b:d1:32:49:78:aa:b9:a6:6e:1e:
f5:0f:91:7a:e4:c7:41:ba:c5:cc:e6:94:16:73:9d:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:91:C0:D2:A0:C3:66:03:A5:3A:D0:4F:F0:B8:F9:AA:FF:F0:FD:D8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a07896a2-e897-49f5-a5e3-7a9fe6fdc169.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e1:83:c8:ba:80:0f:d5:00:f1:e6:9b:49:d5:9f:cd:fc:f3:
ec:e1:0a:e7:ab:47:c1:ce:10:31:dd:6f:c0:ab:98:d1:8c:92:
b6:99:d4:31:04:5a:5c:0c:cc:41:74:5e:c2:13:5b:db:bb:6a:
9d:35:81:a0:1e:63:1e:1a:c9:61:57:da:54:2d:aa:d7:59:57:
6b:d7:d7:e1:03:42:95:ee:fc:ac:60:99:82:88:cb:0a:18:21:
36:26:2f:28:22:3c:33:61:e1:1f:97:5a:ff:51:c7:53:27:8d:
0b:bd:c9:53:dd:c9:dd:24:b4:2e:d0:02:b8:74:ac:f7:8c:ca:
10:c2:22:0e:a1:ef:f8:ea:27:a7:d7:78:ff:bd:e3:2f:96:b0:
9a:f9:ba:b5:97:e9:ef:37:56:a5:15:16:c9:7d:73:9b:b9:c1:
18:7f:33:bb:e5:46:aa:c8:d3:a8:25:56:dd:4c:38:70:1d:fa:
57:b7:60:64:4f:33:e6:a8:80:a4:33:4e:eb:fe:95:e1:75:a7:
02:d3:c7:ca:69:0d:82:b6:50:b0:e8:28:c8:b8:ef:17:d2:58:
d5:e3:6b:c1:65:e7:a0:ed:92:ec:d6:5b:eb:fe:c4:0d:d2:db:
6f:73:95:01:a2:41:58:75:ed:ae:90:b0:4f:b3:4f:0f:cc:1a:
3a:3e:e9:2b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUI/yLxyjXEXUFYA9adnB3raAR3VwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjIxMDAwMDAwWhcNMjMwNzI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MjUwNDExZjY5ZGZhZjkzYzk5OTg4YjE5NDgxOWZkZjJj
MWNjMGQ5YWJjMmMyN2Y1M2FiYTI5YTM3N2I4MDZmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDA/+oWwb9txB0bILqufIOdDdsEQHjADnoXGS5WxUJ+O9Pg
qeTOV8Rq81P7HD76PR1hwZy8qyB+cGt4eZpx37wMcuU39AhklcLGS47NfJYuALhJ
DUtIFWN3hhT8oEy80gqr3PkKpJizN54me7AEsN1564ueUXcxrxjr10Jqb85jTLcC
9RDKuxs0pWr19qGP+AQiqJW5lVcpO8J6Bf+YlnclROD2ZoxfPUUE0wqCagb0J+TH
tNZwKHZHcaerEbEwvZQxwYeufCaDyqzxPpfP0dksNN+npnxmdaM6adOTS6Z6OoZM
ajuOa9EySXiquaZuHvUPkXrkx0G6xczmlBZznd3DAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNJHA0qDDZgOlOtBP8Lj5qv/w/dgwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2EwNzg5NmEyLWU4OTctNDlmNS1hNWUzLTdhOWZlNmZkYzE2OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAXhg8i6gA/VAPHmm0nVn8388+zh
CuerR8HOEDHdb8CrmNGMkraZ1DEEWlwMzEF0XsITW9u7ap01gaAeYx4ayWFX2lQt
qtdZV2vX1+EDQpXu/KxgmYKIywoYITYmLygiPDNh4R+XWv9Rx1MnjQu9yVPdyd0k
tC7QArh0rPeMyhDCIg6h7/jqJ6fXeP+94y+WsJr5urWX6e83VqUVFsl9c5u5wRh/
M7vlRqrI06glVt1MOHAd+le3YGRPM+aogKQzTuv+leF1pwLTx8ppDYK2ULDoKMi4
7xfSWNXja8Fl56DtkuzWW+v+xA3S229zlQGiQVh17a6QsE+zTw/MGjo+6Ss=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:31:15 2025 by rpki-client