Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a99953d1-588b-4f16-9f45-7a86d6940b4b.roa
File: a99953d1-588b-4f16-9f45-7a86d6940b4b.roa (raw, json)
Hash identifier: kQbWFDeKhqDl/JCnMGwgJz5dWT7jmO9oX9GF2CxSn1Q=
Subject key identifier: CC:64:67:1C:92:40:87:8D:D1:8D:8D:2C:EF:3B:62:D9:70:51:50:3E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 568EFDCE4771AAB3ECB11DFFEB2A0D65C1138D93
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a99953d1-588b-4f16-9f45-7a86d6940b4b.roa
Signing time: Wed 11 Dec 2024 00:00:00 +0000
ROA not before: Wed 11 Dec 2024 00:00:00 +0000
ROA not after: Wed 15 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:8e:fd:ce:47:71:aa:b3:ec:b1:1d:ff:eb:2a:0d:65:c1:13:8d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 11 00:00:00 2024 GMT
Not After : Jan 15 23:59:59 2025 GMT
Subject: serialNumber=e921563c0d4815f9cbff5b600edd90e67a93288a4d7bbc5184971b56e7df2e40, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e6:80:78:fb:41:d9:af:c5:b9:9e:a9:62:60:
bf:e9:23:6e:4c:d7:b0:96:fe:43:15:27:03:2e:ab:
d2:9b:90:fd:21:e7:73:90:f8:e9:30:e5:75:f0:39:
cd:75:73:ec:ca:f7:13:e0:89:53:e9:e5:b9:97:02:
33:2d:a0:c5:30:4f:96:3d:70:2e:b1:86:62:b7:93:
54:da:4c:bb:89:50:24:05:ed:89:1c:f1:4a:e2:64:
8a:c5:54:c8:a7:de:ed:ec:97:d1:24:88:fa:f4:04:
d0:76:31:40:86:c0:d1:a9:99:1b:50:b7:7e:54:63:
42:f6:fc:3b:35:db:72:47:91:40:6a:b4:d4:0b:23:
f2:9e:42:87:53:f3:cb:89:65:8e:4f:d4:fc:02:6f:
e7:86:6b:dd:f5:c5:86:28:bc:b0:e8:dd:3d:c2:82:
3f:09:86:85:4d:ae:82:c9:6c:97:24:09:de:b0:28:
71:83:e5:9d:86:0c:80:77:29:71:48:93:db:fc:72:
31:9c:44:49:e5:d3:fc:3c:04:91:96:f3:86:ab:da:
8f:ab:f2:bb:cd:c4:f7:7f:8a:1a:9c:0c:84:81:5f:
28:d7:0c:d0:db:c7:93:02:52:c8:25:96:72:3e:06:
00:d6:24:5f:7a:3e:4c:38:9f:cd:ee:df:11:88:fa:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:64:67:1C:92:40:87:8D:D1:8D:8D:2C:EF:3B:62:D9:70:51:50:3E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a99953d1-588b-4f16-9f45-7a86d6940b4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e4:3c:e6:9b:d1:ee:48:7a:a8:5b:c1:65:6b:28:b2:8a:a8:
4b:b1:b5:60:0b:58:5a:dd:62:8d:88:f3:e9:05:75:8a:77:86:
47:d1:e7:20:70:06:7c:10:41:88:03:5b:67:66:86:99:3a:55:
09:01:fa:eb:19:e5:39:40:2c:f0:8a:23:49:94:3b:47:25:52:
7c:86:10:e2:00:f0:1f:7e:f1:bd:27:93:78:6a:ee:81:bf:76:
b3:1a:75:eb:a6:6a:f1:2c:65:83:17:e6:00:86:b2:58:7b:2e:
cf:4a:bb:9f:d3:11:6c:45:e4:b2:dd:22:d2:46:63:28:79:b9:
d5:a6:be:ab:a1:87:63:99:db:4b:36:38:03:a7:71:c7:ae:39:
ea:8a:3c:e3:37:1e:75:23:6e:0e:90:4c:9c:09:87:32:e6:fe:
95:5f:a8:0c:94:d5:68:5d:04:f3:cd:59:9b:07:82:38:5f:7a:
9e:80:b6:ad:ea:fd:9a:c4:f6:37:42:e1:3d:44:5c:04:8e:1b:
33:72:58:78:b1:42:ab:66:6d:ea:a7:47:15:71:18:09:c3:49:
a7:7f:fe:48:e8:82:b8:6a:85:8a:ad:89:2d:ba:f3:7a:0c:b2:
93:2e:00:bf:06:66:3b:e1:05:4a:58:6c:0c:3a:fe:d8:5a:c6:
e0:53:29:c3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVo79zkdxqrPssR3/6yoNZcETjZMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMjExMDAwMDAwWhcNMjUwMTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlOTIxNTYzYzBkNDgxNWY5Y2JmZjViNjAwZWRkOTBlNjdh
OTMyODhhNGQ3YmJjNTE4NDk3MWI1NmU3ZGYyZTQwMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCM5oB4+0HZr8W5nqliYL/pI25M17CW/kMVJwMuq9KbkP0h
53OQ+Okw5XXwOc11c+zK9xPgiVPp5bmXAjMtoMUwT5Y9cC6xhmK3k1TaTLuJUCQF
7Ykc8UriZIrFVMin3u3sl9EkiPr0BNB2MUCGwNGpmRtQt35UY0L2/Ds123JHkUBq
tNQLI/KeQodT88uJZY5P1PwCb+eGa931xYYovLDo3T3Cgj8JhoVNroLJbJckCd6w
KHGD5Z2GDIB3KXFIk9v8cjGcREnl0/w8BJGW84ar2o+r8rvNxPd/ihqcDISBXyjX
DNDbx5MCUsgllnI+BgDWJF96Pkw4n83u3xGI+qBdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzGRnHJJAh43RjY0s7zti2XBRUD4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2E5OTk1M2QxLTU4OGItNGYxNi05ZjQ1LTdhODZkNjk0MGI0Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKvkPOab0e5IeqhbwWVrKLKKqEux
tWALWFrdYo2I8+kFdYp3hkfR5yBwBnwQQYgDW2dmhpk6VQkB+usZ5TlALPCKI0mU
O0clUnyGEOIA8B9+8b0nk3hq7oG/drMadeumavEsZYMX5gCGslh7Ls9Ku5/TEWxF
5LLdItJGYyh5udWmvquhh2OZ20s2OAOncceuOeqKPOM3HnUjbg6QTJwJhzLm/pVf
qAyU1WhdBPPNWZsHgjhfep6Atq3q/ZrE9jdC4T1EXASOGzNyWHixQqtmbeqnRxVx
GAnDSad//kjogrhqhYqtiS2683oMspMuAL8GZjvhBUpYbAw6/thaxuBTKcM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:39:26 2025 by rpki-client