Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aef1b9f5-6c0b-4d0a-90a5-e230bbbf61d7.roa
File: aef1b9f5-6c0b-4d0a-90a5-e230bbbf61d7.roa (raw, json)
Hash identifier: 5AQBdKKkS01Ft4cEYl6aO7h5Cqnh0WQ8OVOUY3emKTM=
Subject key identifier: 81:19:EF:D8:0F:91:24:B7:86:18:C4:4D:58:E7:48:23:96:5A:AE:0D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 04628954AE8136190010C608576884EF24DBFE8F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aef1b9f5-6c0b-4d0a-90a5-e230bbbf61d7.roa
Signing time: Wed 20 Sep 2023 00:00:00 +0000
ROA not before: Wed 20 Sep 2023 00:00:00 +0000
ROA not after: Wed 25 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:62:89:54:ae:81:36:19:00:10:c6:08:57:68:84:ef:24:db:fe:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 20 00:00:00 2023 GMT
Not After : Oct 25 23:59:59 2023 GMT
Subject: serialNumber=6d2e3bb0aade92054068dc32d28e65fd34a7cdb203919e300253a333b66df083, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:2b:06:54:82:fb:9b:99:d1:ae:b1:29:46:
60:82:5a:42:2c:26:26:2e:c0:2a:47:de:b5:90:e5:
da:85:ed:33:21:9c:08:26:bc:2d:94:50:d1:17:87:
87:1f:87:93:bb:a4:0c:d3:7b:35:d0:6a:ee:1c:3f:
9d:00:16:f4:4f:1f:29:86:79:17:0d:14:a1:3e:a1:
4c:b7:a7:eb:4d:9e:ca:b2:94:00:eb:63:d6:82:ba:
77:50:d8:f7:44:d2:4b:74:58:9d:87:43:ef:7e:17:
f1:86:f4:3c:9b:14:22:a8:48:c9:65:3e:e8:d6:5d:
08:14:65:68:3a:b9:f3:58:df:9f:b2:f7:13:49:86:
52:a5:3a:4d:91:ae:c4:ac:d6:cd:b4:67:cc:d4:f3:
49:86:64:32:f8:c1:0e:14:10:75:c6:cc:a9:89:2c:
18:10:2d:23:3c:63:90:67:20:ac:d6:12:bb:d8:60:
99:f9:74:8f:fe:f8:bc:92:cf:be:ad:66:d7:2e:45:
a9:1b:a4:2c:6d:ed:ff:2c:25:fd:41:bb:d6:e8:12:
49:3c:b1:ff:20:4c:8b:49:65:73:b4:4a:cf:7d:96:
1d:7f:a9:b0:75:c7:84:ab:ea:8b:89:ea:b2:a8:8c:
72:dd:38:68:da:7a:0a:46:e5:6f:ab:99:c9:06:30:
6f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:19:EF:D8:0F:91:24:B7:86:18:C4:4D:58:E7:48:23:96:5A:AE:0D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aef1b9f5-6c0b-4d0a-90a5-e230bbbf61d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
27:4f:ef:b2:db:5e:d8:d2:67:59:b3:f3:0e:03:e4:a4:31:fc:
f9:76:38:66:fc:33:88:54:10:d7:44:27:e8:50:25:07:2e:f0:
bd:c4:90:0f:9e:12:c4:74:5c:c2:24:9e:00:19:b3:b4:0b:cf:
d4:7a:c1:f9:fb:7d:e0:82:80:33:ee:c6:39:cd:e4:f3:fb:db:
85:c8:9f:58:ee:23:6a:6a:05:86:4e:52:ff:45:ba:6d:26:1c:
bf:ac:60:f7:57:5c:70:6d:93:f4:05:1d:8c:25:65:62:c2:22:
66:d7:83:58:c7:e8:8c:82:43:f7:32:a1:60:ff:24:51:05:08:
30:5a:34:c6:12:98:47:2d:e1:07:af:b8:69:11:08:d0:42:64:
16:e3:cf:ea:6a:f1:d8:4b:e4:89:83:f7:11:8c:b8:24:6b:39:
94:03:1f:b5:40:38:a2:f2:ac:70:f5:0d:f5:ca:a6:f0:ca:42:
32:5b:42:65:03:1f:f3:69:95:da:42:ea:a6:57:a7:a1:74:b7:
5f:2d:be:0a:2c:fd:d6:a2:82:c6:1d:a5:01:3c:97:8a:90:85:
bd:f0:f1:5e:24:ac:f8:2c:23:47:fa:97:40:2f:e8:9a:78:80:
89:9c:ed:f8:eb:7a:4d:3c:87:85:c1:68:68:be:f8:8a:f0:e7:
4d:79:45:64
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBGKJVK6BNhkAEMYIV2iE7yTb/o8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTIwMDAwMDAwWhcNMjMxMDI1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZDJlM2JiMGFhZGU5MjA1NDA2OGRjMzJkMjhlNjVmZDM0
YTdjZGIyMDM5MTllMzAwMjUzYTMzM2I2NmRmMDgzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCVZSsGVIL7m5nRrrEpRmCCWkIsJiYuwCpH3rWQ5dqF7TMh
nAgmvC2UUNEXh4cfh5O7pAzTezXQau4cP50AFvRPHymGeRcNFKE+oUy3p+tNnsqy
lADrY9aCundQ2PdE0kt0WJ2HQ+9+F/GG9DybFCKoSMllPujWXQgUZWg6ufNY35+y
9xNJhlKlOk2RrsSs1s20Z8zU80mGZDL4wQ4UEHXGzKmJLBgQLSM8Y5BnIKzWErvY
YJn5dI/++LySz76tZtcuRakbpCxt7f8sJf1Bu9boEkk8sf8gTItJZXO0Ss99lh1/
qbB1x4Sr6ouJ6rKojHLdOGjaegpG5W+rmckGMG9LAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUgRnv2A+RJLeGGMRNWOdII5Zarg0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2FlZjFiOWY1LTZjMGItNGQwYS05MGE1LWUyMzBiYmJmNjFkNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACdP77LbXtjSZ1mz8w4D5KQx/Pl2
OGb8M4hUENdEJ+hQJQcu8L3EkA+eEsR0XMIkngAZs7QLz9R6wfn7feCCgDPuxjnN
5PP724XIn1juI2pqBYZOUv9Fum0mHL+sYPdXXHBtk/QFHYwlZWLCImbXg1jH6IyC
Q/cyoWD/JFEFCDBaNMYSmEct4QevuGkRCNBCZBbjz+pq8dhL5ImD9xGMuCRrOZQD
H7VAOKLyrHD1DfXKpvDKQjJbQmUDH/NpldpC6qZXp6F0t18tvgos/daigsYdpQE8
l4qQhb3w8V4krPgsI0f6l0Av6Jp4gImc7fjrek08h4XBaGi++Irw5015RWQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:32:06 2025 by rpki-client