Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/af1ef9bb-415a-4d65-8c8a-57b41ed17f89.roa
File: af1ef9bb-415a-4d65-8c8a-57b41ed17f89.roa (raw, json)
Hash identifier: v+Y8t5qQMtXpfUq4AhNqeUZ02Yp+SA0YAB2luyHGH6o=
Subject key identifier: C3:A4:3F:96:94:CD:6D:8B:BF:67:E1:84:97:91:A1:92:4A:01:77:8A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0F6DC7603A0E350C38FC8822C957627468A38C2F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/af1ef9bb-415a-4d65-8c8a-57b41ed17f89.roa
Signing time: Mon 26 Feb 2024 00:00:00 +0000
ROA not before: Mon 26 Feb 2024 00:00:00 +0000
ROA not after: Mon 01 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:6d:c7:60:3a:0e:35:0c:38:fc:88:22:c9:57:62:74:68:a3:8c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 26 00:00:00 2024 GMT
Not After : Apr 1 23:59:59 2024 GMT
Subject: serialNumber=d0ecfb84a983c7c6eda1556c693936b836341a8469ee3e067ef2e4896b2f23a8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:df:04:c2:f8:ae:12:b8:26:df:3a:a4:76:d7:
84:02:fb:c4:84:58:f1:b6:8a:9d:ea:36:34:87:5b:
ee:13:a2:f2:87:25:f7:85:c9:d9:5f:94:96:90:10:
38:99:eb:30:f1:2b:8c:b7:fd:11:6a:2f:6d:07:a5:
27:17:a2:e8:31:c4:3e:8b:ef:ee:82:59:63:db:30:
1f:2f:8b:03:b6:9d:30:d6:37:8f:84:64:f3:33:ee:
df:f5:f0:aa:1d:99:c5:d9:89:16:b8:4c:fa:52:ef:
75:f1:53:5f:ba:f3:d9:2c:1e:e1:bc:a1:0f:eb:db:
a9:b2:5f:1b:d5:64:d6:ec:53:5c:7c:09:3e:87:0a:
a2:c7:a0:e2:d1:2a:a6:48:45:22:0a:78:a3:83:cf:
aa:e6:c5:d6:2b:04:fe:a4:a4:65:e9:94:ae:9b:19:
6b:c2:2a:49:fc:56:bc:31:3e:d5:93:f3:b8:00:bb:
44:8b:af:5c:26:de:5d:a7:8a:ff:1b:a4:24:03:a3:
05:27:84:cd:a7:0a:de:80:9e:dc:33:f2:23:4a:f4:
87:4a:d6:b7:ed:1c:ec:74:8c:fc:63:8f:bf:8c:0b:
fe:ff:40:0a:b6:24:8f:a6:33:dc:a9:5c:25:2f:2c:
0e:33:83:40:0f:70:99:e0:74:d2:a9:05:1e:d0:a0:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A4:3F:96:94:CD:6D:8B:BF:67:E1:84:97:91:A1:92:4A:01:77:8A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/af1ef9bb-415a-4d65-8c8a-57b41ed17f89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a7:ee:e4:5c:af:cd:94:c1:e9:6c:f6:21:77:9d:57:ec:cc:
b0:44:e7:9c:44:6e:da:6e:13:d3:59:47:4f:bc:4d:ff:5c:ef:
e3:14:ee:6a:09:49:67:67:10:5c:3a:7a:41:62:58:f4:c4:96:
b0:b7:fc:aa:f3:aa:f6:90:ad:59:aa:8e:18:5d:5e:e0:d0:cd:
44:6b:1f:63:25:19:fb:ed:05:42:b4:d5:38:20:18:c1:81:a4:
40:ca:08:32:4a:ea:91:3f:c1:70:4c:1a:6f:c1:62:57:a7:f2:
52:ed:11:cb:9c:c3:f8:77:99:3d:a0:dd:61:e0:b5:b6:51:8a:
20:61:ef:2a:72:4e:f3:22:f2:8b:5e:89:23:27:9e:89:db:ad:
f7:40:d8:61:92:91:e6:08:e1:52:34:55:4e:9b:f5:03:e1:09:
5b:10:fc:4f:00:dc:15:25:08:e4:bd:0c:f7:2c:63:a6:2f:1a:
c4:b3:89:e2:e1:01:3b:f4:da:78:96:dc:ab:08:5b:24:7d:43:
13:4b:3d:80:ca:bf:ba:ed:28:76:d3:21:64:df:14:56:bf:6d:
51:af:5c:65:e3:ca:19:ee:22:b4:b5:5d:bc:f9:aa:83:ac:58:
a8:58:10:a6:d3:37:f8:2e:f4:ea:6c:29:14:f9:68:86:32:45:
52:8e:4d:ee
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUD23HYDoONQw4/IgiyVdidGijjC8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMjI2MDAwMDAwWhcNMjQwNDAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMGVjZmI4NGE5ODNjN2M2ZWRhMTU1NmM2OTM5MzZiODM2
MzQxYTg0NjllZTNlMDY3ZWYyZTQ4OTZiMmYyM2E4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDj3wTC+K4SuCbfOqR214QC+8SEWPG2ip3qNjSHW+4TovKH
JfeFydlflJaQEDiZ6zDxK4y3/RFqL20HpScXougxxD6L7+6CWWPbMB8viwO2nTDW
N4+EZPMz7t/18KodmcXZiRa4TPpS73XxU1+689ksHuG8oQ/r26myXxvVZNbsU1x8
CT6HCqLHoOLRKqZIRSIKeKODz6rmxdYrBP6kpGXplK6bGWvCKkn8VrwxPtWT87gA
u0SLr1wm3l2niv8bpCQDowUnhM2nCt6Antwz8iNK9IdK1rftHOx0jPxjj7+MC/7/
QAq2JI+mM9ypXCUvLA4zg0APcJngdNKpBR7QoPLLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUw6Q/lpTNbYu/Z+GEl5GhkkoBd4owHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2FmMWVmOWJiLTQxNWEtNGQ2NS04YzhhLTU3YjQxZWQxN2Y4OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKan7uRcr82Uwels9iF3nVfszLBE
55xEbtpuE9NZR0+8Tf9c7+MU7moJSWdnEFw6ekFiWPTElrC3/KrzqvaQrVmqjhhd
XuDQzURrH2MlGfvtBUK01TggGMGBpEDKCDJK6pE/wXBMGm/BYlen8lLtEcucw/h3
mT2g3WHgtbZRiiBh7ypyTvMi8oteiSMnnonbrfdA2GGSkeYI4VI0VU6b9QPhCVsQ
/E8A3BUlCOS9DPcsY6YvGsSzieLhATv02niW3KsIWyR9QxNLPYDKv7rtKHbTIWTf
FFa/bVGvXGXjyhnuIrS1Xbz5qoOsWKhYEKbTN/gu9OpsKRT5aIYyRVKOTe4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:10 2025 by rpki-client