Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b1cc8d21-3037-4cca-962a-1709a06bb357.roa
File: b1cc8d21-3037-4cca-962a-1709a06bb357.roa (raw, json)
Hash identifier: 5e7qQxUifgxrBIZgJ4HAfJS6nNQxBaJpaD4Pfr/k+Ds=
Subject key identifier: 91:D9:9D:B0:9A:8F:1A:7D:39:07:11:56:38:7A:20:1A:9A:9F:B5:14
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 42DD772C0CDF6F19D7B06E70EC3BD9091FC7FEBD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b1cc8d21-3037-4cca-962a-1709a06bb357.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:dd:77:2c:0c:df:6f:19:d7:b0:6e:70:ec:3b:d9:09:1f:c7:fe:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=e1fe9682465de38097b55719f514a1ee3121270977b521b33a90040be2952827, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:8e:d7:88:f9:67:8a:f8:60:cd:3d:0c:77:
11:14:50:88:a0:5e:21:b3:de:44:14:e3:7d:77:1b:
ad:f2:83:29:8e:d6:82:bb:9b:b5:ca:2f:1e:82:ba:
a8:7b:66:f4:8b:71:3e:a3:40:c5:b3:3d:75:a6:63:
6b:1e:aa:b9:de:9c:6a:8f:73:73:14:ba:5e:a3:4c:
97:da:62:f0:e6:98:b3:bf:71:14:61:1d:d0:d3:2b:
83:f3:54:28:83:b2:91:4d:4f:a3:dc:94:0c:a8:e0:
6e:28:39:a3:f5:38:ba:de:2c:58:f2:40:b8:c9:61:
fa:46:a9:10:09:58:ff:eb:62:d3:5c:8a:4c:84:cb:
3d:be:e2:08:b7:7e:97:24:8b:2a:73:11:69:57:45:
95:51:6e:cd:18:55:a8:a0:c4:70:fb:7c:09:91:b1:
21:26:db:85:8b:67:39:06:05:4e:59:86:36:c5:ef:
a9:07:c2:da:78:93:32:e1:57:b6:39:5a:36:a9:85:
95:c6:81:f1:c9:68:57:14:f1:e4:17:65:7f:32:3b:
4c:2e:b6:f5:dd:86:20:48:d7:8f:55:09:0d:e1:b8:
3b:38:17:92:84:23:65:89:13:16:76:3e:24:7b:bd:
9f:a1:4e:17:a7:a2:e1:4e:7b:c7:99:c0:c0:f5:7f:
30:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D9:9D:B0:9A:8F:1A:7D:39:07:11:56:38:7A:20:1A:9A:9F:B5:14
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b1cc8d21-3037-4cca-962a-1709a06bb357.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b0:c7:3b:7e:a6:99:34:c3:81:7e:4a:8a:d5:89:e8:48:79:
4e:45:4c:46:1e:fa:f3:29:b2:70:2b:d9:61:18:7e:4a:06:b2:
82:05:fb:32:66:df:a8:ce:04:d7:21:21:a9:40:05:52:2a:33:
d2:4a:a2:e6:16:e8:55:82:69:c6:6e:4f:34:1c:8b:be:17:40:
e0:c9:ce:d4:d0:d8:de:1d:3b:6c:c3:65:3b:66:62:fe:21:41:
69:08:66:e2:10:98:b8:b8:22:4b:e7:60:0e:e9:2c:f7:fb:ce:
64:c1:b2:a8:91:e8:d4:9d:b2:0a:1e:f2:a3:4f:33:d7:11:d9:
e2:7a:96:ca:4e:9e:0d:f5:0d:20:4e:20:43:8f:cb:29:ff:c3:
6c:04:65:b4:6e:04:03:64:74:b3:55:94:32:8b:ff:61:c1:ba:
bd:bb:a0:86:b6:d4:a4:ab:e8:ac:8b:08:5b:40:95:23:b4:b5:
65:f2:9a:0d:f6:1e:bf:71:5f:be:03:e3:f8:1c:3c:d2:8e:63:
ae:51:5e:88:d5:6e:6f:b5:af:9c:18:b1:b6:1b:08:c7:7e:0b:
f0:b3:08:6a:e8:f2:5b:27:c8:31:55:b8:c5:37:08:1d:2e:eb:
dd:3d:14:36:c4:97:d5:2e:2b:d6:ad:48:e3:5a:32:72:67:2c:
00:87:73:74
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQt13LAzfbxnXsG5w7DvZCR/H/r0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMTAzMDAwMDAwWhcNMjUwMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMWZlOTY4MjQ2NWRlMzgwOTdiNTU3MTlmNTE0YTFlZTMx
MjEyNzA5NzdiNTIxYjMzYTkwMDQwYmUyOTUyODI3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCRJI7XiPlnivhgzT0MdxEUUIigXiGz3kQU4313G63ygymO
1oK7m7XKLx6Cuqh7ZvSLcT6jQMWzPXWmY2seqrnenGqPc3MUul6jTJfaYvDmmLO/
cRRhHdDTK4PzVCiDspFNT6PclAyo4G4oOaP1OLreLFjyQLjJYfpGqRAJWP/rYtNc
ikyEyz2+4gi3fpckiypzEWlXRZVRbs0YVaigxHD7fAmRsSEm24WLZzkGBU5ZhjbF
76kHwtp4kzLhV7Y5WjaphZXGgfHJaFcU8eQXZX8yO0wutvXdhiBI149VCQ3huDs4
F5KEI2WJExZ2PiR7vZ+hThenouFOe8eZwMD1fzB7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkdmdsJqPGn05BxFWOHogGpqftRQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2IxY2M4ZDIxLTMwMzctNGNjYS05NjJhLTE3MDlhMDZiYjM1Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADCwxzt+ppk0w4F+SorViehIeU5F
TEYe+vMpsnAr2WEYfkoGsoIF+zJm36jOBNchIalABVIqM9JKouYW6FWCacZuTzQc
i74XQODJztTQ2N4dO2zDZTtmYv4hQWkIZuIQmLi4IkvnYA7pLPf7zmTBsqiR6NSd
sgoe8qNPM9cR2eJ6lspOng31DSBOIEOPyyn/w2wEZbRuBANkdLNVlDKL/2HBur27
oIa21KSr6KyLCFtAlSO0tWXymg32Hr9xX74D4/gcPNKOY65RXojVbm+1r5wYsbYb
CMd+C/CzCGro8lsnyDFVuMU3CB0u6909FDbEl9UuK9atSONaMnJnLACHc3Q=
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:26:28 2025 by rpki-client