Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b1e62109-bb70-43b1-bf51-10c5d2dd883b.roa
File: b1e62109-bb70-43b1-bf51-10c5d2dd883b.roa (raw, json)
Hash identifier: wxKwHvHWilsaZRC+6wcn8feQzSAxqoBxlkkbdvhxph4=
Subject key identifier: DF:9D:17:9E:28:E3:3D:AB:DB:A7:8D:44:10:58:3A:97:35:15:8A:A1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 283EF97493AA79EBBB0E2FB695ECDCEDCB82C5A8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b1e62109-bb70-43b1-bf51-10c5d2dd883b.roa
Signing time: Thu 30 Nov 2023 00:00:00 +0000
ROA not before: Thu 30 Nov 2023 00:00:00 +0000
ROA not after: Thu 04 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:3e:f9:74:93:aa:79:eb:bb:0e:2f:b6:95:ec:dc:ed:cb:82:c5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 30 00:00:00 2023 GMT
Not After : Jan 4 23:59:59 2024 GMT
Subject: serialNumber=ae27eef901feb76c193acd56f1a3f9fcbbe8eb912bb853a81f0685ba8e8c891f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:2f:88:2c:ab:66:1b:dd:4c:02:c3:03:a5:
f5:34:6a:63:bb:6b:9c:60:77:88:33:0b:08:b4:c1:
ee:1a:bf:3a:30:b3:7f:c0:de:29:fe:e9:87:95:2c:
36:23:0e:bb:ed:af:6e:4b:02:67:4e:d9:64:27:ed:
6c:54:ff:9b:4c:32:68:42:5c:69:c4:c3:ef:b9:75:
a3:96:04:22:ca:a7:9e:d1:96:73:c3:a6:d3:94:ed:
23:03:8f:93:a6:d8:7b:79:c1:28:5e:50:63:82:14:
ad:20:8d:19:4e:95:bd:8b:2a:51:81:51:f2:d0:ae:
f4:0a:09:fd:7e:d0:91:ef:2e:f7:c6:2e:07:2d:a2:
d1:ee:cc:27:ee:71:8d:6e:40:b1:44:00:cf:43:80:
06:9a:5f:17:e4:6f:0c:fe:cb:66:3c:77:9f:7a:e2:
15:ab:f4:fe:43:27:da:0e:ef:3b:54:b3:65:2c:2f:
aa:11:f8:52:7a:4c:fe:49:32:20:ec:ff:76:ab:6d:
e5:54:45:d0:46:0d:64:71:dd:3e:26:8f:e2:e3:19:
5c:e6:4e:ef:81:ec:76:87:73:2e:f8:df:b7:8a:69:
ae:37:21:b2:2a:ad:e4:d3:6c:d1:c7:5b:50:86:22:
72:67:90:94:53:fd:98:6a:52:52:71:e2:47:d6:09:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9D:17:9E:28:E3:3D:AB:DB:A7:8D:44:10:58:3A:97:35:15:8A:A1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b1e62109-bb70-43b1-bf51-10c5d2dd883b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:7d:d3:4b:ae:f6:f9:a6:9f:38:e3:6e:81:23:2a:1d:30:29:
a5:bf:d3:54:74:e8:96:60:06:ea:84:84:5b:fb:b0:72:bf:82:
06:1b:ff:b4:db:fd:70:d7:98:28:05:76:74:e5:e5:ac:7c:34:
6d:a1:66:31:19:12:47:e8:2f:73:44:30:06:df:18:1f:49:d3:
05:31:0e:44:29:0d:11:59:cb:0c:24:40:ca:da:e6:30:06:7e:
a7:69:2c:15:14:1a:58:6a:5f:03:c2:ce:19:92:2f:2b:63:86:
a4:52:37:27:07:f4:8e:e1:5e:ae:f4:e8:63:f9:af:d0:8d:d7:
21:4b:78:e1:33:38:56:e6:9c:ee:64:61:14:35:4d:16:1c:0d:
e5:74:8e:91:11:c3:3c:48:3c:23:00:29:60:0f:c9:e8:13:6e:
c0:58:c8:cf:e4:c1:13:0c:8d:2f:dc:0e:19:ed:42:51:48:4d:
5e:6d:bc:6c:66:89:46:af:cd:16:0a:b4:48:b2:bc:76:20:dd:
c2:f3:66:01:93:c0:1e:58:62:7f:b0:cb:d0:54:a4:1f:85:fe:
d0:d2:90:b4:3b:2e:58:a5:20:04:be:f4:1e:85:01:b6:66:0b:
a2:c3:88:72:89:0e:8b:21:fb:79:48:68:1a:99:26:16:52:f2:
65:a5:4c:ab
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKD75dJOqeeu7Di+2lezc7cuCxagwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTMwMDAwMDAwWhcNMjQwMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZTI3ZWVmOTAxZmViNzZjMTkzYWNkNTZmMWEzZjlmY2Ji
ZThlYjkxMmJiODUzYTgxZjA2ODViYThlOGM4OTFmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9Hi+ILKtmG91MAsMDpfU0amO7a5xgd4gzCwi0we4avzow
s3/A3in+6YeVLDYjDrvtr25LAmdO2WQn7WxU/5tMMmhCXGnEw++5daOWBCLKp57R
lnPDptOU7SMDj5Om2Ht5wSheUGOCFK0gjRlOlb2LKlGBUfLQrvQKCf1+0JHvLvfG
LgctotHuzCfucY1uQLFEAM9DgAaaXxfkbwz+y2Y8d5964hWr9P5DJ9oO7ztUs2Us
L6oR+FJ6TP5JMiDs/3arbeVURdBGDWRx3T4mj+LjGVzmTu+B7HaHcy7437eKaa43
IbIqreTTbNHHW1CGInJnkJRT/ZhqUlJx4kfWCTp3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU350XnijjPavbp41EEFg6lzUViqEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2IxZTYyMTA5LWJiNzAtNDNiMS1iZjUxLTEwYzVkMmRkODgzYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGp900uu9vmmnzjjboEjKh0wKaW/
01R06JZgBuqEhFv7sHK/ggYb/7Tb/XDXmCgFdnTl5ax8NG2hZjEZEkfoL3NEMAbf
GB9J0wUxDkQpDRFZywwkQMra5jAGfqdpLBUUGlhqXwPCzhmSLytjhqRSNycH9I7h
Xq706GP5r9CN1yFLeOEzOFbmnO5kYRQ1TRYcDeV0jpERwzxIPCMAKWAPyegTbsBY
yM/kwRMMjS/cDhntQlFITV5tvGxmiUavzRYKtEiyvHYg3cLzZgGTwB5YYn+wy9BU
pB+F/tDSkLQ7LlilIAS+9B6FAbZmC6LDiHKJDosh+3lIaBqZJhZS8mWlTKs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:45:50 2025 by rpki-client