Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5342afb-cb90-41c7-998e-69d733203dbc.roa
File: b5342afb-cb90-41c7-998e-69d733203dbc.roa (raw, json)
Hash identifier: H5i3vYQAs1KdKJAevI8dwOovMJDTpVoehcVsXiAdHqc=
Subject key identifier: EE:B7:EC:F7:11:3F:17:BA:7F:63:B3:90:BA:D6:27:25:A6:56:46:66
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2D3AFFC93EE5320724538D188B5196D69CD820D5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5342afb-cb90-41c7-998e-69d733203dbc.roa
Signing time: Sat 23 Dec 2023 00:00:00 +0000
ROA not before: Sat 23 Dec 2023 00:00:00 +0000
ROA not after: Sat 27 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3a:ff:c9:3e:e5:32:07:24:53:8d:18:8b:51:96:d6:9c:d8:20:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 23 00:00:00 2023 GMT
Not After : Jan 27 23:59:59 2024 GMT
Subject: serialNumber=b3b13229b1c58d9afc09c66d131e58dfdcea1ceb9478b33cdc46e44d3e9d27e8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:05:88:b7:73:46:fb:09:cb:57:44:4f:f7:
92:6b:ac:b7:77:a6:71:3e:ad:83:3b:81:42:2b:b6:
cf:49:6b:66:0a:27:24:b1:86:bd:39:ae:11:53:77:
75:b5:ff:55:d8:fb:50:b9:f9:7a:70:a1:23:3b:d1:
76:12:e3:9a:10:21:d2:f2:ca:34:16:6e:ff:8c:ba:
14:a3:5f:fd:91:67:1e:d0:e1:28:33:46:e9:81:15:
da:a3:e0:0c:56:f9:15:aa:5e:4a:03:81:6a:50:11:
9b:6b:21:a7:43:3b:5c:8c:db:3e:cf:45:b0:cb:88:
91:04:a8:e7:d5:d2:6c:37:35:bc:01:ab:9d:11:f2:
4e:b2:d2:6d:d1:a3:a4:4a:0d:e7:28:26:21:5b:ef:
b1:ef:ac:dd:12:c8:08:1a:89:65:ec:4e:f1:cc:2c:
bc:45:39:9a:65:0d:c1:35:a8:b3:24:d1:20:0c:f2:
2d:cf:0d:ca:9e:4c:9d:fe:af:44:fc:f0:53:d9:8c:
c6:cb:f2:2c:a0:ff:ef:dc:24:63:b1:0a:35:56:ab:
7c:3d:f0:9d:4d:fb:93:23:b8:c3:5d:97:4b:0c:85:
5b:5f:cd:f2:a4:cb:c6:e6:e1:d1:52:6c:3d:be:14:
f9:ab:96:44:0e:d9:64:e6:fa:5f:6d:85:2c:b0:eb:
09:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B7:EC:F7:11:3F:17:BA:7F:63:B3:90:BA:D6:27:25:A6:56:46:66
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5342afb-cb90-41c7-998e-69d733203dbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f4:1c:6a:70:6a:b4:60:f6:9b:c4:49:6f:0e:6d:fb:27:3a:
55:34:f9:a2:de:33:61:ed:5a:76:06:7d:a5:a4:bc:6b:b0:35:
bc:30:e2:43:2a:82:d6:57:d8:ef:7c:d3:f2:23:80:66:ff:64:
a0:71:e5:14:67:8b:28:e3:b2:84:19:8c:8d:ff:c7:e2:27:07:
0c:73:b5:3e:ff:b5:14:d4:b6:4b:b1:e3:f8:ae:c4:98:c3:bc:
7c:3c:e3:6f:ec:7b:5b:3a:0c:17:b8:8e:ab:e3:99:27:6c:a2:
08:99:89:e0:c5:d1:d2:8f:af:fc:c1:a4:23:b9:0a:e1:5f:7c:
24:f2:13:2b:4b:af:8e:a1:f9:60:ab:ed:a7:f7:05:d0:1c:24:
11:66:9c:98:8d:0d:0a:81:69:e8:97:ad:fe:c6:36:20:34:58:
e3:5b:10:15:c2:38:fe:e2:3d:7f:02:bb:19:46:3b:b6:ee:c2:
21:d8:2d:1f:f1:a6:9a:0f:6b:cf:ae:73:59:76:79:5e:85:38:
f8:32:e1:e7:4d:3c:11:bd:62:19:d3:0d:c6:b5:6a:d9:5a:f3:
4b:3e:7d:06:49:99:9f:8a:a5:6a:b3:ff:eb:6a:30:66:df:10:
60:25:bc:99:27:b0:1b:9f:ea:f4:84:82:7d:92:c4:97:c8:fb:
60:35:a8:72
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULTr/yT7lMgckU40Yi1GW1pzYINUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjIzMDAwMDAwWhcNMjQwMTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BiM2IxMzIyOWIxYzU4ZDlhZmMwOWM2NmQxMzFlNThkZmRj
ZWExY2ViOTQ3OGIzM2NkYzQ2ZTQ0ZDNlOWQyN2U4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCd9gWIt3NG+wnLV0RP95JrrLd3pnE+rYM7gUIrts9Ja2YK
JySxhr05rhFTd3W1/1XY+1C5+XpwoSM70XYS45oQIdLyyjQWbv+MuhSjX/2RZx7Q
4SgzRumBFdqj4AxW+RWqXkoDgWpQEZtrIadDO1yM2z7PRbDLiJEEqOfV0mw3NbwB
q50R8k6y0m3Ro6RKDecoJiFb77HvrN0SyAgaiWXsTvHMLLxFOZplDcE1qLMk0SAM
8i3PDcqeTJ3+r0T88FPZjMbL8iyg/+/cJGOxCjVWq3w98J1N+5MjuMNdl0sMhVtf
zfKky8bm4dFSbD2+FPmrlkQO2WTm+l9thSyw6wmXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU7rfs9xE/F7p/Y7OQutYnJaZWRmYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2I1MzQyYWZiLWNiOTAtNDFjNy05OThlLTY5ZDczMzIwM2RiYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACX0HGpwarRg9pvESW8ObfsnOlU0
+aLeM2HtWnYGfaWkvGuwNbww4kMqgtZX2O980/IjgGb/ZKBx5RRniyjjsoQZjI3/
x+InBwxztT7/tRTUtkux4/iuxJjDvHw842/se1s6DBe4jqvjmSdsogiZieDF0dKP
r/zBpCO5CuFffCTyEytLr46h+WCr7af3BdAcJBFmnJiNDQqBaeiXrf7GNiA0WONb
EBXCOP7iPX8CuxlGO7buwiHYLR/xppoPa8+uc1l2eV6FOPgy4edNPBG9YhnTDca1
atla80s+fQZJmZ+KpWqz/+tqMGbfEGAlvJknsBuf6vSEgn2SxJfI+2A1qHI=
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:14 2025 by rpki-client