Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9cfd2ff-6346-45f4-9104-88fb92031c13.roa
File: b9cfd2ff-6346-45f4-9104-88fb92031c13.roa (raw, json)
Hash identifier: DL9vvQan+nppNNiNSVBOYukdEVLBA7mTa0fUJgR7tiw=
Subject key identifier: 1F:D7:69:69:1B:BE:4D:5D:7D:D1:7C:00:BF:20:BE:61:9D:2A:5F:A2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 71D16E167E57E46439D1D104E2D6246BB54923CA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9cfd2ff-6346-45f4-9104-88fb92031c13.roa
Signing time: Sat 07 Sep 2024 00:00:00 +0000
ROA not before: Sat 07 Sep 2024 00:00:00 +0000
ROA not after: Sat 12 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d1:6e:16:7e:57:e4:64:39:d1:d1:04:e2:d6:24:6b:b5:49:23:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 7 00:00:00 2024 GMT
Not After : Oct 12 23:59:59 2024 GMT
Subject: serialNumber=ddffae9fa2fb6203746b83b363c3551ffec302af13abe24d0a7c4e7c44b3e6d1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:87:c8:9f:74:8a:ff:0a:1c:c1:1a:c7:89:8a:
ea:ae:f7:75:84:74:80:88:6a:0d:6e:50:ee:55:4c:
f8:cf:4b:01:9c:0b:c7:7f:93:36:5a:33:f8:2f:11:
8d:26:27:c1:d9:94:99:b7:54:87:5c:7e:3a:8b:2b:
72:0b:f1:db:c2:3c:aa:2b:04:cd:f2:ed:e3:33:a7:
c8:d9:1b:30:75:44:c4:e8:a9:c6:b9:19:ac:28:77:
9e:9a:74:81:7b:48:9e:08:f9:84:9a:3e:4c:17:14:
37:af:42:7b:f7:9d:ae:6b:e7:12:c9:09:39:c5:0c:
3d:24:9f:f7:3a:c5:73:9d:18:59:1f:63:ec:84:d3:
a2:71:52:e8:33:63:e3:49:47:6a:a0:9f:88:b0:bb:
fe:e3:90:8d:13:18:61:68:29:58:c5:92:e8:9a:97:
af:68:29:1a:62:a7:ec:db:31:d9:53:fd:c4:b7:23:
42:c3:cf:a9:f8:2d:34:03:d6:15:b5:61:cb:e9:94:
29:b1:3d:bc:cf:f4:97:61:01:74:58:6b:4d:4c:c9:
29:f2:99:68:73:ac:ef:2b:60:63:4b:9e:f9:87:cd:
4d:41:6b:74:01:bc:00:12:19:a2:25:e7:b0:a8:af:
fc:84:04:17:c4:fb:30:7b:ec:f8:04:4e:a5:ad:64:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D7:69:69:1B:BE:4D:5D:7D:D1:7C:00:BF:20:BE:61:9D:2A:5F:A2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9cfd2ff-6346-45f4-9104-88fb92031c13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:18:e0:cf:0b:04:0f:3e:7f:f3:c9:8e:11:ff:35:49:ca:76:
fe:e7:c8:bf:c8:2c:4f:94:da:ea:e3:5f:9e:68:59:08:f4:fa:
7a:70:b3:f7:c9:ea:46:a4:0b:62:74:8c:47:67:77:2a:4a:c3:
50:b9:c2:a7:56:80:89:ba:93:79:88:53:00:33:80:64:93:88:
c7:8c:5f:8c:6b:8f:71:a1:04:b2:c9:25:bc:d5:e9:32:4f:28:
99:ca:30:88:e6:da:8d:34:e5:69:b0:0b:9e:7b:e5:78:6c:c2:
dd:f5:06:55:52:4b:55:f9:87:00:b4:d3:75:e8:bb:d6:d1:2d:
6a:f1:48:a4:aa:16:4e:77:e8:03:51:07:4d:3e:10:76:4d:46:
42:95:d4:fa:89:c1:4f:bd:19:8f:27:27:9e:0f:bd:d2:06:93:
15:0b:2f:2d:4a:30:21:a3:f9:fb:67:91:60:27:fd:cc:de:f2:
68:11:38:5a:05:f3:60:cb:b8:19:7a:4a:d4:9c:83:ea:87:b2:
27:7a:59:2b:a9:3f:27:4a:e9:bc:7d:47:68:a0:4e:d2:8f:2e:
b5:c7:e3:52:44:00:91:c0:5c:55:30:3f:e8:26:d1:be:57:57:
3c:cb:b3:6c:95:ef:a9:00:3d:64:20:23:e5:86:63:a8:9c:53:
9e:1e:c1:18
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcdFuFn5X5GQ50dEE4tYka7VJI8owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwOTA3MDAwMDAwWhcNMjQxMDEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BkZGZmYWU5ZmEyZmI2MjAzNzQ2YjgzYjM2M2MzNTUxZmZl
YzMwMmFmMTNhYmUyNGQwYTdjNGU3YzQ0YjNlNmQxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCNh8ifdIr/ChzBGseJiuqu93WEdICIag1uUO5VTPjPSwGc
C8d/kzZaM/gvEY0mJ8HZlJm3VIdcfjqLK3IL8dvCPKorBM3y7eMzp8jZGzB1RMTo
qca5Gawod56adIF7SJ4I+YSaPkwXFDevQnv3na5r5xLJCTnFDD0kn/c6xXOdGFkf
Y+yE06JxUugzY+NJR2qgn4iwu/7jkI0TGGFoKVjFkuial69oKRpip+zbMdlT/cS3
I0LDz6n4LTQD1hW1YcvplCmxPbzP9JdhAXRYa01MySnymWhzrO8rYGNLnvmHzU1B
a3QBvAASGaIl57Cor/yEBBfE+zB77PgETqWtZI3ZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUH9dpaRu+TV190XwAvyC+YZ0qX6IwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2I5Y2ZkMmZmLTYzNDYtNDVmNC05MTA0LTg4ZmI5MjAzMWMxMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABsY4M8LBA8+f/PJjhH/NUnKdv7n
yL/ILE+U2urjX55oWQj0+npws/fJ6kakC2J0jEdndypKw1C5wqdWgIm6k3mIUwAz
gGSTiMeMX4xrj3GhBLLJJbzV6TJPKJnKMIjm2o005WmwC5575Xhswt31BlVSS1X5
hwC003Xou9bRLWrxSKSqFk536ANRB00+EHZNRkKV1PqJwU+9GY8nJ54PvdIGkxUL
Ly1KMCGj+ftnkWAn/cze8mgROFoF82DLuBl6StScg+qHsid6WSupPydK6bx9R2ig
TtKPLrXH41JEAJHAXFUwP+gm0b5XVzzLs2yV76kAPWQgI+WGY6icU54ewRg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:23:32 2025 by rpki-client