Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bc2e07bd-0660-42cf-aa8a-465c88ac6075.roa
File: bc2e07bd-0660-42cf-aa8a-465c88ac6075.roa (raw, json)
Hash identifier: z2Sb54HtmX3zwqEhzClYnbaTbRSqmi3lBexfQqDsuuE=
Subject key identifier: 68:E6:1A:A5:1A:63:01:5B:B8:EF:71:98:95:4D:21:8B:F0:64:01:A7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1FE8308FCCEF145FFEF52F6E51A629051CCC35D3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bc2e07bd-0660-42cf-aa8a-465c88ac6075.roa
Signing time: Wed 06 Mar 2024 00:00:00 +0000
ROA not before: Wed 06 Mar 2024 00:00:00 +0000
ROA not after: Wed 10 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e8:30:8f:cc:ef:14:5f:fe:f5:2f:6e:51:a6:29:05:1c:cc:35:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 6 00:00:00 2024 GMT
Not After : Apr 10 23:59:59 2024 GMT
Subject: serialNumber=a295b0126710f32ece1454e7efef0724bebc87d153cb270bd4221fa59a4936b2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:bb:af:45:cd:0a:53:9d:e0:a4:92:18:70:
fa:95:f9:ad:a1:4c:dc:11:75:63:57:2d:c0:da:4b:
b4:9e:76:5c:66:fc:db:bb:7f:df:93:5e:9d:eb:d2:
69:7f:81:44:1a:b2:c4:4b:64:63:40:7c:5c:a1:85:
41:0e:88:71:13:21:a5:27:1c:62:59:3d:ef:90:67:
ad:a0:ef:36:40:79:e8:6c:50:b5:53:10:60:cf:0c:
34:59:4d:2c:6e:c2:0f:0e:a7:ec:d6:70:4f:8f:fe:
3f:1b:5d:cf:a7:5a:03:b4:ec:ae:c7:9f:d1:ae:b7:
b8:f4:cc:bd:52:55:ef:69:8e:09:2a:e0:f4:11:37:
22:70:b8:3a:4a:85:3e:80:e1:3b:0e:31:53:01:4e:
00:b5:94:ab:ae:7b:38:f3:34:38:e5:07:88:3e:07:
30:12:61:05:b5:3b:67:33:f0:cd:1c:a8:d5:ff:03:
d9:65:18:76:49:be:78:41:16:7f:ac:8e:24:a3:39:
e9:c2:00:23:2e:f5:c6:13:30:3e:72:23:73:e9:d1:
3a:60:1d:76:60:47:6a:6b:be:47:89:05:05:3b:43:
de:5f:89:f5:d1:5b:ac:47:08:2a:46:c4:fe:a6:d8:
dd:38:25:7b:e5:d5:de:cf:ad:f5:b1:f7:4a:a3:bd:
b0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E6:1A:A5:1A:63:01:5B:B8:EF:71:98:95:4D:21:8B:F0:64:01:A7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bc2e07bd-0660-42cf-aa8a-465c88ac6075.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
67:7d:5a:15:c6:9f:07:25:af:5f:0f:76:01:d3:94:c9:07:a5:
ae:d9:4c:82:da:66:c2:99:86:ab:3d:96:17:d1:7b:e9:f7:17:
71:43:cc:99:14:ad:81:26:ed:09:84:bc:92:58:3b:71:13:09:
5e:88:21:2e:ad:af:b7:f8:7f:34:4f:95:6b:fc:c7:81:a9:71:
ff:e9:97:f0:e1:fe:9a:38:93:5d:c0:18:2b:0c:23:78:74:a6:
ff:89:64:99:51:43:63:a6:78:70:da:b1:34:92:25:5c:41:40:
00:b1:ee:00:02:ac:e3:a6:cc:dc:64:63:bb:c9:ea:8d:7e:f2:
d6:67:ce:25:c3:66:0c:ca:ab:cc:8f:36:5b:29:50:3d:a1:13:
15:4a:6d:e3:31:9f:0b:8c:3a:90:7b:57:54:eb:7a:42:26:08:
a7:07:58:10:8a:00:a5:31:92:c3:ea:88:6e:7e:e3:b7:4d:78:
62:c7:5d:2e:97:1b:b4:db:13:7b:18:b2:20:5a:c7:34:45:95:
9c:ce:6f:69:b7:f6:b0:3e:0f:a0:d3:b9:53:89:c2:d1:d6:40:
08:59:ee:ed:1e:e1:e2:ae:10:5b:10:cd:ac:a7:0e:23:04:79:
d4:cd:51:00:e4:96:87:14:1d:72:3b:ff:f7:62:3e:46:25:b4:
26:c0:8f:6d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUH+gwj8zvFF/+9S9uUaYpBRzMNdMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMzA2MDAwMDAwWhcNMjQwNDEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMjk1YjAxMjY3MTBmMzJlY2UxNDU0ZTdlZmVmMDcyNGJl
YmM4N2QxNTNjYjI3MGJkNDIyMWZhNTlhNDkzNmIyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8DruvRc0KU53gpJIYcPqV+a2hTNwRdWNXLcDaS7Sedlxm
/Nu7f9+TXp3r0ml/gUQassRLZGNAfFyhhUEOiHETIaUnHGJZPe+QZ62g7zZAeehs
ULVTEGDPDDRZTSxuwg8Op+zWcE+P/j8bXc+nWgO07K7Hn9Gut7j0zL1SVe9pjgkq
4PQRNyJwuDpKhT6A4TsOMVMBTgC1lKuuezjzNDjlB4g+BzASYQW1O2cz8M0cqNX/
A9llGHZJvnhBFn+sjiSjOenCACMu9cYTMD5yI3Pp0TpgHXZgR2prvkeJBQU7Q95f
ifXRW6xHCCpGxP6m2N04JXvl1d7PrfWx90qjvbDFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUaOYapRpjAVu473GYlU0hi/BkAacwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2JjMmUwN2JkLTA2NjAtNDJjZi1hYThhLTQ2NWM4OGFjNjA3NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGd9WhXGnwclr18PdgHTlMkHpa7Z
TILaZsKZhqs9lhfRe+n3F3FDzJkUrYEm7QmEvJJYO3ETCV6IIS6tr7f4fzRPlWv8
x4Gpcf/pl/Dh/po4k13AGCsMI3h0pv+JZJlRQ2OmeHDasTSSJVxBQACx7gACrOOm
zNxkY7vJ6o1+8tZnziXDZgzKq8yPNlspUD2hExVKbeMxnwuMOpB7V1TrekImCKcH
WBCKAKUxksPqiG5+47dNeGLHXS6XG7TbE3sYsiBaxzRFlZzOb2m39rA+D6DTuVOJ
wtHWQAhZ7u0e4eKuEFsQzaynDiMEedTNUQDklocUHXI7//diPkYltCbAj20=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:18:09 2025 by rpki-client