Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c3560862-56e7-4293-ac0e-e7e05a503f49.roa
File: c3560862-56e7-4293-ac0e-e7e05a503f49.roa (raw, json)
Hash identifier: OqeNTG402Fu5AWX1sI1am2hA0GW8gI5i0OPfF+xgklU=
Subject key identifier: 8D:F6:3C:05:57:08:9B:FE:87:04:46:FB:74:E9:6D:67:2F:42:C9:29
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3BB2C6F41B2C7EB70EED34D3B7D80045E0464562
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c3560862-56e7-4293-ac0e-e7e05a503f49.roa
Signing time: Fri 07 Jul 2023 00:00:00 +0000
ROA not before: Fri 07 Jul 2023 00:00:00 +0000
ROA not after: Fri 11 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:b2:c6:f4:1b:2c:7e:b7:0e:ed:34:d3:b7:d8:00:45:e0:46:45:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 7 00:00:00 2023 GMT
Not After : Aug 11 23:59:59 2023 GMT
Subject: serialNumber=43a4612e5f55a96000d90f0c8b13a215df1580aa3f708bba9efeb8aae7ba8e25, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d3:85:7c:8e:7f:21:f9:59:94:23:7e:49:95:
c8:46:9e:dd:41:34:dd:5b:2e:43:0f:c9:5f:4e:fe:
02:f4:96:cb:90:83:e4:99:94:97:78:01:6c:cc:39:
40:03:f5:1a:14:b0:ab:cd:7e:96:48:37:85:07:aa:
aa:90:7a:fb:9e:f1:4a:68:79:a6:4b:28:2e:a5:7b:
dc:06:8b:07:fe:b6:29:1d:0f:c6:3a:3a:31:ec:92:
77:e4:cf:9a:3d:3c:25:bc:2d:0f:18:44:e7:9e:ab:
18:8b:f4:79:e5:27:2c:a0:28:fc:5b:fb:7a:0a:c7:
4a:4c:1e:08:e6:34:17:a1:13:cf:7c:0c:c2:92:e3:
44:b1:ae:ed:74:9d:85:e2:7a:d0:9d:1b:62:d3:82:
2e:bd:b8:14:d2:2b:7d:e0:10:e4:5e:85:8e:6d:a4:
7b:3f:c3:f0:9e:27:66:f1:01:21:94:28:ea:84:1c:
83:50:f6:0d:7b:66:f1:56:ae:1a:62:d0:da:05:09:
82:6f:e9:79:c2:28:20:12:8d:7d:4c:28:c4:98:e7:
80:e8:bd:d9:25:91:b7:b2:5f:85:04:f6:55:30:19:
fb:d0:81:5f:a7:70:1f:2d:24:2e:d2:6a:98:50:c8:
ed:5a:bb:1a:e4:15:53:07:6a:1e:dc:64:12:8a:0d:
96:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F6:3C:05:57:08:9B:FE:87:04:46:FB:74:E9:6D:67:2F:42:C9:29
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c3560862-56e7-4293-ac0e-e7e05a503f49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4d:7f:91:19:d3:9d:6b:81:79:84:c5:aa:4a:17:1a:a3:93:
27:58:d7:b0:34:7e:54:69:03:22:63:cd:18:49:29:47:87:37:
fe:14:00:4a:64:ca:2c:a8:68:3e:a7:2b:63:ff:2c:00:20:ad:
3f:ba:b7:ab:3b:f9:96:0a:ba:fc:bb:9a:3d:7e:0a:26:a4:66:
46:19:dc:4f:37:71:99:b2:7d:62:94:6a:ef:1a:56:66:12:d0:
9b:b4:4e:28:84:c6:1a:52:2f:1f:ec:0f:5f:70:df:8a:6c:a6:
87:08:c8:ea:a2:60:75:f9:4a:1a:5f:98:3c:47:1b:96:28:86:
60:93:4c:b5:b5:cf:f4:35:5f:0c:bb:99:a1:a4:bc:88:12:7b:
b1:aa:00:e0:32:b2:04:fd:8f:4e:a1:9d:43:ab:d5:36:23:2a:
92:da:43:20:ff:2e:3b:fd:a9:92:8a:e9:1c:4d:21:f1:7e:a2:
99:ce:f0:a4:c9:81:18:bd:e1:9e:62:68:6d:22:07:90:67:39:
70:a8:ba:a7:bf:0b:16:17:da:71:f4:9e:a0:1d:00:67:4f:ba:
fb:c5:83:7b:83:25:be:50:00:8e:8b:ec:45:fe:48:e1:ff:45:
3e:62:df:35:45:a8:7d:5d:ad:42:ed:0b:20:27:1e:bc:de:55:
72:21:96:39
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUO7LG9BssfrcO7TTTt9gAReBGRWIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzA3MDAwMDAwWhcNMjMwODExMjM1OTU5
WjB6MUkwRwYDVQQFE0A0M2E0NjEyZTVmNTVhOTYwMDBkOTBmMGM4YjEzYTIxNWRm
MTU4MGFhM2Y3MDhiYmE5ZWZlYjhhYWU3YmE4ZTI1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDw04V8jn8h+VmUI35JlchGnt1BNN1bLkMPyV9O/gL0lsuQ
g+SZlJd4AWzMOUAD9RoUsKvNfpZIN4UHqqqQevue8UpoeaZLKC6le9wGiwf+tikd
D8Y6OjHsknfkz5o9PCW8LQ8YROeeqxiL9HnlJyygKPxb+3oKx0pMHgjmNBehE898
DMKS40Sxru10nYXietCdG2LTgi69uBTSK33gEORehY5tpHs/w/CeJ2bxASGUKOqE
HINQ9g17ZvFWrhpi0NoFCYJv6XnCKCASjX1MKMSY54DovdklkbeyX4UE9lUwGfvQ
gV+ncB8tJC7SaphQyO1auxrkFVMHah7cZBKKDZa7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjfY8BVcIm/6HBEb7dOltZy9CySkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2MzNTYwODYyLTU2ZTctNDI5My1hYzBlLWU3ZTA1YTUwM2Y0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAH9Nf5EZ051rgXmExapKFxqjkydY
17A0flRpAyJjzRhJKUeHN/4UAEpkyiyoaD6nK2P/LAAgrT+6t6s7+ZYKuvy7mj1+
CiakZkYZ3E83cZmyfWKUau8aVmYS0Ju0TiiExhpSLx/sD19w34pspocIyOqiYHX5
ShpfmDxHG5YohmCTTLW1z/Q1Xwy7maGkvIgSe7GqAOAysgT9j06hnUOr1TYjKpLa
QyD/Ljv9qZKK6RxNIfF+opnO8KTJgRi94Z5iaG0iB5BnOXCouqe/CxYX2nH0nqAd
AGdPuvvFg3uDJb5QAI6L7EX+SOH/RT5i3zVFqH1drULtCyAnHrzeVXIhljk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:40:42 2025 by rpki-client