Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c60f16b3-e8c9-4b19-a221-86ca9161b89f.roa
File: c60f16b3-e8c9-4b19-a221-86ca9161b89f.roa (raw, json)
Hash identifier: XWhOk6gMD8gmW3UyL1J6HmFe0GhAszYIJau2QPtNagE=
Subject key identifier: E6:C8:50:B0:44:35:C8:7E:A7:EE:1D:95:F6:AD:C8:06:17:C5:E9:91
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 55484E9FFB27AF3DC8AA2261BA7891A84B390F1D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c60f16b3-e8c9-4b19-a221-86ca9161b89f.roa
Signing time: Sun 17 Nov 2024 00:00:00 +0000
ROA not before: Sun 17 Nov 2024 00:00:00 +0000
ROA not after: Sun 22 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:48:4e:9f:fb:27:af:3d:c8:aa:22:61:ba:78:91:a8:4b:39:0f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 17 00:00:00 2024 GMT
Not After : Dec 22 23:59:59 2024 GMT
Subject: serialNumber=2e74cf3f15aae322f8a697b59c562a66a7cba47beabd2eac9d12fa5ad9abb1ce, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:85:59:25:35:67:9e:c2:a4:72:b1:fa:ac:
02:08:92:4a:06:95:ea:7c:d5:79:a4:77:eb:d0:89:
c4:ce:3c:fd:9b:9d:24:5c:4f:d5:ca:43:49:4e:f3:
5d:83:15:74:fa:5d:19:b8:5a:26:d6:7c:be:37:a3:
01:a0:0d:a8:8f:a7:d4:13:88:ca:73:c9:2a:30:1e:
cb:61:07:1c:e5:90:3f:f1:4d:85:bf:bd:a7:ef:ee:
dd:d5:d8:a6:83:c6:e7:47:49:3c:3f:33:52:a4:68:
bb:70:04:a3:df:37:c8:cd:e9:e1:91:01:ca:f9:8d:
bf:41:e4:b1:fd:19:54:9a:e2:e5:7a:28:f1:b6:9f:
fc:cd:a4:4e:60:7d:1d:72:07:48:af:55:47:34:a9:
bc:d2:ca:45:11:2d:64:ba:be:bf:51:a7:3c:ad:a2:
4d:6a:44:a6:aa:fa:5c:9d:57:40:41:aa:ef:2b:96:
8a:6a:af:e7:f4:44:69:53:3e:33:77:17:6b:88:d3:
aa:ee:3c:44:89:9c:b8:0b:4d:c2:d4:ec:22:e0:93:
16:fb:f5:e0:1b:e7:22:2b:07:38:3b:71:d2:ee:e8:
27:4c:35:f2:3b:aa:55:ef:e0:a3:e3:04:ac:ae:42:
92:d3:17:b4:91:32:81:bb:a1:13:a6:3b:35:a1:f5:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C8:50:B0:44:35:C8:7E:A7:EE:1D:95:F6:AD:C8:06:17:C5:E9:91
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c60f16b3-e8c9-4b19-a221-86ca9161b89f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:96:e3:b7:7f:63:47:ef:94:c3:ee:e1:b5:ee:db:88:8b:1f:
2f:f4:29:57:3f:b6:9e:06:80:eb:be:cd:91:3e:b6:f9:7d:9b:
86:43:30:3d:00:4f:17:95:02:21:85:bf:71:a0:0c:73:ac:a4:
bb:11:e5:be:30:2f:90:c9:85:67:38:82:5e:2b:57:62:44:d0:
ed:e4:95:91:a9:e8:81:08:66:54:e9:d7:71:ce:d0:3c:54:0a:
72:ea:4f:c3:79:d7:13:8c:f6:30:2e:16:44:6e:a7:27:12:50:
bf:45:bb:1d:6c:04:6c:8e:26:40:14:62:79:e7:8d:34:ec:31:
fc:0e:d8:38:f0:94:d7:31:cf:f9:51:3d:4a:3a:10:d0:9b:fe:
ca:2f:c2:e8:1c:63:04:24:b2:b0:81:3f:cd:03:0b:3d:5f:62:
00:8b:38:65:ab:39:3d:0e:50:50:a9:26:94:c3:01:5c:b5:35:
c2:7c:ce:a3:f3:57:fe:1b:56:57:65:2d:35:09:8b:3b:30:b3:
bb:ef:59:f9:f3:16:55:88:bc:78:25:7e:13:76:2e:ca:78:08:
e4:78:31:4c:2b:3c:c8:25:63:cb:6c:11:07:d9:33:e6:0d:33:
60:bc:2b:ff:5b:24:a8:9b:9e:19:77:03:97:86:ce:8d:78:0a:
92:e8:0c:4e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVUhOn/snrz3IqiJhuniRqEs5Dx0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMTE3MDAwMDAwWhcNMjQxMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyZTc0Y2YzZjE1YWFlMzIyZjhhNjk3YjU5YzU2MmE2NmE3
Y2JhNDdiZWFiZDJlYWM5ZDEyZmE1YWQ5YWJiMWNlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYFIVZJTVnnsKkcrH6rAIIkkoGlep81Xmkd+vQicTOPP2b
nSRcT9XKQ0lO812DFXT6XRm4WibWfL43owGgDaiPp9QTiMpzySowHsthBxzlkD/x
TYW/vafv7t3V2KaDxudHSTw/M1KkaLtwBKPfN8jN6eGRAcr5jb9B5LH9GVSa4uV6
KPG2n/zNpE5gfR1yB0ivVUc0qbzSykURLWS6vr9Rpzytok1qRKaq+lydV0BBqu8r
lopqr+f0RGlTPjN3F2uI06ruPESJnLgLTcLU7CLgkxb79eAb5yIrBzg7cdLu6CdM
NfI7qlXv4KPjBKyuQpLTF7SRMoG7oROmOzWh9ajFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5shQsEQ1yH6n7h2V9q3IBhfF6ZEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2M2MGYxNmIzLWU4YzktNGIxOS1hMjIxLTg2Y2E5MTYxYjg5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAK6W47d/Y0fvlMPu4bXu24iLHy/0
KVc/tp4GgOu+zZE+tvl9m4ZDMD0ATxeVAiGFv3GgDHOspLsR5b4wL5DJhWc4gl4r
V2JE0O3klZGp6IEIZlTp13HO0DxUCnLqT8N51xOM9jAuFkRupycSUL9Fux1sBGyO
JkAUYnnnjTTsMfwO2DjwlNcxz/lRPUo6ENCb/sovwugcYwQksrCBP80DCz1fYgCL
OGWrOT0OUFCpJpTDAVy1NcJ8zqPzV/4bVldlLTUJizsws7vvWfnzFlWIvHglfhN2
Lsp4COR4MUwrPMglY8tsEQfZM+YNM2C8K/9bJKibnhl3A5eGzo14CpLoDE4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:31:26 2025 by rpki-client