Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca6b58d2-0d01-4a65-bf2b-41ad6f84b9ab.roa
File: ca6b58d2-0d01-4a65-bf2b-41ad6f84b9ab.roa (raw, json)
Hash identifier: YaaaFskoALmwUODUfO0ae83Z9SZzak7PYWTFCs5z+KA=
Subject key identifier: 8E:1B:F3:F0:7F:66:72:63:E5:04:22:F8:04:C9:64:DB:4B:45:A5:8A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1F095B577313EEB49A75DEDC66311CB0B7679669
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca6b58d2-0d01-4a65-bf2b-41ad6f84b9ab.roa
Signing time: Wed 15 Nov 2023 00:00:00 +0000
ROA not before: Wed 15 Nov 2023 00:00:00 +0000
ROA not after: Wed 20 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:09:5b:57:73:13:ee:b4:9a:75:de:dc:66:31:1c:b0:b7:67:96:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 15 00:00:00 2023 GMT
Not After : Dec 20 23:59:59 2023 GMT
Subject: serialNumber=10034ead5c42f356255bf03d27e96d1c717915d39447d3b43c3e4d563d826ad5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:7d:e1:e9:5f:a9:40:88:1a:0a:ac:a0:cd:
2e:32:de:38:8c:e8:79:27:dc:9f:1c:b4:ee:fd:f3:
b9:2a:a9:04:cf:3c:1a:9e:f0:82:92:d1:5b:34:5e:
6d:01:c6:3c:4c:ac:20:e7:8d:ac:1c:dd:c6:26:3f:
81:43:56:64:b7:74:fb:13:66:07:0c:ef:66:bb:ac:
d8:b1:ae:dc:37:b7:82:88:01:24:10:1c:7f:de:01:
93:34:de:c9:66:f9:fa:26:0d:1b:fb:c1:52:de:5a:
07:b5:4b:f3:b2:67:3d:da:45:a9:9a:d8:55:63:9c:
9b:61:01:12:63:72:a6:94:02:96:95:82:69:11:c0:
1c:0f:3f:ae:7c:a8:82:4b:c0:e4:19:47:3e:f5:cc:
ef:10:18:76:98:07:23:ef:5e:a9:1e:01:d8:35:4b:
8d:8e:c8:0c:af:3b:b0:dc:eb:d0:51:2e:10:22:53:
77:2a:64:14:f8:33:b6:b3:aa:5e:0b:14:56:c7:91:
36:b9:6b:17:c6:5e:68:bf:a9:c4:31:f2:e6:92:44:
fc:a5:02:44:b9:54:74:21:c2:91:62:17:4b:65:47:
8f:57:77:cf:95:85:65:98:26:ea:bb:94:07:26:e7:
aa:63:84:52:73:a5:c6:64:ed:65:be:c6:6d:10:1c:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1B:F3:F0:7F:66:72:63:E5:04:22:F8:04:C9:64:DB:4B:45:A5:8A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca6b58d2-0d01-4a65-bf2b-41ad6f84b9ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
33:1d:44:e8:69:8c:02:ca:cd:57:7b:c4:c5:a9:f7:98:14:5f:
68:eb:0b:79:34:fd:5b:b0:c3:65:22:64:7e:b3:0f:aa:04:8d:
0a:2a:13:24:33:07:de:69:76:b4:40:87:de:a3:53:23:e7:db:
21:bd:20:57:1c:0e:1a:a9:18:04:8e:f6:cf:f2:a6:f2:a5:44:
1e:00:8a:2e:2b:99:78:a0:e7:af:b5:15:57:10:aa:c3:9c:ca:
8e:18:db:d8:42:ba:6d:8d:1f:60:7f:44:42:98:17:5f:49:33:
2c:27:4a:5c:f5:1a:5d:af:11:e5:66:04:fd:5a:6d:9a:24:2b:
1b:59:24:b8:1b:8f:c1:dd:00:cd:93:39:2f:f0:fd:30:57:3d:
97:89:7b:44:7e:1d:a8:f8:5d:35:50:27:ee:3a:88:0d:c7:36:
03:1e:f5:ef:39:02:d4:e5:07:c9:f2:d6:2f:d8:84:41:2e:bf:
83:ea:fb:9f:83:cc:d9:c6:36:c2:18:8c:98:f9:4d:29:3a:7c:
5d:bd:97:ce:a7:28:39:12:53:6e:10:e6:c2:2c:73:90:16:f7:
d4:03:94:83:6a:0f:18:92:f3:7f:e4:75:29:87:53:84:c1:d9:
63:e0:de:e9:90:cd:0f:15:74:30:ce:7c:e2:a6:0d:8a:33:2e:
99:e1:02:50
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHwlbV3MT7rSadd7cZjEcsLdnlmkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTE1MDAwMDAwWhcNMjMxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMDAzNGVhZDVjNDJmMzU2MjU1YmYwM2QyN2U5NmQxYzcx
NzkxNWQzOTQ0N2QzYjQzYzNlNGQ1NjNkODI2YWQ1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAfH3h6V+pQIgaCqygzS4y3jiM6Hkn3J8ctO7987kqqQTP
PBqe8IKS0Vs0Xm0BxjxMrCDnjawc3cYmP4FDVmS3dPsTZgcM72a7rNixrtw3t4KI
ASQQHH/eAZM03slm+fomDRv7wVLeWge1S/OyZz3aRama2FVjnJthARJjcqaUApaV
gmkRwBwPP658qIJLwOQZRz71zO8QGHaYByPvXqkeAdg1S42OyAyvO7Dc69BRLhAi
U3cqZBT4M7azql4LFFbHkTa5axfGXmi/qcQx8uaSRPylAkS5VHQhwpFiF0tlR49X
d8+VhWWYJuq7lAcm56pjhFJzpcZk7WW+xm0QHCybAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjhvz8H9mcmPlBCL4BMlk20tFpYowHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NhNmI1OGQyLTBkMDEtNGE2NS1iZjJiLTQxYWQ2Zjg0YjlhYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADMdROhpjALKzVd7xMWp95gUX2jr
C3k0/Vuww2UiZH6zD6oEjQoqEyQzB95pdrRAh96jUyPn2yG9IFccDhqpGASO9s/y
pvKlRB4Aii4rmXig56+1FVcQqsOcyo4Y29hCum2NH2B/REKYF19JMywnSlz1Gl2v
EeVmBP1abZokKxtZJLgbj8HdAM2TOS/w/TBXPZeJe0R+Haj4XTVQJ+46iA3HNgMe
9e85AtTlB8ny1i/YhEEuv4Pq+5+DzNnGNsIYjJj5TSk6fF29l86nKDkSU24Q5sIs
c5AW99QDlINqDxiS83/kdSmHU4TB2WPg3umQzQ8VdDDOfOKmDYozLpnhAlA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:51:17 2025 by rpki-client