Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d0046da3-3d28-4282-a6b5-82db59e108aa.roa
File: d0046da3-3d28-4282-a6b5-82db59e108aa.roa (raw, json)
Hash identifier: M/to108TN4O7I2KCWdiEl8qZUey4+p8Aq5PEyrQTrjo=
Subject key identifier: 9D:03:6A:A1:70:BA:40:CA:9E:1D:EF:2F:44:B5:03:75:30:15:38:4D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 262CFAA1341F09AA40AA73D7B8C9A3BF508A71E6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d0046da3-3d28-4282-a6b5-82db59e108aa.roa
Signing time: Wed 30 Oct 2024 00:00:00 +0000
ROA not before: Wed 30 Oct 2024 00:00:00 +0000
ROA not after: Wed 04 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:2c:fa:a1:34:1f:09:aa:40:aa:73:d7:b8:c9:a3:bf:50:8a:71:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 30 00:00:00 2024 GMT
Not After : Dec 4 23:59:59 2024 GMT
Subject: serialNumber=9767e02b31950240a54265cc012a9608b7c581a8fcf43caf4f7dbf55bc410731, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:c3:0f:23:30:81:dd:8c:f1:bc:16:ca:7d:
0d:05:8b:e5:ab:3f:24:b7:4c:aa:03:2f:69:e3:e0:
62:56:b5:4f:9f:e6:49:56:00:20:8b:22:a0:55:c9:
2b:d8:da:96:82:d1:2b:8a:9e:9e:ba:7c:80:c3:65:
ab:8f:24:4d:ea:af:7c:34:b7:d3:2e:33:97:3d:0c:
d3:ae:d4:c1:83:cd:c5:fb:98:5d:49:99:07:ce:72:
14:3a:ee:e5:47:18:49:77:ad:7e:78:f9:2e:c4:41:
ab:b2:75:41:b1:50:af:82:00:1d:3e:b8:a6:59:26:
21:98:37:0c:dc:ec:ae:4b:15:8b:4f:4c:c5:e1:a2:
fb:ba:d8:c4:0e:08:a1:fc:9a:f5:dd:0e:e2:41:11:
be:cf:08:b7:ba:3f:f4:0d:d6:e7:2f:bb:05:7e:4d:
13:52:91:4c:7c:d6:c4:17:86:54:5b:95:7c:35:af:
0c:25:62:ee:ee:2a:c8:c1:c4:69:22:9e:ca:b0:e4:
36:47:9a:2d:68:2c:d8:1d:c0:ad:bc:f9:2a:5a:95:
50:bc:9d:44:d4:4a:bc:9b:14:c6:55:d5:a3:31:a8:
7c:a1:7c:bb:8a:29:ca:9a:f9:09:77:46:ed:a2:c8:
48:30:8d:78:ef:b9:7d:e8:39:67:d2:9c:cf:16:b9:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:03:6A:A1:70:BA:40:CA:9E:1D:EF:2F:44:B5:03:75:30:15:38:4D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d0046da3-3d28-4282-a6b5-82db59e108aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:11:ef:46:b8:25:8b:d6:68:f9:62:96:86:f0:7e:68:2a:a6:
1c:a0:93:31:64:09:fc:31:73:a6:06:18:5d:65:ca:1c:e2:00:
08:f8:5a:e3:a3:1a:9e:19:42:9e:28:2e:8c:98:9d:01:12:5f:
03:55:48:8f:81:89:1a:4d:b9:cf:b9:cc:d8:1c:05:ad:81:43:
a2:32:cf:de:89:44:1b:9b:5a:14:22:a5:26:4f:fd:09:38:c3:
87:71:f4:7a:6f:3d:d8:ac:af:e8:db:70:ef:61:99:34:2b:54:
15:20:79:e5:85:c7:10:77:4e:37:49:4a:7a:93:e9:e4:3a:20:
ee:e1:12:3f:5b:9f:1d:de:2a:99:b4:a8:d8:75:5b:a0:08:e3:
42:e9:a1:87:7e:aa:31:d4:99:c8:eb:10:15:62:1b:01:4a:95:
17:b3:3d:2a:bc:2b:ab:a0:ea:a3:f7:87:7d:98:33:40:d5:36:
b5:be:cd:a8:08:21:02:3b:d6:5a:f7:3b:40:77:ac:e7:1e:a0:
0e:4e:86:99:17:38:6d:a5:fe:1c:47:10:8f:1f:54:0e:33:89:
cd:7c:fd:72:e8:30:09:2f:32:1f:b2:bf:5f:10:8f:57:6a:28:
84:d1:52:a8:ea:4d:02:ee:8b:9d:cd:b6:9c:94:6e:94:fd:50:
ab:c9:b2:0c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJiz6oTQfCapAqnPXuMmjv1CKceYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDMwMDAwMDAwWhcNMjQxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NzY3ZTAyYjMxOTUwMjQwYTU0MjY1Y2MwMTJhOTYwOGI3
YzU4MWE4ZmNmNDNjYWY0ZjdkYmY1NWJjNDEwNzMxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyEMMPIzCB3YzxvBbKfQ0Fi+WrPyS3TKoDL2nj4GJWtU+f
5klWACCLIqBVySvY2paC0SuKnp66fIDDZauPJE3qr3w0t9MuM5c9DNOu1MGDzcX7
mF1JmQfOchQ67uVHGEl3rX54+S7EQauydUGxUK+CAB0+uKZZJiGYNwzc7K5LFYtP
TMXhovu62MQOCKH8mvXdDuJBEb7PCLe6P/QN1ucvuwV+TRNSkUx81sQXhlRblXw1
rwwlYu7uKsjBxGkinsqw5DZHmi1oLNgdwK28+SpalVC8nUTUSrybFMZV1aMxqHyh
fLuKKcqa+Ql3Ru2iyEgwjXjvuX3oOWfSnM8WufO7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnQNqoXC6QMqeHe8vRLUDdTAVOE0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2QwMDQ2ZGEzLTNkMjgtNDI4Mi1hNmI1LTgyZGI1OWUxMDhhYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKQR70a4JYvWaPlilobwfmgqphyg
kzFkCfwxc6YGGF1lyhziAAj4WuOjGp4ZQp4oLoyYnQESXwNVSI+BiRpNuc+5zNgc
Ba2BQ6Iyz96JRBubWhQipSZP/Qk4w4dx9HpvPdisr+jbcO9hmTQrVBUgeeWFxxB3
TjdJSnqT6eQ6IO7hEj9bnx3eKpm0qNh1W6AI40LpoYd+qjHUmcjrEBViGwFKlRez
PSq8K6ug6qP3h32YM0DVNrW+zagIIQI71lr3O0B3rOceoA5OhpkXOG2l/hxHEI8f
VA4zic18/XLoMAkvMh+yv18Qj1dqKITRUqjqTQLui53NtpyUbpT9UKvJsgw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:44:26 2025 by rpki-client