Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d4207a8d-67d5-46f7-855c-0de6d4b10a73.roa
File: d4207a8d-67d5-46f7-855c-0de6d4b10a73.roa (raw, json)
Hash identifier: NmuPLN4GooZ1ywypa7XuuX7WXoKbRgAwDjLNEusKvoc=
Subject key identifier: 59:C1:EA:7A:29:DF:2D:E6:8C:D2:46:CA:6A:EA:D4:A9:E5:89:02:2B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1AD9AB0897A24AF2FAE7E9256050B8FAE8707C0A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d4207a8d-67d5-46f7-855c-0de6d4b10a73.roa
Signing time: Thu 22 Aug 2024 00:00:00 +0000
ROA not before: Thu 22 Aug 2024 00:00:00 +0000
ROA not after: Thu 26 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d9:ab:08:97:a2:4a:f2:fa:e7:e9:25:60:50:b8:fa:e8:70:7c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 22 00:00:00 2024 GMT
Not After : Sep 26 23:59:59 2024 GMT
Subject: serialNumber=748c9c971d536a917ebd0c664b65c2b1f3b28c2c0c32ed427e6490b3ac5b7177, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:8d:be:67:98:30:83:47:f4:46:ec:6c:bf:
dc:73:df:3f:ad:9a:08:a2:9f:56:4b:83:73:92:e6:
5b:82:03:4f:6e:08:d5:e0:6e:12:40:87:93:23:ac:
13:5c:f8:57:d0:28:af:f1:ce:c6:13:ef:9c:dc:de:
a6:26:44:94:fe:63:97:26:62:3c:bd:fd:bf:45:cd:
99:2c:58:ea:58:4e:07:e3:b3:51:af:9d:d6:3c:11:
a8:8b:c6:f4:48:45:0f:61:6e:8a:9e:f5:a7:aa:9e:
fc:01:9e:81:d0:3b:c5:7a:b0:ee:0c:69:53:db:ab:
5d:64:0d:36:18:7c:d3:44:b5:1a:37:b6:88:6c:d0:
ff:fd:42:57:8e:df:59:17:cb:37:c8:22:02:c0:3b:
93:2a:d8:52:9a:c1:7e:21:45:9b:e9:af:39:a0:1c:
fc:97:2b:80:df:b4:d5:2c:af:10:56:31:31:c1:f2:
09:2a:db:02:07:6f:4e:ad:8a:a7:27:36:95:4d:e0:
55:4e:cd:2b:56:fa:a1:b9:22:f9:b2:31:60:3e:d6:
d8:4b:13:b7:78:27:e8:aa:41:e3:24:09:af:e6:f8:
1b:1f:76:05:fc:c1:37:89:58:93:11:f3:ef:06:e6:
e7:4c:9b:c5:c2:54:07:58:a9:7b:97:f2:67:76:c5:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C1:EA:7A:29:DF:2D:E6:8C:D2:46:CA:6A:EA:D4:A9:E5:89:02:2B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d4207a8d-67d5-46f7-855c-0de6d4b10a73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ee:37:95:0b:c8:3f:7b:28:07:c1:ba:a4:da:f9:c4:32:87:
e4:2f:0e:63:ae:f8:b4:3a:29:e4:01:fa:7e:6d:90:a2:bd:a8:
1c:a0:41:12:35:6d:4e:ff:d4:16:fd:2d:30:83:d8:68:b2:4a:
a5:e7:a6:f5:31:59:33:f4:5c:47:da:80:85:54:bb:85:bf:58:
cc:dc:7e:e8:8c:0f:c3:68:82:21:4e:0e:c1:18:d6:22:1e:e1:
a7:b6:92:0c:7e:6b:54:0d:30:52:7a:81:92:f7:8c:9b:85:ca:
01:3a:29:5b:04:e3:93:53:34:48:ec:a2:4e:95:a9:5a:67:be:
2e:de:ff:df:8a:ea:a4:f9:08:e0:5f:b6:b2:06:3f:96:40:2c:
ff:03:e2:46:a0:ed:17:d1:2d:2e:c8:b6:53:87:09:de:78:64:
88:e4:bd:41:a5:d2:2f:fc:83:21:62:0a:5f:85:ff:5d:4e:41:
8e:da:a7:4b:11:b7:ed:10:8e:73:65:3f:0a:5e:47:31:87:ef:
06:e4:46:29:44:6d:bb:be:d7:44:e8:18:8d:cf:d3:51:15:63:
54:22:10:8f:f8:62:19:3d:96:fe:e2:71:e6:15:21:24:11:9b:
29:ed:80:d3:c9:d7:35:96:c6:cb:1a:68:0a:c2:f1:b6:a6:c8:
b7:65:78:a0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGtmrCJeiSvL65+klYFC4+uhwfAowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwODIyMDAwMDAwWhcNMjQwOTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NDhjOWM5NzFkNTM2YTkxN2ViZDBjNjY0YjY1YzJiMWYz
YjI4YzJjMGMzMmVkNDI3ZTY0OTBiM2FjNWI3MTc3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5/I2+Z5gwg0f0Ruxsv9xz3z+tmgiin1ZLg3OS5luCA09u
CNXgbhJAh5MjrBNc+FfQKK/xzsYT75zc3qYmRJT+Y5cmYjy9/b9FzZksWOpYTgfj
s1GvndY8EaiLxvRIRQ9hboqe9aeqnvwBnoHQO8V6sO4MaVPbq11kDTYYfNNEtRo3
tohs0P/9QleO31kXyzfIIgLAO5Mq2FKawX4hRZvprzmgHPyXK4DftNUsrxBWMTHB
8gkq2wIHb06tiqcnNpVN4FVOzStW+qG5IvmyMWA+1thLE7d4J+iqQeMkCa/m+Bsf
dgX8wTeJWJMR8+8G5udMm8XCVAdYqXuX8md2xYVtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWcHqeinfLeaM0kbKaurUqeWJAiswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Q0MjA3YThkLTY3ZDUtNDZmNy04NTVjLTBkZTZkNGIxMGE3My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAA/uN5ULyD97KAfBuqTa+cQyh+Qv
DmOu+LQ6KeQB+n5tkKK9qBygQRI1bU7/1Bb9LTCD2GiySqXnpvUxWTP0XEfagIVU
u4W/WMzcfuiMD8NogiFODsEY1iIe4ae2kgx+a1QNMFJ6gZL3jJuFygE6KVsE45NT
NEjsok6VqVpnvi7e/9+K6qT5COBftrIGP5ZALP8D4kag7RfRLS7ItlOHCd54ZIjk
vUGl0i/8gyFiCl+F/11OQY7ap0sRt+0QjnNlPwpeRzGH7wbkRilEbbu+10ToGI3P
01EVY1QiEI/4Yhk9lv7iceYVISQRmyntgNPJ1zWWxssaaArC8bamyLdleKA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:53:26 2025 by rpki-client