Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d95359d0-ab8b-44f6-8f14-978cb39e4b46.roa
File: d95359d0-ab8b-44f6-8f14-978cb39e4b46.roa (raw, json)
Hash identifier: 1+IzikrcqH3yTT8SZQMVQj00Q7174wce3rjeZFzxTyw=
Subject key identifier: 57:EC:30:E5:6D:8B:3B:E3:2D:09:13:6D:A5:BD:26:3A:9A:D2:27:D2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6B4E3D373E98962DF84359032F07C2A688F1C81C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d95359d0-ab8b-44f6-8f14-978cb39e4b46.roa
Signing time: Sun 02 Mar 2025 13:18:19 +0000
ROA not before: Sun 02 Mar 2025 13:18:19 +0000
ROA not after: Sun 06 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:4e:3d:37:3e:98:96:2d:f8:43:59:03:2f:07:c2:a6:88:f1:c8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 2 13:18:19 2025 GMT
Not After : Apr 6 23:59:59 2025 GMT
Subject: serialNumber=303d88a6aa5441be13da2c6b4236f853c298d623fa72cbf4d9ffb0b04f9585fa, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:03:75:b6:e8:c6:ed:38:b9:dd:b0:66:6a:5e:
75:5a:c4:7c:60:59:c5:bf:1f:c7:10:2a:b5:54:02:
4e:ed:3f:40:f1:0f:d7:19:be:e0:6c:57:8c:32:43:
ad:f2:ff:6b:94:64:3f:09:d3:1f:cb:f8:60:1c:3b:
8a:60:ab:92:b3:31:95:58:48:7a:6d:39:18:80:90:
14:1a:fa:90:f6:0a:ba:19:2f:7e:f2:41:28:ed:82:
a8:1c:07:81:2a:1d:b9:b1:02:73:fd:5c:a6:18:f5:
0a:e6:ad:8a:fc:e8:f1:45:cf:6b:75:b0:33:d4:3d:
ae:7a:a4:ce:ec:d0:d5:99:6e:25:8d:62:89:6e:20:
ec:e0:1e:9d:fc:59:cf:0c:aa:f1:b3:ce:13:e9:61:
28:3a:da:25:08:e5:c7:2c:42:b1:f0:c5:b3:9a:b6:
37:c2:37:3f:81:09:73:60:82:29:1e:38:e9:86:65:
9a:43:98:5c:2c:69:94:1c:bd:87:bb:24:6f:c5:7b:
6a:8a:11:5d:c0:1e:cf:e1:f3:3d:05:33:57:f0:5b:
31:88:14:af:ef:0b:7e:07:02:cf:a5:83:e9:18:ff:
5f:eb:ee:d0:99:96:cd:c2:a9:24:b7:91:f6:22:8c:
f1:b7:99:b4:89:41:ab:0f:60:05:d3:a8:16:e2:70:
7c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EC:30:E5:6D:8B:3B:E3:2D:09:13:6D:A5:BD:26:3A:9A:D2:27:D2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d95359d0-ab8b-44f6-8f14-978cb39e4b46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
54:68:79:07:c5:21:c4:d0:be:ec:08:56:27:eb:1b:22:86:52:
10:b1:78:dc:82:42:4d:f2:e2:8b:f1:96:08:25:51:3f:75:89:
38:52:fe:cc:cd:73:9a:8c:9f:6c:5c:24:aa:7b:d4:8e:e5:da:
dc:d5:78:b7:6f:39:73:5d:6c:04:da:9b:3e:c4:24:e3:ce:64:
d7:5e:62:7b:1d:3f:96:bf:e9:82:bf:62:53:7a:ba:b8:11:38:
7f:43:ee:dd:72:81:55:d3:88:be:00:57:44:1e:b8:b9:00:d3:
55:c1:1c:fe:b8:67:b0:46:fb:15:b4:26:13:97:fe:2e:1a:c3:
5e:f4:3e:15:f7:16:49:ef:26:b4:27:ba:af:02:58:11:fb:23:
3d:ef:d1:6e:8d:c6:80:1b:d8:f0:ee:68:0b:b1:34:69:25:94:
9f:e5:63:4c:b6:e0:b9:4e:c0:d0:22:60:27:5a:bc:1f:c5:2e:
80:71:fa:13:a5:2d:e1:b0:29:e0:ed:f0:00:38:b5:7e:25:e0:
3b:3d:ac:35:67:cf:44:02:80:17:a2:ad:ed:ce:af:43:47:a7:
69:4d:4d:af:ca:c2:f1:eb:c4:e2:7a:4c:a9:41:d5:c8:3f:2c:
37:c5:d0:4c:40:26:d0:d5:7f:aa:4c:ed:34:aa:43:61:9b:36:
2b:4e:7c:e6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUa049Nz6Yli34Q1kDLwfCpojxyBwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMzAyMTMxODE5WhcNMjUwNDA2MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMDNkODhhNmFhNTQ0MWJlMTNkYTJjNmI0MjM2Zjg1M2My
OThkNjIzZmE3MmNiZjRkOWZmYjBiMDRmOTU4NWZhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCgA3W26MbtOLndsGZqXnVaxHxgWcW/H8cQKrVUAk7tP0Dx
D9cZvuBsV4wyQ63y/2uUZD8J0x/L+GAcO4pgq5KzMZVYSHptORiAkBQa+pD2CroZ
L37yQSjtgqgcB4EqHbmxAnP9XKYY9QrmrYr86PFFz2t1sDPUPa56pM7s0NWZbiWN
YoluIOzgHp38Wc8MqvGzzhPpYSg62iUI5ccsQrHwxbOatjfCNz+BCXNggikeOOmG
ZZpDmFwsaZQcvYe7JG/Fe2qKEV3AHs/h8z0FM1fwWzGIFK/vC34HAs+lg+kY/1/r
7tCZls3CqSS3kfYijPG3mbSJQasPYAXTqBbicHwzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUV+ww5W2LO+MtCRNtpb0mOprSJ9IwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Q5NTM1OWQwLWFiOGItNDRmNi04ZjE0LTk3OGNiMzllNGI0Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFRoeQfFIcTQvuwIVifrGyKGUhCx
eNyCQk3y4ovxlgglUT91iThS/szNc5qMn2xcJKp71I7l2tzVeLdvOXNdbATamz7E
JOPOZNdeYnsdP5a/6YK/YlN6urgROH9D7t1ygVXTiL4AV0QeuLkA01XBHP64Z7BG
+xW0JhOX/i4aw170PhX3FknvJrQnuq8CWBH7Iz3v0W6NxoAb2PDuaAuxNGkllJ/l
Y0y24LlOwNAiYCdavB/FLoBx+hOlLeGwKeDt8AA4tX4l4Ds9rDVnz0QCgBeire3O
r0NHp2lNTa/KwvHrxOJ6TKlB1cg/LDfF0ExAJtDVf6pM7TSqQ2GbNitOfOY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:32 2025 by rpki-client