Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dd4e16c5-0a01-4f48-8e56-dd77943b26c6.roa
File: dd4e16c5-0a01-4f48-8e56-dd77943b26c6.roa (raw, json)
Hash identifier: jhJVZPatLY70DjO8+FEtVl04GQp4SXjfeeM0gLrmjW0=
Subject key identifier: C0:D5:CF:61:CB:D2:A7:D5:39:5D:85:5B:36:4C:89:72:4E:D0:93:BE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3ECDB978A33597765C8E8546BC5C8E3C96E56189
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dd4e16c5-0a01-4f48-8e56-dd77943b26c6.roa
Signing time: Thu 11 Jul 2024 00:00:00 +0000
ROA not before: Thu 11 Jul 2024 00:00:00 +0000
ROA not after: Thu 15 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:cd:b9:78:a3:35:97:76:5c:8e:85:46:bc:5c:8e:3c:96:e5:61:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 11 00:00:00 2024 GMT
Not After : Aug 15 23:59:59 2024 GMT
Subject: serialNumber=2e2dccd77678b9e901f5921b095d32fec5bd34a5f3b8552501264a59022fbee6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:59:73:71:70:d6:b4:69:97:98:a6:0f:eb:
30:06:bb:0e:82:c7:62:70:48:b8:13:05:f8:9c:51:
cf:c5:b4:b7:15:4b:eb:09:83:4f:52:1c:4b:36:b1:
53:b5:31:7e:c0:0b:38:ab:b8:78:1d:8d:69:71:1c:
36:27:c3:38:60:3f:8c:95:76:35:14:74:4f:5c:12:
ab:13:1d:7c:56:fd:c4:63:d3:b7:a5:dc:44:96:78:
dd:e1:e5:c8:d5:20:8a:70:ec:68:dc:32:0f:4c:2f:
05:c7:90:59:c7:45:5b:c4:ee:da:e9:00:01:b3:2f:
72:8e:6b:dd:26:06:57:b9:6b:7a:4a:79:30:fc:3d:
19:10:f0:f7:60:fb:79:1d:9b:75:6d:27:15:45:4c:
84:64:2e:ae:8e:f7:e3:d6:f3:0a:9e:ee:ae:e9:ef:
b7:a5:66:fd:23:94:fa:ea:53:e2:02:ff:1a:11:77:
25:19:67:5c:87:aa:35:ce:4d:b1:9a:96:b7:5e:b9:
02:11:0a:7a:09:ef:61:b9:ee:78:07:98:18:ef:5f:
9b:80:50:47:26:b1:b3:9a:36:8b:12:c7:23:cb:d7:
09:c1:62:78:f6:2a:62:9a:d8:8b:f5:0b:0d:b3:28:
5a:2d:19:9b:28:3f:cc:a5:79:c8:8f:44:e6:cb:26:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D5:CF:61:CB:D2:A7:D5:39:5D:85:5B:36:4C:89:72:4E:D0:93:BE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dd4e16c5-0a01-4f48-8e56-dd77943b26c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
11:94:f4:bd:a5:95:29:e9:12:20:4d:24:f4:74:17:2a:21:a6:
36:7f:e2:e7:45:35:19:94:b1:66:2f:ae:d1:30:08:d1:84:66:
63:58:32:20:81:60:3c:14:ce:bd:6e:dc:48:56:86:eb:63:67:
f5:83:4a:39:0d:34:73:59:5d:40:2f:6f:51:49:2c:23:96:68:
5c:f4:49:7f:9f:ef:04:0c:e0:42:40:9a:89:ce:09:b0:33:c2:
c7:1b:ef:9c:ad:34:50:2f:50:fe:0d:22:ac:7a:90:5f:9d:71:
a0:42:a3:2c:be:a2:d9:b2:b1:d5:d9:d4:7a:f2:ab:27:bb:74:
c1:93:c6:a2:4a:c4:93:9d:dd:4d:d2:4c:ff:6b:ff:d0:15:14:
28:df:75:23:e0:98:41:a8:9e:c1:43:de:4a:f5:46:6f:65:3c:
fd:c3:d5:25:7b:61:eb:48:d0:f5:b3:99:2d:8d:5c:c9:24:83:
5f:71:ff:88:1f:f8:e0:e6:f7:a2:b6:a1:37:7b:de:de:4a:46:
d5:f3:cd:e6:08:38:03:4e:43:ca:07:ac:f2:d3:48:40:3f:86:
94:d7:06:97:9d:67:02:7b:fe:e5:89:3b:44:d3:23:a1:85:5f:
f6:bd:50:38:73:43:15:61:62:3d:20:21:57:e2:cc:da:ca:1e:
9f:09:59:2f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPs25eKM1l3ZcjoVGvFyOPJblYYkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNzExMDAwMDAwWhcNMjQwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyZTJkY2NkNzc2NzhiOWU5MDFmNTkyMWIwOTVkMzJmZWM1
YmQzNGE1ZjNiODU1MjUwMTI2NGE1OTAyMmZiZWU2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC72VlzcXDWtGmXmKYP6zAGuw6Cx2JwSLgTBficUc/FtLcV
S+sJg09SHEs2sVO1MX7ACziruHgdjWlxHDYnwzhgP4yVdjUUdE9cEqsTHXxW/cRj
07el3ESWeN3h5cjVIIpw7GjcMg9MLwXHkFnHRVvE7trpAAGzL3KOa90mBle5a3pK
eTD8PRkQ8Pdg+3kdm3VtJxVFTIRkLq6O9+PW8wqe7q7p77elZv0jlPrqU+IC/xoR
dyUZZ1yHqjXOTbGalrdeuQIRCnoJ72G57ngHmBjvX5uAUEcmsbOaNosSxyPL1wnB
Ynj2KmKa2Iv1Cw2zKFotGZsoP8yleciPRObLJu+zAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwNXPYcvSp9U5XYVbNkyJck7Qk74wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2RkNGUxNmM1LTBhMDEtNGY0OC04ZTU2LWRkNzc5NDNiMjZjNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABGU9L2llSnpEiBNJPR0FyohpjZ/
4udFNRmUsWYvrtEwCNGEZmNYMiCBYDwUzr1u3EhWhutjZ/WDSjkNNHNZXUAvb1FJ
LCOWaFz0SX+f7wQM4EJAmonOCbAzwscb75ytNFAvUP4NIqx6kF+dcaBCoyy+otmy
sdXZ1Hryqye7dMGTxqJKxJOd3U3STP9r/9AVFCjfdSPgmEGonsFD3kr1Rm9lPP3D
1SV7YetI0PWzmS2NXMkkg19x/4gf+ODm96K2oTd73t5KRtXzzeYIOANOQ8oHrPLT
SEA/hpTXBpedZwJ7/uWJO0TTI6GFX/a9UDhzQxVhYj0gIVfizNrKHp8JWS8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:52:13 2025 by rpki-client