Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e454c4d4-94c4-415c-b2ce-a7d8e4676c62.roa
File: e454c4d4-94c4-415c-b2ce-a7d8e4676c62.roa (raw, json)
Hash identifier: ok6fqAPjdoHSwnNYIzF3cV779LtDH5FrqchjXMPJ3bU=
Subject key identifier: 43:D1:D0:E3:2E:03:6A:CA:9E:07:0D:EA:59:1F:98:18:A1:FB:1D:79
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 357656A223098AC1942AC31A2BE1BAE219F41F20
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e454c4d4-94c4-415c-b2ce-a7d8e4676c62.roa
Signing time: Sat 07 Dec 2024 00:00:00 +0000
ROA not before: Sat 07 Dec 2024 00:00:00 +0000
ROA not after: Sat 11 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:76:56:a2:23:09:8a:c1:94:2a:c3:1a:2b:e1:ba:e2:19:f4:1f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 7 00:00:00 2024 GMT
Not After : Jan 11 23:59:59 2025 GMT
Subject: serialNumber=309f3eedecdfbc68522ac64e53e0521fbc2855fa838553b0daae6e627c806be2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:f6:78:fb:16:87:5b:67:b9:8a:7c:88:3e:
01:34:ca:dd:bd:4f:37:2e:66:7b:fb:94:d8:26:36:
f9:53:fc:4f:a2:f8:63:a4:c6:70:c9:f3:1d:2a:39:
53:39:fa:d6:e7:aa:56:7f:6f:51:5d:d7:1e:d6:0d:
3c:83:36:66:5c:2b:c8:64:cc:83:4e:4a:4d:7c:a8:
5b:cc:07:40:8d:83:23:86:b6:34:5b:f3:ea:68:1a:
11:48:b5:8c:4a:5c:b4:f0:24:20:fe:5e:5a:e1:66:
52:c5:8c:c7:f6:2f:5d:cc:bd:b8:4e:2f:df:d4:c8:
23:39:24:2e:93:43:bf:09:1e:3b:f2:a0:6b:65:58:
33:cd:96:79:98:5e:a8:ea:ee:d4:a3:d3:84:8d:90:
45:04:aa:04:44:82:16:b1:0f:29:0b:ed:2f:73:41:
89:6d:5a:cc:8a:62:ff:43:cd:ba:e7:46:a4:f5:d8:
ad:04:04:8c:a1:23:90:92:37:85:c2:1b:cf:b6:be:
fc:89:39:d5:0c:00:d4:e9:72:fe:9a:5f:79:69:1e:
eb:9a:79:fb:50:4a:6d:59:25:41:b3:61:37:57:92:
e7:15:89:cd:8b:e6:c9:ec:e4:dc:0f:8e:a0:e2:13:
06:04:81:02:6d:14:5b:e8:3d:45:4f:55:a9:4e:8b:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D1:D0:E3:2E:03:6A:CA:9E:07:0D:EA:59:1F:98:18:A1:FB:1D:79
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e454c4d4-94c4-415c-b2ce-a7d8e4676c62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e6:77:f1:eb:18:2a:d4:61:37:ee:14:bc:d5:d4:19:d1:57:
89:bd:da:8e:c8:fe:73:5a:c0:75:51:50:5c:6d:81:9f:b4:08:
aa:16:0a:25:ee:d0:67:23:55:51:bd:78:3f:0d:ea:11:90:7b:
be:ff:73:d8:17:49:4c:99:13:3a:7b:f2:6e:4b:a3:64:b6:78:
fd:e6:fe:2d:48:b8:10:a7:e7:42:1d:40:f7:74:00:b4:27:43:
f9:29:97:76:48:93:7c:04:7f:1d:f0:a6:61:31:4d:b2:30:24:
5a:57:9a:59:78:f9:cb:93:fd:48:4f:d6:09:2d:00:25:4e:a7:
63:81:32:f5:e6:91:0b:db:28:84:a7:11:76:1b:46:8e:fd:76:
1c:73:3b:e7:6d:f0:a0:6b:04:ea:a9:e5:fc:fd:52:fa:c3:cf:
0d:be:c1:41:64:6b:ba:d2:b3:4b:53:53:7b:3e:12:e4:d3:46:
72:c4:a7:8f:a2:24:71:87:14:0c:3f:b9:56:29:9c:14:88:e0:
b0:b3:91:9c:98:8d:d7:e6:9c:3a:6c:67:ab:9a:4b:8f:b9:e4:
1a:e5:3c:50:98:a5:98:60:28:04:f4:35:44:93:a9:df:9b:a6:
a2:4c:a0:57:00:49:b4:3b:a3:9c:c0:04:7f:7d:cf:e9:a6:5a:
43:85:37:23
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNXZWoiMJisGUKsMaK+G64hn0HyAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMjA3MDAwMDAwWhcNMjUwMTExMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMDlmM2VlZGVjZGZiYzY4NTIyYWM2NGU1M2UwNTIxZmJj
Mjg1NWZhODM4NTUzYjBkYWFlNmU2MjdjODA2YmUyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFFPZ4+xaHW2e5inyIPgE0yt29TzcuZnv7lNgmNvlT/E+i
+GOkxnDJ8x0qOVM5+tbnqlZ/b1Fd1x7WDTyDNmZcK8hkzINOSk18qFvMB0CNgyOG
tjRb8+poGhFItYxKXLTwJCD+XlrhZlLFjMf2L13MvbhOL9/UyCM5JC6TQ78JHjvy
oGtlWDPNlnmYXqjq7tSj04SNkEUEqgREghaxDykL7S9zQYltWsyKYv9DzbrnRqT1
2K0EBIyhI5CSN4XCG8+2vvyJOdUMANTpcv6aX3lpHuuaeftQSm1ZJUGzYTdXkucV
ic2L5sns5NwPjqDiEwYEgQJtFFvoPUVPValOi6HjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUQ9HQ4y4DasqeBw3qWR+YGKH7HXkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2U0NTRjNGQ0LTk0YzQtNDE1Yy1iMmNlLWE3ZDhlNDY3NmM2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALTmd/HrGCrUYTfuFLzV1BnRV4m9
2o7I/nNawHVRUFxtgZ+0CKoWCiXu0GcjVVG9eD8N6hGQe77/c9gXSUyZEzp78m5L
o2S2eP3m/i1IuBCn50IdQPd0ALQnQ/kpl3ZIk3wEfx3wpmExTbIwJFpXmll4+cuT
/UhP1gktACVOp2OBMvXmkQvbKISnEXYbRo79dhxzO+dt8KBrBOqp5fz9UvrDzw2+
wUFka7rSs0tTU3s+EuTTRnLEp4+iJHGHFAw/uVYpnBSI4LCzkZyYjdfmnDpsZ6ua
S4+55BrlPFCYpZhgKAT0NUSTqd+bpqJMoFcASbQ7o5zABH99z+mmWkOFNyM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:12 2025 by rpki-client