Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e78e01f3-9504-41d6-a24e-343e87aaca1e.roa
File: e78e01f3-9504-41d6-a24e-343e87aaca1e.roa (raw, json)
Hash identifier: XiflPqKTkoQmlU7uKWRXzbxsjoxIJhz/VXQEQgE4ZFg=
Subject key identifier: C8:3A:78:2E:C0:06:E8:18:26:88:06:D3:73:19:10:EB:C9:D1:D6:CB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 456F4FCD7C662455BEB5B2C360D7D6D2C551B535
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e78e01f3-9504-41d6-a24e-343e87aaca1e.roa
Signing time: Tue 22 Oct 2024 00:00:00 +0000
ROA not before: Tue 22 Oct 2024 00:00:00 +0000
ROA not after: Tue 26 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6f:4f:cd:7c:66:24:55:be:b5:b2:c3:60:d7:d6:d2:c5:51:b5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 22 00:00:00 2024 GMT
Not After : Nov 26 23:59:59 2024 GMT
Subject: serialNumber=e9459ed45b1f8d57cbf0a13ffef55c6390d61d987d19d11d9d004feec9558bbe, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:10:16:bc:77:e7:36:ac:37:e9:40:bc:01:
70:e0:57:27:c1:90:d3:d0:cf:00:7f:0e:41:d9:ea:
a9:ac:65:d3:f8:67:b2:ba:82:c0:d8:3b:8b:21:be:
1e:b2:14:40:aa:de:53:db:10:40:12:43:50:ad:df:
d4:29:5c:76:f3:11:3f:dd:03:99:65:b7:9a:bb:fb:
67:e1:f7:2d:92:89:dc:85:35:06:37:86:90:a9:0d:
54:46:a3:07:82:a8:78:dd:6c:10:cd:99:15:63:45:
2d:38:9f:c5:05:3d:de:c1:1b:57:03:84:87:2c:31:
70:59:91:77:04:2b:ca:9f:04:25:fa:20:25:b8:d8:
a9:24:2b:fc:aa:7e:a3:c7:14:4d:a7:b0:c6:06:ff:
d5:92:ff:1a:0c:c3:37:4a:49:3e:e1:11:45:04:30:
84:fd:2c:58:76:49:2e:de:0d:7c:dc:fb:0f:0a:4a:
d2:ff:f1:cc:0b:49:a6:f6:84:1d:73:c3:d8:8f:16:
41:88:86:a9:f7:a5:84:a1:5c:05:66:60:0f:1c:40:
0e:50:00:3a:68:a9:63:de:e8:45:f4:b1:ef:23:0d:
cc:a4:08:b2:70:2a:e5:ca:27:51:ae:ad:77:f9:56:
2d:1b:e0:36:d6:ba:bb:1d:fe:84:d1:69:bc:a3:a5:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3A:78:2E:C0:06:E8:18:26:88:06:D3:73:19:10:EB:C9:D1:D6:CB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e78e01f3-9504-41d6-a24e-343e87aaca1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
38:69:27:4e:74:84:bc:85:d2:5d:7f:87:c4:6e:70:1e:37:44:
61:96:f4:d0:bd:d9:4f:59:6e:ed:7b:1c:20:3d:19:cb:4e:ef:
31:2f:b5:b4:3a:45:5f:c4:25:ed:a4:51:88:d3:cc:37:a0:90:
fc:5a:32:81:43:d4:34:1d:1f:4d:e8:d3:6e:f0:cf:cc:27:68:
ea:81:22:23:10:0e:4a:1e:3f:72:c0:93:e4:35:d9:6d:2b:17:
41:c7:d8:d1:c5:06:7d:ec:19:21:56:7d:04:41:aa:7d:06:20:
35:91:9b:9d:d1:5c:a1:65:21:49:40:c6:1c:5f:67:ae:9b:07:
14:76:8e:56:76:2c:96:82:01:af:5a:b2:a2:e1:b2:87:c4:6e:
94:86:7e:78:45:02:7d:f5:97:20:f8:af:5c:bf:e7:62:d6:f6:
cb:43:d7:11:20:fa:3f:6b:1c:b7:24:a5:2c:88:39:80:9a:92:
f2:18:58:3b:5f:51:f3:7d:2f:bd:1b:2c:d1:5b:da:e5:08:f1:
3b:08:83:46:ac:02:aa:69:6c:41:f6:3d:cf:20:65:e0:45:40:
86:e9:c6:12:00:8c:01:b0:aa:c4:90:ae:c3:db:7f:1a:b7:a0:
22:6a:f7:f6:68:f5:4c:c5:6f:ec:ab:36:54:97:93:05:86:e7:
ee:90:f8:d8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURW9PzXxmJFW+tbLDYNfW0sVRtTUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDIyMDAwMDAwWhcNMjQxMTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BlOTQ1OWVkNDViMWY4ZDU3Y2JmMGExM2ZmZWY1NWM2Mzkw
ZDYxZDk4N2QxOWQxMWQ5ZDAwNGZlZWM5NTU4YmJlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEKxAWvHfnNqw36UC8AXDgVyfBkNPQzwB/DkHZ6qmsZdP4
Z7K6gsDYO4shvh6yFECq3lPbEEASQ1Ct39QpXHbzET/dA5llt5q7+2fh9y2SidyF
NQY3hpCpDVRGoweCqHjdbBDNmRVjRS04n8UFPd7BG1cDhIcsMXBZkXcEK8qfBCX6
ICW42KkkK/yqfqPHFE2nsMYG/9WS/xoMwzdKST7hEUUEMIT9LFh2SS7eDXzc+w8K
StL/8cwLSab2hB1zw9iPFkGIhqn3pYShXAVmYA8cQA5QADpoqWPe6EX0se8jDcyk
CLJwKuXKJ1GurXf5Vi0b4DbWursd/oTRabyjpWsZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUyDp4LsAG6BgmiAbTcxkQ68nR1sswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2U3OGUwMWYzLTk1MDQtNDFkNi1hMjRlLTM0M2U4N2FhY2ExZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADhpJ050hLyF0l1/h8RucB43RGGW
9NC92U9Zbu17HCA9GctO7zEvtbQ6RV/EJe2kUYjTzDegkPxaMoFD1DQdH03o027w
z8wnaOqBIiMQDkoeP3LAk+Q12W0rF0HH2NHFBn3sGSFWfQRBqn0GIDWRm53RXKFl
IUlAxhxfZ66bBxR2jlZ2LJaCAa9asqLhsofEbpSGfnhFAn31lyD4r1y/52LW9stD
1xEg+j9rHLckpSyIOYCakvIYWDtfUfN9L70bLNFb2uUI8TsIg0asAqppbEH2Pc8g
ZeBFQIbpxhIAjAGwqsSQrsPbfxq3oCJq9/Zo9UzFb+yrNlSXkwWG5+6Q+Ng=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:22:53 2025 by rpki-client