Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e7bae7a7-1040-4378-a395-8f0db23d33c6.roa
File: e7bae7a7-1040-4378-a395-8f0db23d33c6.roa (raw, json)
Hash identifier: /SSIXJIG6hO8OoMQVRAAZzULj73rfDoMrNQN09HpKLE=
Subject key identifier: C9:7D:C0:B2:76:65:5A:5F:4B:16:FA:DD:30:B4:7C:F5:C4:FF:44:46
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4104AED1E2B097382225FC5E5DC1BDE114FB7752
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e7bae7a7-1040-4378-a395-8f0db23d33c6.roa
Signing time: Thu 24 Aug 2023 00:00:00 +0000
ROA not before: Thu 24 Aug 2023 00:00:00 +0000
ROA not after: Thu 28 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:04:ae:d1:e2:b0:97:38:22:25:fc:5e:5d:c1:bd:e1:14:fb:77:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 24 00:00:00 2023 GMT
Not After : Sep 28 23:59:59 2023 GMT
Subject: serialNumber=3b55eb5d75792d3d0d9058b1b4a3cda3bf943f1dbe7ad26b6dd5e54bb435d788, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:39:15:de:bb:30:89:b7:17:48:30:01:5c:
9c:c4:07:f7:e0:a1:aa:e1:01:3d:da:6d:cf:79:a2:
75:5c:66:d7:2f:e8:ab:ae:57:bc:66:2c:ac:a5:8c:
42:6e:7c:12:c0:84:29:7a:05:62:a2:8c:16:01:32:
30:83:b9:e7:f6:c5:d6:1f:22:7f:cb:37:c3:a2:0b:
cf:a0:b4:6e:4e:9a:8f:fd:d7:5e:b8:84:6c:8e:8c:
92:61:46:70:29:62:7b:34:01:a7:b2:3d:09:20:d3:
e6:a9:4f:82:12:02:45:ad:61:7f:2b:60:d6:d4:70:
3e:d2:d6:d9:07:e7:bd:61:53:b1:b7:35:78:b8:d0:
6e:8b:ac:12:e6:48:d4:4b:67:d8:ba:6d:63:ac:a8:
fb:13:24:05:4d:1f:f4:3e:51:10:22:4e:93:a9:25:
19:f3:59:10:f3:c2:9b:4b:bf:a1:18:03:36:d4:e6:
16:a9:e6:40:ad:8e:d6:da:ee:c1:eb:8e:01:00:ea:
3a:d1:49:08:46:c2:95:65:dd:61:48:bf:f7:32:4b:
25:02:5c:35:28:04:dc:a8:c9:08:97:90:8b:9c:6a:
01:8f:de:62:8e:de:5f:97:96:da:27:96:76:3d:9b:
89:2f:45:0b:c0:94:ee:23:bc:45:4b:63:c4:2c:26:
60:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7D:C0:B2:76:65:5A:5F:4B:16:FA:DD:30:B4:7C:F5:C4:FF:44:46
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e7bae7a7-1040-4378-a395-8f0db23d33c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
07:47:ac:d5:1c:17:53:11:31:4f:19:13:0c:90:6e:78:cd:de:
ea:4a:09:0f:7f:77:02:f4:ab:f0:80:85:43:4a:8c:ef:03:80:
6f:d8:34:b1:0c:78:db:92:8c:20:a1:9f:98:07:2e:29:25:06:
8e:49:32:a7:9f:1b:94:5a:6f:0c:ab:5f:4c:df:af:e1:30:65:
d2:29:28:d2:ac:04:92:b2:c7:69:fa:b0:ab:68:e1:32:51:a8:
78:97:ab:7e:5f:57:86:fd:d8:30:36:b8:dd:57:5e:78:56:b2:
cb:c0:21:c7:73:9b:c8:b9:9d:f7:70:44:44:b4:a9:f6:e7:8f:
40:65:6f:54:fe:09:8e:b7:a1:57:57:c8:85:98:05:24:f2:e1:
e5:c2:b5:cd:4e:3c:0c:4d:92:d4:c9:9f:cf:6a:1c:7d:8e:a0:
de:99:90:5f:21:c0:bc:60:6a:c2:4c:0c:24:0f:72:0f:0d:c6:
30:9b:f4:57:d3:37:8a:7e:68:40:86:76:89:05:5d:36:bd:76:
39:50:6a:41:16:68:35:9f:90:27:cc:da:3d:60:b8:21:c3:de:
c1:d9:8e:b1:0c:21:0b:09:14:c1:dd:56:66:49:94:94:3f:73:
ac:ce:38:fb:ff:f3:19:79:34:86:3d:65:6e:57:bd:14:02:4f:
93:7e:45:83
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQQSu0eKwlzgiJfxeXcG94RT7d1IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODI0MDAwMDAwWhcNMjMwOTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYjU1ZWI1ZDc1NzkyZDNkMGQ5MDU4YjFiNGEzY2RhM2Jm
OTQzZjFkYmU3YWQyNmI2ZGQ1ZTU0YmI0MzVkNzg4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCeIjkV3rswibcXSDABXJzEB/fgoarhAT3abc95onVcZtcv
6KuuV7xmLKyljEJufBLAhCl6BWKijBYBMjCDuef2xdYfIn/LN8OiC8+gtG5Omo/9
1164hGyOjJJhRnApYns0AaeyPQkg0+apT4ISAkWtYX8rYNbUcD7S1tkH571hU7G3
NXi40G6LrBLmSNRLZ9i6bWOsqPsTJAVNH/Q+URAiTpOpJRnzWRDzwptLv6EYAzbU
5hap5kCtjtba7sHrjgEA6jrRSQhGwpVl3WFIv/cySyUCXDUoBNyoyQiXkIucagGP
3mKO3l+XltonlnY9m4kvRQvAlO4jvEVLY8QsJmBzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUyX3AsnZlWl9LFvrdMLR89cT/REYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2U3YmFlN2E3LTEwNDAtNDM3OC1hMzk1LThmMGRiMjNkMzNjNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAdHrNUcF1MRMU8ZEwyQbnjN3upK
CQ9/dwL0q/CAhUNKjO8DgG/YNLEMeNuSjCChn5gHLiklBo5JMqefG5RabwyrX0zf
r+EwZdIpKNKsBJKyx2n6sKto4TJRqHiXq35fV4b92DA2uN1XXnhWssvAIcdzm8i5
nfdwRES0qfbnj0Blb1T+CY63oVdXyIWYBSTy4eXCtc1OPAxNktTJn89qHH2OoN6Z
kF8hwLxgasJMDCQPcg8NxjCb9FfTN4p+aECGdokFXTa9djlQakEWaDWfkCfM2j1g
uCHD3sHZjrEMIQsJFMHdVmZJlJQ/c6zOOPv/8xl5NIY9ZW5XvRQCT5N+RYM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:00:53 2025 by rpki-client