Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed978386-8be2-4a6b-8e2a-a187b6d3e7e7.roa
File: ed978386-8be2-4a6b-8e2a-a187b6d3e7e7.roa (raw, json)
Hash identifier: S2s6X4hOvqKxTG5LVd0Eb8Bg/hZ6XepAg3j0S5W33OA=
Subject key identifier: E7:41:6F:56:13:C8:99:A3:E6:4E:F7:00:79:D1:70:85:EC:6F:E2:1B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 39D985708CFAE03FD260DA30D0E3128AA8EDDC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed978386-8be2-4a6b-8e2a-a187b6d3e7e7.roa
Signing time: Thu 02 May 2024 00:00:00 +0000
ROA not before: Thu 02 May 2024 00:00:00 +0000
ROA not after: Thu 06 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:d9:85:70:8c:fa:e0:3f:d2:60:da:30:d0:e3:12:8a:a8:ed:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 2 00:00:00 2024 GMT
Not After : Jun 6 23:59:59 2024 GMT
Subject: serialNumber=fe09afa50cb5d901fae82a7d20cb9eb9f78f86a9e98ac9cb84bb585daaa25e26, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:47:fe:b9:c7:59:44:25:4a:35:8e:09:06:8a:
33:99:b4:d2:65:6e:4c:c0:a6:59:d1:ed:dc:0d:4d:
1c:ba:e3:87:64:3f:b1:b4:3b:dd:62:ed:dd:dd:8e:
74:2e:6f:47:ef:b2:6e:af:5c:03:8c:f6:5e:0f:4c:
ce:e2:27:74:7e:63:cc:14:ff:18:95:78:8b:9b:4f:
73:12:85:5e:15:2b:64:72:18:b6:8a:1f:bf:b6:f1:
d4:00:34:e5:d8:f4:8d:a1:2b:5c:5b:9e:8e:b3:04:
37:5a:52:9d:df:21:ed:4a:5d:bc:98:6d:99:a4:7f:
44:ea:bc:ee:8c:8a:74:22:c6:0a:b5:86:d8:69:d9:
ec:38:b7:0e:4c:bd:db:0c:e7:9e:09:37:f4:d1:11:
ea:60:36:4b:3a:6b:1f:85:a3:e9:15:69:86:e7:16:
13:b8:79:b7:2e:36:9b:d9:57:2e:26:a0:44:1c:79:
5d:0c:69:22:0e:83:02:8f:9e:52:15:25:df:10:87:
fb:81:92:63:06:93:37:32:4e:f5:c3:21:c3:6f:cf:
8c:ac:5e:92:ce:7f:69:e4:7a:a1:65:21:ad:27:85:
9c:e9:8f:a8:6a:48:ec:e8:5c:21:d3:4d:9a:8e:c9:
52:c1:81:ba:be:fb:be:a4:22:41:37:df:70:8d:05:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:41:6F:56:13:C8:99:A3:E6:4E:F7:00:79:D1:70:85:EC:6F:E2:1B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed978386-8be2-4a6b-8e2a-a187b6d3e7e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:80:d0:30:31:dc:1b:ab:0a:c4:24:69:31:8e:94:f3:da:ee:
d4:99:fe:77:8d:3c:c4:a5:c1:12:2e:86:63:2c:12:d2:c2:7e:
3c:8f:01:26:82:0e:82:5e:31:94:2d:b7:dd:86:58:51:4b:cd:
ab:01:49:77:36:c7:63:33:3b:c4:d9:8b:52:c8:e8:35:d9:34:
53:89:2d:84:6c:9b:10:3e:9f:ec:f1:2c:51:19:26:a0:56:ad:
48:07:57:ae:a5:f0:71:58:81:40:54:65:d4:0e:bf:70:a7:a5:
a1:f5:1c:24:cf:30:88:1d:97:21:81:94:a0:80:b3:5a:6c:f4:
e7:e6:58:07:f4:7b:1f:52:44:72:69:87:d5:44:b3:fa:43:21:
87:f8:e3:dc:14:3b:10:67:36:b3:c0:67:3c:f5:8e:ab:62:f5:
00:ce:fa:cf:83:5a:e8:01:fd:27:5c:e3:c7:7e:66:a4:67:96:
33:51:9b:36:24:6c:b2:0e:c2:3f:79:db:bd:74:59:dd:b8:54:
a4:e2:fc:37:dc:dd:1c:ef:9b:c5:f3:bb:23:7d:6e:c7:bb:c9:
f3:b6:ef:c4:6d:9b:c8:07:78:2f:7e:85:79:cd:b5:8f:3e:5f:
53:54:59:f3:1c:d0:b5:f6:be:91:df:50:ca:09:e0:bc:af:e2:
65:55:be:86
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITOdmFcIz64D/SYNow0OMSiqjt3DANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzIyNzhhYWI4NzhmMjY2MmNlMTRlOTA1ZTE4ZWJjYjc1MjJm
OTJiMzY4NGJjNDg2NWI0ZDAeFw0yNDA1MDIwMDAwMDBaFw0yNDA2MDYyMzU5NTla
MHoxSTBHBgNVBAUTQGZlMDlhZmE1MGNiNWQ5MDFmYWU4MmE3ZDIwY2I5ZWI5Zjc4
Zjg2YTllOThhYzljYjg0YmI1ODVkYWFhMjVlMjYxLTArBgNVBAMTJGMwY2UyM2Vh
LTQzZmMtNGJlNC1iZWVlLWMwMTQ3ODEyMmEwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMZH/rnHWUQlSjWOCQaKM5m00mVuTMCmWdHt3A1NHLrjh2Q/
sbQ73WLt3d2OdC5vR++ybq9cA4z2Xg9MzuIndH5jzBT/GJV4i5tPcxKFXhUrZHIY
toofv7bx1AA05dj0jaErXFuejrMEN1pSnd8h7UpdvJhtmaR/ROq87oyKdCLGCrWG
2GnZ7Di3Dky92wznngk39NER6mA2SzprH4Wj6RVphucWE7h5ty42m9lXLiagRBx5
XQxpIg6DAo+eUhUl3xCH+4GSYwaTNzJO9cMhw2/PjKxeks5/aeR6oWUhrSeFnOmP
qGpI7OhcIdNNmo7JUsGBur77vqQiQTffcI0FiacCAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBTnQW9WE8iZo+ZO9wB50XCF7G/iGzAfBgNVHSMEGDAWgBRVqN1F2UQT+dGS
9Sxjzoz7xhSWuDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzE0MzNlYmZmLWRm
ZDYtNGM1Yy1iN2ZmLTk5Yzg1MTM5ZDRhOC8yNzhhYWI4NzhmMjY2MmNlMTRlOTA1
ZTE4ZWJjYjc1MjJmOTJiMzY4NGJjNDg2NWI0ZC5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8xNmYxZmZlZS03NDYxLTQ2NzQtYmIwNS1mZGRl
ZmE5YTAyYzYvZWQ5NzgzODYtOGJlMi00YTZiLThlMmEtYTE4N2I2ZDNlN2U3LnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUt
ZmRkZWZhOWEwMmM2L0ptTE9GT2tGNFk2OHQxSXZrck5vUzhTR1cwMC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMckeDANBgkqhkiG9w0BAQsFAAOCAQEAbIDQMDHcG6sKxCRpMY6U89ru1Jn+
d408xKXBEi6GYywS0sJ+PI8BJoIOgl4xlC233YZYUUvNqwFJdzbHYzM7xNmLUsjo
Ndk0U4kthGybED6f7PEsURkmoFatSAdXrqXwcViBQFRl1A6/cKelofUcJM8wiB2X
IYGUoICzWmz05+ZYB/R7H1JEcmmH1USz+kMhh/jj3BQ7EGc2s8BnPPWOq2L1AM76
z4Na6AH9J1zjx35mpGeWM1GbNiRssg7CP3nbvXRZ3bhUpOL8N9zdHO+bxfO7I31u
x7vJ87bvxG2byAd4L36Fec21jz5fU1RZ8xzQtfa+kd9QygngvK/iZVW+hg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:58:58 2025 by rpki-client