Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f017d786-de9d-4e73-bc80-4bcaa0cc0c77.roa
File: f017d786-de9d-4e73-bc80-4bcaa0cc0c77.roa (raw, json)
Hash identifier: QgFBp9Ft88fcKGEGanxZ9yGQkod3CIqeFIsZZbOdJnc=
Subject key identifier: E8:3D:69:78:F3:DF:22:18:8B:26:5B:58:8A:41:C9:7E:14:29:4C:7F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 050D86AD2577E021605DB90177EFE06BEDCBF4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f017d786-de9d-4e73-bc80-4bcaa0cc0c77.roa
Signing time: Sun 19 May 2024 00:00:00 +0000
ROA not before: Sun 19 May 2024 00:00:00 +0000
ROA not after: Sun 23 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:0d:86:ad:25:77:e0:21:60:5d:b9:01:77:ef:e0:6b:ed:cb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 19 00:00:00 2024 GMT
Not After : Jun 23 23:59:59 2024 GMT
Subject: serialNumber=c247fde633fa8ba6b8175e219d53cfada4caed8df425b81ac6c734a2ca441cea, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fd:0f:eb:4d:0a:b5:63:00:35:ff:d3:6c:20:
41:14:9c:fd:92:0e:cd:b3:bc:dd:1d:c9:83:10:65:
d7:42:90:68:84:f8:83:c5:cb:0f:c0:b8:08:3e:b4:
f3:76:b0:c8:e3:3b:42:7a:02:1f:95:74:45:5d:d7:
04:a1:15:28:66:e5:8e:a6:e2:3b:97:24:71:a5:6a:
6d:84:45:3e:2d:8e:e0:09:29:db:6f:8e:e8:a1:1d:
29:37:ac:0c:d9:c4:3c:c4:70:57:75:5b:e0:d5:1c:
26:b5:07:40:21:eb:0b:94:50:42:65:be:c6:18:51:
87:e4:05:a4:22:fa:a6:fd:54:1d:ab:99:60:81:14:
f6:3d:72:8e:81:0d:1f:97:59:0d:ea:67:e8:24:2e:
61:16:92:4d:8b:93:15:fa:fb:e4:47:47:74:c5:f3:
22:20:e4:eb:48:aa:bf:ca:1b:8a:94:97:68:61:d4:
e0:34:57:c3:84:a3:db:58:c7:af:15:81:be:9a:9d:
1b:2a:3d:9d:57:d6:41:d1:2b:1d:92:2e:de:28:3a:
1b:33:5b:20:66:54:3d:7f:9d:69:65:81:ec:6b:35:
7a:aa:87:5c:e7:a2:1e:ef:39:64:6f:1e:c1:9c:1f:
52:97:9e:e4:70:7c:c7:47:5d:8a:27:e3:f7:dd:b8:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3D:69:78:F3:DF:22:18:8B:26:5B:58:8A:41:C9:7E:14:29:4C:7F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f017d786-de9d-4e73-bc80-4bcaa0cc0c77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a6:c6:31:f1:4b:b6:cd:04:e0:82:0c:bb:b5:cc:07:fb:a3:
89:d6:3c:36:ad:32:26:94:b1:9b:95:c0:b5:ed:9f:a9:fe:89:
51:04:00:76:f3:50:72:c8:d8:42:c1:c3:c8:7d:8d:3d:58:9f:
d9:08:d3:d5:c0:db:c8:b1:d1:9d:9d:71:5e:75:1d:b8:33:9a:
61:13:18:b3:7e:13:0e:8e:d5:ec:ec:29:d2:e6:3a:7e:0c:14:
a2:b7:43:17:f1:57:9c:a8:37:47:90:90:ed:aa:ff:72:e5:02:
2e:20:f1:ce:78:d4:e1:4b:b2:5a:6d:76:4b:35:f1:85:7d:e3:
00:e8:9b:eb:16:1a:7d:9e:e5:f9:e7:3e:3b:d4:12:a6:18:d5:
dc:b1:64:67:dc:5f:06:2e:f7:93:c8:20:f9:6a:3a:fb:b1:bf:
be:4a:8e:41:ae:0a:ed:c2:8c:d6:1d:1d:ca:c8:a2:8e:27:cb:
f9:31:5d:96:41:2c:ad:56:c9:b9:f7:d8:27:e3:2a:31:44:97:
f9:81:02:7e:0b:96:bb:22:72:c0:60:fa:66:9f:84:09:0e:24:
32:2d:11:f4:a9:b8:40:aa:f6:61:16:b8:0b:87:87:61:21:45:
05:ba:d4:60:38:76:79:b6:b2:f2:59:6c:7f:e8:8b:44:8b:ea:
1a:ef:7d:e7
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITBQ2GrSV34CFgXbkBd+/ga+3L9DANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzIyNzhhYWI4NzhmMjY2MmNlMTRlOTA1ZTE4ZWJjYjc1MjJm
OTJiMzY4NGJjNDg2NWI0ZDAeFw0yNDA1MTkwMDAwMDBaFw0yNDA2MjMyMzU5NTla
MHoxSTBHBgNVBAUTQGMyNDdmZGU2MzNmYThiYTZiODE3NWUyMTlkNTNjZmFkYTRj
YWVkOGRmNDI1YjgxYWM2YzczNGEyY2E0NDFjZWExLTArBgNVBAMTJGMwY2UyM2Vh
LTQzZmMtNGJlNC1iZWVlLWMwMTQ3ODEyMmEwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOT9D+tNCrVjADX/02wgQRSc/ZIOzbO83R3JgxBl10KQaIT4
g8XLD8C4CD6083awyOM7QnoCH5V0RV3XBKEVKGbljqbiO5ckcaVqbYRFPi2O4Akp
22+O6KEdKTesDNnEPMRwV3Vb4NUcJrUHQCHrC5RQQmW+xhhRh+QFpCL6pv1UHauZ
YIEU9j1yjoENH5dZDepn6CQuYRaSTYuTFfr75EdHdMXzIiDk60iqv8obipSXaGHU
4DRXw4Sj21jHrxWBvpqdGyo9nVfWQdErHZIu3ig6GzNbIGZUPX+daWWB7Gs1eqqH
XOeiHu85ZG8ewZwfUpee5HB8x0ddiifj9924Y9kCAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBToPWl4898iGIsmW1iKQcl+FClMfzAfBgNVHSMEGDAWgBRVqN1F2UQT+dGS
9Sxjzoz7xhSWuDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzE0MzNlYmZmLWRm
ZDYtNGM1Yy1iN2ZmLTk5Yzg1MTM5ZDRhOC8yNzhhYWI4NzhmMjY2MmNlMTRlOTA1
ZTE4ZWJjYjc1MjJmOTJiMzY4NGJjNDg2NWI0ZC5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8xNmYxZmZlZS03NDYxLTQ2NzQtYmIwNS1mZGRl
ZmE5YTAyYzYvZjAxN2Q3ODYtZGU5ZC00ZTczLWJjODAtNGJjYWEwY2MwYzc3LnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUt
ZmRkZWZhOWEwMmM2L0ptTE9GT2tGNFk2OHQxSXZrck5vUzhTR1cwMC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMckeDANBgkqhkiG9w0BAQsFAAOCAQEAfqbGMfFLts0E4IIMu7XMB/ujidY8
Nq0yJpSxm5XAte2fqf6JUQQAdvNQcsjYQsHDyH2NPVif2QjT1cDbyLHRnZ1xXnUd
uDOaYRMYs34TDo7V7Owp0uY6fgwUordDF/FXnKg3R5CQ7ar/cuUCLiDxznjU4Uuy
Wm12SzXxhX3jAOib6xYafZ7l+ec+O9QSphjV3LFkZ9xfBi73k8gg+Wo6+7G/vkqO
Qa4K7cKM1h0dysiijifL+TFdlkEsrVbJuffYJ+MqMUSX+YECfguWuyJywGD6Zp+E
CQ4kMi0R9Km4QKr2YRa4C4eHYSFFBbrUYDh2ebay8llsf+iLRIvqGu995w==
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:58:49 2025 by rpki-client