Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f5a487f7-cfd1-40a1-b34a-c654e331b056.roa
File: f5a487f7-cfd1-40a1-b34a-c654e331b056.roa (raw, json)
Hash identifier: 2s/0aglClJAtEl2zO/GQyuqzPW0UFfiLX8OdcJRZSEw=
Subject key identifier: EA:EF:49:6F:21:57:24:83:69:E3:C6:6D:7F:67:82:56:7A:7B:E3:7B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7363FA4356AA56FBA43E861820AADB440FEC4A22
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f5a487f7-cfd1-40a1-b34a-c654e331b056.roa
Signing time: Mon 09 Sep 2024 00:00:00 +0000
ROA not before: Mon 09 Sep 2024 00:00:00 +0000
ROA not after: Mon 14 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:63:fa:43:56:aa:56:fb:a4:3e:86:18:20:aa:db:44:0f:ec:4a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 9 00:00:00 2024 GMT
Not After : Oct 14 23:59:59 2024 GMT
Subject: serialNumber=e1c8895cc9a5c57bc57fe5e382d5f412c0ad752e84f31999bf33bb09feb538bb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:a9:41:e2:d7:2d:32:0a:b7:9a:84:8c:ab:
14:e8:39:1e:33:8a:bb:bf:80:0d:62:05:db:34:a4:
23:75:8b:0f:3e:9b:8a:b2:0f:c4:a1:b1:3e:31:ac:
76:0a:ce:67:28:b8:39:98:f5:bd:74:57:90:9f:e2:
bb:9d:02:06:91:80:cf:b0:fe:bf:45:63:00:53:93:
66:c1:ac:59:96:5f:39:9f:90:21:1e:38:cb:71:03:
4f:fa:ed:1c:00:bb:ec:a0:0d:ea:55:2d:f3:14:11:
1e:17:53:8c:01:fb:b5:8c:e5:4d:e4:2b:d8:1a:7c:
bb:f2:3c:ed:80:a0:f6:f3:e8:b4:65:46:12:f7:6f:
30:19:29:de:25:b3:66:ca:2c:01:af:49:9c:27:4f:
7c:e2:03:1b:c7:6f:a1:00:03:b5:f0:88:27:f5:96:
da:a2:25:e7:84:64:e4:64:0d:bb:9a:38:ff:42:c3:
d5:66:b1:24:0e:a5:57:72:04:16:0e:02:62:ca:93:
e8:99:a1:a7:7f:c6:8c:bf:c0:a0:a2:d9:66:1b:6f:
de:4e:b7:ed:91:18:15:e9:1a:9d:75:1a:8d:98:c2:
1e:6c:6e:b8:34:f3:ef:50:29:43:b7:b4:c2:17:da:
2b:3f:da:05:01:48:e3:ea:f3:d2:11:97:31:9d:2b:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EF:49:6F:21:57:24:83:69:E3:C6:6D:7F:67:82:56:7A:7B:E3:7B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f5a487f7-cfd1-40a1-b34a-c654e331b056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
83:01:68:95:06:d4:3a:a7:f0:22:d2:9d:d8:8b:5e:ed:b1:ac:
c8:2e:51:d0:4a:53:18:94:78:85:73:3d:c5:2f:fc:6c:e0:1a:
2c:95:d7:39:95:8a:71:13:3d:98:29:cd:de:1e:86:c1:c0:e4:
00:50:98:bc:0f:4d:dd:01:75:47:79:ef:59:bb:d5:81:c0:aa:
ca:40:2f:ad:a5:22:89:f4:78:7e:8a:7b:6a:93:78:df:7d:bd:
6d:c0:09:ed:0b:52:ed:47:93:a7:f1:95:25:cc:a2:a7:e2:94:
08:fa:a7:ff:88:79:48:98:65:15:98:9f:77:0f:f6:e5:53:f3:
00:bd:f8:92:8e:cd:65:0e:57:c4:c4:c2:5d:1b:2e:31:f6:21:
0b:b0:35:a3:d8:d6:35:a7:f5:3a:c5:31:3b:3d:45:6e:d0:f2:
7d:07:2c:b5:c2:1a:99:c4:0d:06:cc:1e:c7:0f:d8:d1:e7:ef:
fa:91:49:28:c6:e5:84:4b:a6:8a:7b:fc:3a:bd:67:2a:24:76:
08:db:ec:81:f7:6c:3c:84:59:0d:83:66:64:8a:99:23:c3:69:
04:14:94:de:96:18:8c:c5:16:57:48:ce:77:f8:3d:39:65:0e:
19:9e:03:43:83:17:51:ce:33:f3:68:c7:41:6b:a9:89:7f:af:
fd:5c:64:d4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUc2P6Q1aqVvukPoYYIKrbRA/sSiIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwOTA5MDAwMDAwWhcNMjQxMDE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMWM4ODk1Y2M5YTVjNTdiYzU3ZmU1ZTM4MmQ1ZjQxMmMw
YWQ3NTJlODRmMzE5OTliZjMzYmIwOWZlYjUzOGJiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvAqlB4tctMgq3moSMqxToOR4ziru/gA1iBds0pCN1iw8+
m4qyD8ShsT4xrHYKzmcouDmY9b10V5Cf4rudAgaRgM+w/r9FYwBTk2bBrFmWXzmf
kCEeOMtxA0/67RwAu+ygDepVLfMUER4XU4wB+7WM5U3kK9gafLvyPO2AoPbz6LRl
RhL3bzAZKd4ls2bKLAGvSZwnT3ziAxvHb6EAA7XwiCf1ltqiJeeEZORkDbuaOP9C
w9VmsSQOpVdyBBYOAmLKk+iZoad/xoy/wKCi2WYbb95Ot+2RGBXpGp11Go2Ywh5s
brg08+9QKUO3tMIX2is/2gUBSOPq89IRlzGdKxEPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6u9JbyFXJINp48Ztf2eCVnp743swHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Y1YTQ4N2Y3LWNmZDEtNDBhMS1iMzRhLWM2NTRlMzMxYjA1Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIMBaJUG1Dqn8CLSndiLXu2xrMgu
UdBKUxiUeIVzPcUv/GzgGiyV1zmVinETPZgpzd4ehsHA5ABQmLwPTd0BdUd571m7
1YHAqspAL62lIon0eH6Ke2qTeN99vW3ACe0LUu1Hk6fxlSXMoqfilAj6p/+IeUiY
ZRWYn3cP9uVT8wC9+JKOzWUOV8TEwl0bLjH2IQuwNaPY1jWn9TrFMTs9RW7Q8n0H
LLXCGpnEDQbMHscP2NHn7/qRSSjG5YRLpop7/Dq9Zyokdgjb7IH3bDyEWQ2DZmSK
mSPDaQQUlN6WGIzFFldIznf4PTllDhmeA0ODF1HOM/Nox0FrqYl/r/1cZNQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:37:00 2025 by rpki-client