Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f5b977d8-43cc-41c8-89e1-3cec50bf01f5.roa
File: f5b977d8-43cc-41c8-89e1-3cec50bf01f5.roa (raw, json)
Hash identifier: FVmgYgDbH3ipaYBOrOdB0Z27nNaXYqgWgq4PWfd9tvI=
Subject key identifier: C2:08:6A:31:0C:25:71:1F:B5:87:47:CB:3B:41:8A:8B:16:6C:79:3C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 088597E76F58EF5A28E3B50D308B446BA1DF710C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f5b977d8-43cc-41c8-89e1-3cec50bf01f5.roa
Signing time: Sat 15 Mar 2025 15:53:18 +0000
ROA not before: Sat 15 Mar 2025 15:53:18 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:85:97:e7:6f:58:ef:5a:28:e3:b5:0d:30:8b:44:6b:a1:df:71:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 15 15:53:18 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: serialNumber=e107ae36c80e2c8a0f57f3e8196df65914e8f17d49fa7ae26d35060e7c2c07b9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:2d:b9:fd:8a:41:9e:b9:51:e9:8b:ec:3f:
a2:e9:48:27:33:28:b4:55:f4:2b:f4:72:21:87:31:
ed:12:c4:d1:f5:40:51:9b:e9:b0:37:b8:0b:20:6b:
78:c8:56:b1:34:ea:d1:83:dc:6b:d4:43:5d:ba:0d:
56:7a:f6:99:6d:c7:41:35:24:b1:1c:14:71:f5:9e:
37:72:d9:5f:6a:f0:9f:09:04:01:37:31:46:25:b7:
81:7d:99:2c:01:f1:21:f4:65:a1:d5:45:c8:25:cb:
86:3e:dd:c8:3d:d1:3c:fa:91:03:7e:ad:a1:51:3f:
e0:b5:ef:31:70:aa:20:50:03:bf:c9:e2:cd:4d:05:
04:12:c8:39:96:ae:c5:1e:43:87:93:5e:8d:2a:ad:
7a:60:a0:f7:82:d3:8b:a4:cb:23:98:b9:78:b6:da:
77:78:f5:6d:39:df:5c:3d:65:07:20:a3:58:b0:30:
a9:51:bb:b6:4e:ae:d7:22:e4:8b:dd:50:b6:1e:ef:
07:32:70:4f:09:06:f2:cf:6b:1e:b9:ea:5a:ae:49:
7a:f9:89:cf:76:7a:3a:70:b1:85:64:41:93:d2:de:
b0:36:18:45:b2:f5:64:48:c0:a3:68:25:3b:cb:88:
a0:63:d0:8c:fe:dd:b2:9e:c4:14:d2:49:35:3a:bc:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:08:6A:31:0C:25:71:1F:B5:87:47:CB:3B:41:8A:8B:16:6C:79:3C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f5b977d8-43cc-41c8-89e1-3cec50bf01f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:80:43:2e:fe:3d:a2:34:a9:aa:c7:4f:dd:10:ba:0a:0c:ac:
26:5f:ac:24:d4:99:0b:9f:80:b0:7d:01:bd:d9:1e:63:02:c3:
65:13:43:22:fc:16:29:52:7a:43:a7:30:f0:ad:3f:ef:cf:b4:
50:34:9b:6e:10:b3:9d:9d:59:fb:1e:b8:ba:b8:07:b5:1a:ab:
fb:2c:60:01:94:00:d2:95:4a:82:ba:91:9c:40:6c:d3:61:70:
e4:2f:0c:9e:33:72:d2:ba:e7:ad:ed:2a:28:be:bc:6d:90:9e:
3e:63:6a:d4:37:d6:98:51:6e:89:4a:be:89:25:60:33:06:71:
3b:4b:ac:77:c8:25:2a:53:4d:2c:b1:0b:3a:62:ae:aa:b5:4b:
1b:22:40:c9:4f:d3:30:dd:7e:5d:df:31:f0:bd:e5:ce:12:a1:
bd:2d:e3:f9:01:ed:85:01:2b:95:f3:9f:43:ff:39:34:ac:68:
5a:ff:3b:c2:d6:ae:d5:82:6a:08:65:f0:a2:07:9b:bd:d9:ca:
38:db:94:fc:a7:db:7d:12:c4:dc:77:36:cc:4a:72:1a:7d:70:
db:97:8b:b1:a3:f4:53:f3:ca:0f:14:d7:b9:35:22:78:b0:1c:
82:58:60:e0:14:8b:e9:7e:57:38:a2:4f:e8:22:39:b4:36:e9:
bc:cc:b5:2c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCIWX529Y71oo47UNMItEa6HfcQwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMzE1MTU1MzE4WhcNMjUwNDE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMTA3YWUzNmM4MGUyYzhhMGY1N2YzZTgxOTZkZjY1OTE0
ZThmMTdkNDlmYTdhZTI2ZDM1MDYwZTdjMmMwN2I5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnPC25/YpBnrlR6YvsP6LpSCczKLRV9Cv0ciGHMe0SxNH1
QFGb6bA3uAsga3jIVrE06tGD3GvUQ126DVZ69pltx0E1JLEcFHH1njdy2V9q8J8J
BAE3MUYlt4F9mSwB8SH0ZaHVRcgly4Y+3cg90Tz6kQN+raFRP+C17zFwqiBQA7/J
4s1NBQQSyDmWrsUeQ4eTXo0qrXpgoPeC04ukyyOYuXi22nd49W0531w9ZQcgo1iw
MKlRu7ZOrtci5IvdULYe7wcycE8JBvLPax656lquSXr5ic92ejpwsYVkQZPS3rA2
GEWy9WRIwKNoJTvLiKBj0Iz+3bKexBTSSTU6vCVlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwghqMQwlcR+1h0fLO0GKixZseTwwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Y1Yjk3N2Q4LTQzY2MtNDFjOC04OWUxLTNjZWM1MGJmMDFmNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAI6AQy7+PaI0qarHT90QugoMrCZf
rCTUmQufgLB9Ab3ZHmMCw2UTQyL8FilSekOnMPCtP+/PtFA0m24Qs52dWfseuLq4
B7Uaq/ssYAGUANKVSoK6kZxAbNNhcOQvDJ4zctK6563tKii+vG2Qnj5jatQ31phR
bolKvoklYDMGcTtLrHfIJSpTTSyxCzpirqq1SxsiQMlP0zDdfl3fMfC95c4Sob0t
4/kB7YUBK5Xzn0P/OTSsaFr/O8LWrtWCaghl8KIHm73ZyjjblPyn230SxNx3NsxK
chp9cNuXi7Gj9FPzyg8U17k1IniwHIJYYOAUi+l+VziiT+giObQ26bzMtSw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:27:42 2025 by rpki-client