Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f87ae0ba-081c-4c24-aa01-6f1c5fa34b94.roa
File: f87ae0ba-081c-4c24-aa01-6f1c5fa34b94.roa (raw, json)
Hash identifier: 8rXpDpkL0j9iDblayiqlVhdleyw67FchX88cD60zSc8=
Subject key identifier: 0D:0B:A2:84:AD:D2:42:8F:24:F5:7C:83:7D:10:C7:3C:FE:8C:10:2F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2D288C78E6FA7E0CD876F87BB7316403A5D91326
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f87ae0ba-081c-4c24-aa01-6f1c5fa34b94.roa
Signing time: Sat 26 Oct 2024 00:00:00 +0000
ROA not before: Sat 26 Oct 2024 00:00:00 +0000
ROA not after: Sat 30 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:28:8c:78:e6:fa:7e:0c:d8:76:f8:7b:b7:31:64:03:a5:d9:13:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 26 00:00:00 2024 GMT
Not After : Nov 30 23:59:59 2024 GMT
Subject: serialNumber=c8a1e4ec050c1b3edc42ab9e1c66701e78253cc3cb9400328005fd193ca5314c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:58:e5:40:58:70:07:33:16:62:67:1d:6d:04:
e0:d2:eb:15:75:75:51:76:43:e0:27:1a:28:fa:af:
d2:02:37:ea:d7:21:f0:c6:eb:0f:fc:00:09:62:d7:
10:a4:8b:c3:77:32:4b:5f:6d:d7:38:23:ee:af:2c:
65:2b:10:49:c5:30:81:00:5c:24:38:19:a7:d6:8a:
08:40:cd:2b:ba:62:a4:a7:56:20:0e:c0:c5:58:72:
ee:5e:e9:6b:0f:46:0f:47:48:1e:be:27:0a:94:85:
ff:70:8e:53:9c:db:4d:5b:60:2f:67:60:14:49:2e:
07:a8:cf:38:46:da:d9:50:64:0a:97:5e:64:b5:39:
77:c7:e6:61:4b:f2:31:2b:f9:8d:5c:6c:b4:5f:c1:
35:07:f0:57:07:06:d4:3b:5a:2e:f4:15:ae:fe:b1:
36:99:fb:51:5c:44:1b:7d:ec:da:6d:22:70:06:0a:
83:d8:ba:c5:e6:04:1f:b4:14:b0:bb:54:6e:a8:91:
28:6b:a2:8e:b6:07:10:f0:f8:94:0e:b9:7b:78:a1:
40:97:34:5d:18:0d:98:60:9f:66:28:03:f5:d0:ab:
cf:fd:d9:39:d1:00:de:f5:5e:b5:bb:b2:6c:ea:7b:
23:4d:c4:05:4f:a3:6a:b1:51:4b:45:04:af:16:e2:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0B:A2:84:AD:D2:42:8F:24:F5:7C:83:7D:10:C7:3C:FE:8C:10:2F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f87ae0ba-081c-4c24-aa01-6f1c5fa34b94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:87:21:4f:99:65:ef:9c:84:59:ac:e2:c0:ed:23:ba:fc:75:
30:2d:41:6d:70:4b:42:b2:d9:08:7b:0e:61:58:13:99:67:ae:
71:19:51:22:fe:9f:3c:0e:57:38:69:5a:08:2b:d9:90:e7:b9:
c2:f7:02:02:d5:42:bb:37:42:57:fd:24:98:46:99:50:13:be:
d5:88:21:2e:ad:b2:43:df:47:8c:3a:14:39:21:a4:6d:00:5d:
de:13:4a:3f:07:68:46:a0:a3:ac:d8:11:0e:8d:5a:7a:bf:51:
a2:43:7c:50:84:15:aa:c2:58:57:dd:27:dd:3a:a0:8d:9f:d9:
c1:db:0b:58:d9:4e:9f:32:b2:a4:24:19:00:88:a4:b3:e1:77:
a5:70:3d:01:86:5d:5a:12:37:af:b7:f6:69:57:f1:a2:8a:cd:
08:1b:c3:2a:52:04:89:51:d4:d5:43:4b:3d:91:0d:77:19:ed:
29:74:93:c3:3f:f4:12:ca:ee:07:49:ae:ba:fe:ac:59:de:a3:
dd:91:7c:e0:9b:13:75:5a:a9:28:b3:aa:ee:e1:cf:d5:ad:96:
10:87:29:8c:c8:cf:9f:6f:4e:72:99:e3:b8:a1:77:01:3b:65:
ed:8d:1d:6d:c3:ad:c6:ec:f3:d2:b8:af:c1:f8:4d:82:29:39:
19:6d:0a:ae
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULSiMeOb6fgzYdvh7tzFkA6XZEyYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDI2MDAwMDAwWhcNMjQxMTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjOGExZTRlYzA1MGMxYjNlZGM0MmFiOWUxYzY2NzAxZTc4
MjUzY2MzY2I5NDAwMzI4MDA1ZmQxOTNjYTUzMTRjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD8WOVAWHAHMxZiZx1tBODS6xV1dVF2Q+AnGij6r9ICN+rX
IfDG6w/8AAli1xCki8N3Mktfbdc4I+6vLGUrEEnFMIEAXCQ4GafWighAzSu6YqSn
ViAOwMVYcu5e6WsPRg9HSB6+JwqUhf9wjlOc201bYC9nYBRJLgeozzhG2tlQZAqX
XmS1OXfH5mFL8jEr+Y1cbLRfwTUH8FcHBtQ7Wi70Fa7+sTaZ+1FcRBt97NptInAG
CoPYusXmBB+0FLC7VG6okShroo62BxDw+JQOuXt4oUCXNF0YDZhgn2YoA/XQq8/9
2TnRAN71XrW7smzqeyNNxAVPo2qxUUtFBK8W4rHZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDQuihK3SQo8k9XyDfRDHPP6MEC8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Y4N2FlMGJhLTA4MWMtNGMyNC1hYTAxLTZmMWM1ZmEzNGI5NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAACHIU+ZZe+chFms4sDtI7r8dTAt
QW1wS0Ky2Qh7DmFYE5lnrnEZUSL+nzwOVzhpWggr2ZDnucL3AgLVQrs3Qlf9JJhG
mVATvtWIIS6tskPfR4w6FDkhpG0AXd4TSj8HaEago6zYEQ6NWnq/UaJDfFCEFarC
WFfdJ906oI2f2cHbC1jZTp8ysqQkGQCIpLPhd6VwPQGGXVoSN6+39mlX8aKKzQgb
wypSBIlR1NVDSz2RDXcZ7Sl0k8M/9BLK7gdJrrr+rFneo92RfOCbE3VaqSizqu7h
z9WtlhCHKYzIz59vTnKZ47ihdwE7Ze2NHW3Drcbs89K4r8H4TYIpORltCq4=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:46:44 2025 by rpki-client