Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fc98b52c-3afb-4678-81b5-14209ceffed0.roa
File: fc98b52c-3afb-4678-81b5-14209ceffed0.roa (raw, json)
Hash identifier: MG9jSz4cNihBKnh2ZiZ6MyWXLIwfQKEGv1ooHPVLgRk=
Subject key identifier: AE:2E:CC:7C:46:D5:EE:D1:93:55:D8:FD:D8:91:A9:0F:98:87:A1:48
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 491E9CEA367971FA1457568FE4A972A71E5F69AB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fc98b52c-3afb-4678-81b5-14209ceffed0.roa
Signing time: Thu 02 May 2024 00:00:00 +0000
ROA not before: Thu 02 May 2024 00:00:00 +0000
ROA not after: Thu 06 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:1e:9c:ea:36:79:71:fa:14:57:56:8f:e4:a9:72:a7:1e:5f:69:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 2 00:00:00 2024 GMT
Not After : Jun 6 23:59:59 2024 GMT
Subject: serialNumber=9f444c006ff0a5a61826627f85bca2672f685c3ade67aae97ba506f7f71ac83b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:c4:94:06:59:ed:0a:2c:75:ec:90:fc:01:
b3:8d:d5:b7:be:74:a7:23:4a:83:22:d3:ad:24:6f:
70:84:b5:ce:ad:67:25:26:80:9a:87:e7:9a:9d:e6:
73:ac:48:d5:9e:44:31:4f:d3:ca:3c:1a:d0:8f:0f:
37:60:db:c7:40:16:b0:28:bf:0e:6e:af:a0:fb:7c:
b7:3d:dd:31:f2:f8:7f:f0:9f:9e:42:77:0c:b3:8c:
c0:08:de:45:f5:01:9d:95:65:88:c1:64:8e:0c:0c:
36:f3:d2:37:9b:ff:80:cd:1e:f6:dd:2d:2f:f6:7e:
d9:22:50:01:99:d5:1d:2a:b4:16:ae:a6:fb:98:4e:
69:6b:a0:4a:b3:dc:7b:4d:c6:78:e2:48:2a:c7:0c:
e5:15:59:91:f4:eb:4e:ef:ea:33:06:fe:30:d8:99:
70:e3:19:08:0c:ae:b5:90:71:02:0f:00:16:37:22:
7a:a4:b9:85:92:df:27:ab:e4:4e:58:42:df:ca:76:
4e:8b:6a:7b:f1:0e:53:07:80:fb:96:07:5d:4b:9b:
95:25:fd:9f:11:b5:ba:4a:d8:50:0a:7c:ea:1e:30:
c5:0d:97:94:36:ba:46:64:c1:1a:79:d9:8e:b7:99:
1a:38:9e:f9:ed:53:5c:45:cd:de:f2:58:6c:e6:93:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2E:CC:7C:46:D5:EE:D1:93:55:D8:FD:D8:91:A9:0F:98:87:A1:48
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fc98b52c-3afb-4678-81b5-14209ceffed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
05:13:49:f9:25:ce:94:97:5f:0a:95:07:e1:b3:57:55:8c:2e:
58:91:2e:f9:db:a3:16:fa:6e:ac:08:e9:d5:4f:6a:4e:96:71:
a5:e8:96:db:0f:a5:2b:50:9f:1b:22:57:3f:20:1f:bb:60:d0:
71:bf:4d:f6:c2:7d:11:5d:ad:8e:73:14:e7:3c:fe:a5:b3:6d:
a8:f4:e4:0c:7f:e2:02:87:9f:d3:5d:1c:4e:07:ff:64:f0:61:
60:50:e6:90:57:54:23:46:45:1a:78:73:a8:f5:79:60:b2:0f:
b5:ed:64:4b:f6:c6:81:2e:c2:cc:39:ef:ef:1d:3e:ff:98:3c:
05:be:31:24:49:04:00:05:78:6f:7c:9c:bc:cd:12:a5:33:d4:
9b:52:21:99:06:f3:67:87:03:a9:e0:1b:c4:10:e5:84:cc:65:
dd:db:ee:e1:7b:ef:d7:89:1a:af:c7:c1:cd:a8:e6:a7:d6:d4:
28:d9:aa:05:e8:d5:ef:42:f0:55:5c:ee:92:c8:9f:a7:a9:e3:
80:ea:76:cd:fb:e7:55:31:2e:b4:37:10:25:05:93:be:17:d3:
ea:4f:77:69:46:d8:d3:f2:c4:a7:61:e5:68:3b:87:68:0c:3d:
12:c2:af:af:d5:5c:63:59:9e:3d:d6:ed:e3:ed:8b:3f:1a:7f:
02:d0:ed:30
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSR6c6jZ5cfoUV1aP5Klypx5faaswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNTAyMDAwMDAwWhcNMjQwNjA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZjQ0NGMwMDZmZjBhNWE2MTgyNjYyN2Y4NWJjYTI2NzJm
Njg1YzNhZGU2N2FhZTk3YmE1MDZmN2Y3MWFjODNiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0wsSUBlntCix17JD8AbON1be+dKcjSoMi060kb3CEtc6t
ZyUmgJqH55qd5nOsSNWeRDFP08o8GtCPDzdg28dAFrAovw5ur6D7fLc93THy+H/w
n55CdwyzjMAI3kX1AZ2VZYjBZI4MDDbz0jeb/4DNHvbdLS/2ftkiUAGZ1R0qtBau
pvuYTmlroEqz3HtNxnjiSCrHDOUVWZH0607v6jMG/jDYmXDjGQgMrrWQcQIPABY3
InqkuYWS3yer5E5YQt/Kdk6LanvxDlMHgPuWB11Lm5Ul/Z8RtbpK2FAKfOoeMMUN
l5Q2ukZkwRp52Y63mRo4nvntU1xFzd7yWGzmk79lAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUri7MfEbV7tGTVdj92JGpD5iHoUgwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2ZjOThiNTJjLTNhZmItNDY3OC04MWI1LTE0MjA5Y2VmZmVkMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAUTSfklzpSXXwqVB+GzV1WMLliR
Lvnboxb6bqwI6dVPak6WcaXoltsPpStQnxsiVz8gH7tg0HG/TfbCfRFdrY5zFOc8
/qWzbaj05Ax/4gKHn9NdHE4H/2TwYWBQ5pBXVCNGRRp4c6j1eWCyD7XtZEv2xoEu
wsw57+8dPv+YPAW+MSRJBAAFeG98nLzNEqUz1JtSIZkG82eHA6ngG8QQ5YTMZd3b
7uF779eJGq/Hwc2o5qfW1CjZqgXo1e9C8FVc7pLIn6ep44Dqds3751UxLrQ3ECUF
k74X0+pPd2lG2NPyxKdh5Wg7h2gMPRLCr6/VXGNZnj3W7ePtiz8afwLQ7TA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:59:58 2025 by rpki-client