Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1717d84b-5ab1-4c7d-928c-b5cc274b4d2a.roa
File: 1717d84b-5ab1-4c7d-928c-b5cc274b4d2a.roa (raw, json)
Hash identifier: yKqQm1MKk6VyYC6zqBytFpQKRzGZwpZk+jCtQ8zWZeM=
Subject key identifier: 6D:CD:57:A4:55:21:86:CD:B8:08:AA:7B:B1:10:DA:23:0C:6E:03:96
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3120587E67FA6A6BCC1C1F3E36F2D1CE89EDE0BB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1717d84b-5ab1-4c7d-928c-b5cc274b4d2a.roa
Signing time: Sun 16 Jun 2024 00:00:00 +0000
ROA not before: Sun 16 Jun 2024 00:00:00 +0000
ROA not after: Sun 21 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:20:58:7e:67:fa:6a:6b:cc:1c:1f:3e:36:f2:d1:ce:89:ed:e0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 16 00:00:00 2024 GMT
Not After : Jul 21 23:59:59 2024 GMT
Subject: serialNumber=31c9765f8b28394b03524cd2212a67dfb4a660ad2f0570fa36b2115ba25603d1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:f1:a1:7a:6e:af:56:b1:10:3b:08:43:15:
86:65:35:72:ec:54:89:49:b8:de:c1:9f:0a:67:e2:
7f:43:63:e7:ed:c6:36:a6:5c:7b:75:18:8b:a3:eb:
b0:ba:69:bf:27:a5:ce:88:ff:aa:1a:51:5d:82:a8:
34:00:c5:a7:21:94:52:c5:bf:0b:02:f7:88:c7:bc:
78:01:9d:ff:6f:d0:6f:a7:2c:fa:e8:89:19:ca:9f:
63:63:6a:68:d5:78:df:7c:4d:16:6a:11:95:12:45:
e0:83:e0:f3:fd:15:e8:80:f7:ca:fc:d2:e7:89:7c:
3b:a0:60:98:0e:c4:6a:a7:1f:92:32:41:ed:08:58:
b8:e1:30:ce:55:a4:90:aa:0e:af:e9:89:44:c6:66:
dc:d6:ea:cd:ee:e4:b0:3e:7c:01:43:b4:bc:63:30:
1b:fe:33:0f:db:4e:97:41:61:c9:c7:03:ff:fd:a2:
3e:89:da:75:b9:40:c2:8e:c8:6e:f2:c7:a6:94:a5:
4e:88:f9:81:11:15:9e:11:2c:e4:52:73:fa:8a:c1:
6e:c9:7a:ae:04:dc:55:a0:f4:26:11:64:ac:40:fe:
15:b5:2a:e5:c0:32:78:5f:30:8e:04:52:69:05:c1:
f2:db:33:41:1e:40:c3:4e:8d:07:93:22:7b:c1:41:
c3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CD:57:A4:55:21:86:CD:B8:08:AA:7B:B1:10:DA:23:0C:6E:03:96
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1717d84b-5ab1-4c7d-928c-b5cc274b4d2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
31:3e:b0:c7:b4:64:5e:c9:40:86:e8:f2:dc:98:48:85:80:65:
51:f1:c6:38:ba:0f:7b:05:6d:9d:1c:29:2c:dd:46:c8:54:fd:
0a:c6:2f:8c:5b:c6:6d:86:a8:ec:b4:de:64:5f:78:1d:de:5f:
2e:ce:05:74:e6:77:10:d9:a6:28:76:0a:ef:db:bd:33:9f:99:
a0:d2:82:ae:e9:3e:8f:bf:d7:22:40:29:ec:90:90:e4:cb:22:
fc:31:55:13:11:80:2a:db:56:25:77:a2:e5:8d:ee:56:a6:e5:
b1:33:dc:60:3d:2b:6f:7a:fa:4b:b6:01:96:5e:d2:7b:2d:97:
cf:c9:5d:40:1e:92:a3:f8:48:a9:fa:99:ed:d3:f7:73:3b:6e:
92:41:49:82:de:f4:af:20:20:83:20:f0:0a:58:4b:e3:1e:8c:
6a:a3:56:0b:46:3d:8f:4b:6e:ac:9d:24:9a:06:0f:17:eb:2f:
95:c8:da:a1:84:a3:40:b5:3c:3c:94:e7:75:55:5b:60:dd:f6:
aa:63:37:9e:cc:62:af:f2:72:49:f5:19:26:d5:74:fc:a3:25:
7b:af:90:e5:93:20:39:65:5e:d5:41:1f:c0:1e:d4:3a:90:68:
a2:61:16:8a:c8:9a:a3:f6:fe:26:90:8b:a9:3d:ec:c7:a4:19:
e4:3f:75:ba
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMSBYfmf6amvMHB8+NvLRzont4LswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNjE2MDAwMDAwWhcNMjQwNzIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMWM5NzY1ZjhiMjgzOTRiMDM1MjRjZDIyMTJhNjdkZmI0
YTY2MGFkMmYwNTcwZmEzNmIyMTE1YmEyNTYwM2QxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCs//Ghem6vVrEQOwhDFYZlNXLsVIlJuN7Bnwpn4n9DY+ft
xjamXHt1GIuj67C6ab8npc6I/6oaUV2CqDQAxachlFLFvwsC94jHvHgBnf9v0G+n
LProiRnKn2NjamjVeN98TRZqEZUSReCD4PP9FeiA98r80ueJfDugYJgOxGqnH5Iy
Qe0IWLjhMM5VpJCqDq/piUTGZtzW6s3u5LA+fAFDtLxjMBv+Mw/bTpdBYcnHA//9
oj6J2nW5QMKOyG7yx6aUpU6I+YERFZ4RLORSc/qKwW7Jeq4E3FWg9CYRZKxA/hW1
KuXAMnhfMI4EUmkFwfLbM0EeQMNOjQeTInvBQcPtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbc1XpFUhhs24CKp7sRDaIwxuA5YwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzE3MTdkODRiLTVhYjEtNGM3ZC05MjhjLWI1Y2MyNzRiNGQyYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADE+sMe0ZF7JQIbo8tyYSIWAZVHx
xji6D3sFbZ0cKSzdRshU/QrGL4xbxm2GqOy03mRfeB3eXy7OBXTmdxDZpih2Cu/b
vTOfmaDSgq7pPo+/1yJAKeyQkOTLIvwxVRMRgCrbViV3ouWN7lam5bEz3GA9K296
+ku2AZZe0nstl8/JXUAekqP4SKn6me3T93M7bpJBSYLe9K8gIIMg8ApYS+MejGqj
VgtGPY9LbqydJJoGDxfrL5XI2qGEo0C1PDyU53VVW2Dd9qpjN57MYq/yckn1GSbV
dPyjJXuvkOWTIDllXtVBH8Ae1DqQaKJhForImqP2/iaQi6k97MekGeQ/dbo=
-----END CERTIFICATE-----
Generated at Tue May 6 22:34:17 2025 by rpki-client