Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1f017542-fa7f-4508-9015-30bcae6df8ad.roa
File: 1f017542-fa7f-4508-9015-30bcae6df8ad.roa (raw, json)
Hash identifier: wH5quUZGYKu4l1o9MIe4ZxCzK9cE5KZyQeZTVvl9Hko=
Subject key identifier: 48:35:81:97:1F:15:F3:9E:70:F0:BC:AF:A4:7F:7A:2E:31:2D:FA:DF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2AD3FA318862EA80B769C36B258B6216C5FEEB28
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1f017542-fa7f-4508-9015-30bcae6df8ad.roa
Signing time: Wed 19 Feb 2025 18:38:12 +0000
ROA not before: Wed 19 Feb 2025 18:38:12 +0000
ROA not after: Wed 26 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d3:fa:31:88:62:ea:80:b7:69:c3:6b:25:8b:62:16:c5:fe:eb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 19 18:38:12 2025 GMT
Not After : Mar 26 23:59:59 2025 GMT
Subject: serialNumber=e2240e0ac1e827048093f4f2e3ed95f820880fb3757aeab040f084ffe8263f2d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:36:fc:5e:35:0c:6a:98:12:47:66:33:85:
6a:e0:a7:0a:6f:b6:39:33:77:f2:40:7c:6c:99:91:
06:a8:75:26:3e:1f:bf:b0:c8:5c:9b:f6:2b:1c:51:
cb:79:e8:fc:21:cb:c2:f4:59:c6:83:c7:fe:8d:31:
f8:8c:45:de:fd:33:62:b9:ed:ce:d0:ba:64:75:78:
0f:52:dd:e0:e6:c3:11:2a:b6:64:f9:bf:01:a1:02:
7c:82:83:ae:63:ae:da:73:97:2f:bb:81:48:e7:ff:
cd:97:d7:1f:b4:53:de:cc:b7:86:93:d9:0a:c4:d7:
e8:24:08:ee:8e:0f:b0:6c:18:f1:e5:e8:cb:16:b6:
e6:f9:75:02:f4:5b:77:8a:55:ea:97:82:1f:8f:68:
25:5f:11:84:9a:04:51:b6:05:51:b4:00:90:bc:5d:
b6:09:5c:23:e0:b8:90:d2:a6:f6:82:71:54:89:46:
6e:dd:1a:2b:b0:d7:76:ef:af:f6:21:97:93:c9:37:
5a:1a:3b:3a:4b:42:79:33:c4:3b:84:72:49:dd:a1:
53:6a:3f:d3:c5:05:38:b6:90:a2:4b:4c:bb:7a:50:
17:39:ed:41:2d:81:f4:91:6a:11:e5:95:cd:e4:ef:
4f:ee:af:fa:39:d0:3b:10:7c:20:f9:82:ff:cd:bb:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:35:81:97:1F:15:F3:9E:70:F0:BC:AF:A4:7F:7A:2E:31:2D:FA:DF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1f017542-fa7f-4508-9015-30bcae6df8ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
96:9b:f9:02:7b:67:47:db:97:ad:67:bd:5e:89:d6:52:3c:cd:
21:d1:51:8a:59:86:a3:39:e6:b9:01:ac:e5:66:27:57:99:e2:
79:91:96:e4:49:b2:ea:76:1f:e8:15:f5:17:09:1d:0e:23:2f:
f7:86:1f:6e:54:b2:06:49:e9:0f:42:ff:9b:e7:1d:4d:5c:cb:
75:4e:86:f7:bc:db:f7:f8:b8:2f:66:d9:21:4d:12:0a:aa:4f:
9b:1f:33:99:de:4c:3c:26:53:2b:4b:c1:7f:f1:05:a6:d0:9a:
0f:56:b8:0a:86:e4:01:a5:c0:1d:c2:2e:f5:e4:57:a3:6b:bb:
af:d0:c9:36:05:ae:0f:6f:ba:5f:5d:43:77:c0:00:15:a7:06:
91:3d:f9:37:70:ad:8b:0c:4e:12:18:d0:77:c4:d6:60:c1:40:
e3:1e:e8:5b:3c:c0:97:06:7d:32:96:71:27:fe:48:39:aa:36:
83:df:3f:72:a8:9f:48:ff:6a:10:65:74:f5:69:5e:24:cf:eb:
10:e3:6b:29:8a:6a:4a:bb:ad:81:2f:e3:fa:9f:8c:31:92:6a:
e7:5d:a6:e5:1f:2c:e3:7d:19:b0:b2:79:0f:98:1b:13:f4:69:
8a:5e:26:27:c9:86:ce:0d:12:27:fd:6b:06:df:4e:90:a1:6e:
67:3b:9a:0e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKtP6MYhi6oC3acNrJYtiFsX+6ygwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMjE5MTgzODEyWhcNMjUwMzI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMjI0MGUwYWMxZTgyNzA0ODA5M2Y0ZjJlM2VkOTVmODIw
ODgwZmIzNzU3YWVhYjA0MGYwODRmZmU4MjYzZjJkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWWDb8XjUMapgSR2YzhWrgpwpvtjkzd/JAfGyZkQaodSY+
H7+wyFyb9iscUct56Pwhy8L0WcaDx/6NMfiMRd79M2K57c7QumR1eA9S3eDmwxEq
tmT5vwGhAnyCg65jrtpzly+7gUjn/82X1x+0U97Mt4aT2QrE1+gkCO6OD7BsGPHl
6MsWtub5dQL0W3eKVeqXgh+PaCVfEYSaBFG2BVG0AJC8XbYJXCPguJDSpvaCcVSJ
Rm7dGiuw13bvr/Yhl5PJN1oaOzpLQnkzxDuEckndoVNqP9PFBTi2kKJLTLt6UBc5
7UEtgfSRahHllc3k70/ur/o50DsQfCD5gv/Nu7aHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSDWBlx8V855w8LyvpH96LjEt+t8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzFmMDE3NTQyLWZhN2YtNDUwOC05MDE1LTMwYmNhZTZkZjhhZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJab+QJ7Z0fbl61nvV6J1lI8zSHR
UYpZhqM55rkBrOVmJ1eZ4nmRluRJsup2H+gV9RcJHQ4jL/eGH25UsgZJ6Q9C/5vn
HU1cy3VOhve82/f4uC9m2SFNEgqqT5sfM5neTDwmUytLwX/xBabQmg9WuAqG5AGl
wB3CLvXkV6Nru6/QyTYFrg9vul9dQ3fAABWnBpE9+TdwrYsMThIY0HfE1mDBQOMe
6Fs8wJcGfTKWcSf+SDmqNoPfP3Kon0j/ahBldPVpXiTP6xDjaymKakq7rYEv4/qf
jDGSauddpuUfLON9GbCyeQ+YGxP0aYpeJifJhs4NEif9awbfTpChbmc7mg4=
-----END CERTIFICATE-----
Generated at Wed May 7 16:57:33 2025 by rpki-client