Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/252ef89d-1f66-480a-b3c6-2c47469de20f.roa
File: 252ef89d-1f66-480a-b3c6-2c47469de20f.roa (raw, json)
Hash identifier: RqZCpM34E5fz2ATxODIbP5izD2YISjlB+6COMP+9H9Q=
Subject key identifier: AA:B4:7D:56:2F:71:FC:37:4E:C1:2A:94:12:8B:58:A6:FE:98:E9:75
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4E713EFF01667F1F1BABBD230925567B6D6C25DF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/252ef89d-1f66-480a-b3c6-2c47469de20f.roa
Signing time: Thu 31 Oct 2024 00:00:00 +0000
ROA not before: Thu 31 Oct 2024 00:00:00 +0000
ROA not after: Thu 05 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:71:3e:ff:01:66:7f:1f:1b:ab:bd:23:09:25:56:7b:6d:6c:25:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 31 00:00:00 2024 GMT
Not After : Dec 5 23:59:59 2024 GMT
Subject: serialNumber=98561ed9fc164b9d3f764a04348e143ea3ff4bb35945a4d2e33376dfe6f7f35d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:27:46:2e:df:da:b3:9f:30:cf:e4:01:85:bf:
d3:e8:5c:7f:18:4e:28:da:60:c4:c1:81:c6:7a:69:
87:61:c4:df:99:51:c4:49:7d:18:32:d1:32:01:5c:
9e:8b:42:77:66:0c:9c:14:75:ec:f6:fd:d5:e4:64:
b7:62:57:bc:b7:63:ca:65:88:8e:ce:c2:be:a4:76:
af:bf:87:fa:10:82:7d:2b:7e:1c:7d:3b:7e:fe:83:
b4:42:d3:9a:89:c9:47:1e:d5:4b:14:11:69:1d:44:
23:c2:f3:18:ac:06:73:84:be:bd:9f:ad:80:4d:3c:
cc:4d:d3:8b:29:43:ef:3c:9f:26:06:08:10:5f:48:
ef:ec:51:7a:1e:d2:7a:06:3e:6a:7e:83:5c:6c:5a:
0e:c9:af:05:bd:79:e1:c8:1e:2c:24:28:cf:b1:64:
ae:fa:47:15:17:39:dd:2d:a8:d3:c2:a0:ca:1f:3c:
22:51:df:5b:13:bb:8e:27:9b:c6:6c:e3:ed:6c:40:
4d:f5:f4:cb:c5:4b:23:72:c9:fb:40:a0:39:bc:2a:
a2:e7:22:9b:e0:07:3e:ba:ac:a1:82:c3:11:7d:15:
75:54:93:33:93:7e:27:52:5b:ed:d6:31:aa:f2:c4:
c7:75:9e:bc:b0:cc:d9:71:2b:33:8f:34:98:05:ef:
0d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B4:7D:56:2F:71:FC:37:4E:C1:2A:94:12:8B:58:A6:FE:98:E9:75
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/252ef89d-1f66-480a-b3c6-2c47469de20f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b3:da:d8:4d:4a:b9:6b:cf:cc:c9:5b:cc:10:4a:9a:92:22:
70:cf:29:cd:16:ed:90:7d:70:33:9d:91:c2:6e:85:f0:fa:61:
d7:0a:a7:d5:00:2f:7f:cc:41:42:e3:5b:c0:45:f7:92:fa:cd:
58:bc:f9:04:95:f3:d8:4c:61:2b:bb:06:f3:3b:df:d1:85:99:
fc:73:0a:10:fc:6e:34:45:2c:b0:4f:70:36:80:ef:89:e7:44:
b9:e0:8a:0e:c3:9f:a0:53:61:1c:55:7e:8a:0c:60:63:21:5f:
4c:ad:c3:6e:ab:27:77:af:73:f6:ef:31:06:0b:89:ac:c2:b5:
15:bb:1f:51:28:bb:4c:3f:75:d8:a9:c2:ea:e9:1c:3b:6d:f5:
f8:53:69:f5:86:c2:6d:65:36:1b:7a:be:fd:e7:13:41:96:0b:
d8:6c:44:3a:85:ac:eb:b4:8c:39:7f:30:88:61:54:73:81:4a:
ba:12:ed:7d:ad:ac:5f:6e:37:99:d5:c5:e8:1e:0f:27:59:f7:
be:a5:bc:9e:d4:be:0d:71:29:fc:ac:b1:de:50:71:58:b6:71:
c7:af:e0:86:7a:5c:7b:c2:e9:83:21:03:e8:90:fc:82:fb:f9:
48:84:cd:44:2f:26:c1:bf:59:7a:a6:f0:63:e8:11:74:70:f0:
50:95:c6:2a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTnE+/wFmfx8bq70jCSVWe21sJd8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDMxMDAwMDAwWhcNMjQxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ODU2MWVkOWZjMTY0YjlkM2Y3NjRhMDQzNDhlMTQzZWEz
ZmY0YmIzNTk0NWE0ZDJlMzMzNzZkZmU2ZjdmMzVkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD2J0Yu39qznzDP5AGFv9PoXH8YTijaYMTBgcZ6aYdhxN+Z
UcRJfRgy0TIBXJ6LQndmDJwUdez2/dXkZLdiV7y3Y8pliI7Owr6kdq+/h/oQgn0r
fhx9O37+g7RC05qJyUce1UsUEWkdRCPC8xisBnOEvr2frYBNPMxN04spQ+88nyYG
CBBfSO/sUXoe0noGPmp+g1xsWg7JrwW9eeHIHiwkKM+xZK76RxUXOd0tqNPCoMof
PCJR31sTu44nm8Zs4+1sQE319MvFSyNyyftAoDm8KqLnIpvgBz66rKGCwxF9FXVU
kzOTfidSW+3WMaryxMd1nrywzNlxKzOPNJgF7w1RAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqrR9Vi9x/DdOwSqUEotYpv6Y6XUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzI1MmVmODlkLTFmNjYtNDgwYS1iM2M2LTJjNDc0NjlkZTIwZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFWz2thNSrlrz8zJW8wQSpqSInDP
Kc0W7ZB9cDOdkcJuhfD6YdcKp9UAL3/MQULjW8BF95L6zVi8+QSV89hMYSu7BvM7
39GFmfxzChD8bjRFLLBPcDaA74nnRLngig7Dn6BTYRxVfooMYGMhX0ytw26rJ3ev
c/bvMQYLiazCtRW7H1Eou0w/ddipwurpHDtt9fhTafWGwm1lNht6vv3nE0GWC9hs
RDqFrOu0jDl/MIhhVHOBSroS7X2trF9uN5nVxegeDydZ976lvJ7Uvg1xKfyssd5Q
cVi2ccev4IZ6XHvC6YMhA+iQ/IL7+UiEzUQvJsG/WXqm8GPoEXRw8FCVxio=
-----END CERTIFICATE-----
Generated at Sat May 10 10:23:12 2025 by rpki-client