Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4ca4cb28-a7e2-4328-8d90-bfef9c6001d8.roa
File: 4ca4cb28-a7e2-4328-8d90-bfef9c6001d8.roa (raw, json)
Hash identifier: +o2sILaYYh+sDie4ICPwjpEh8UDg/A7YSp59YwDINjU=
Subject key identifier: 7A:DF:A6:44:13:B3:14:89:91:67:70:A3:BC:0F:94:7A:9E:1C:E7:08
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4F7A4BA0A1508EC260427890899CA622E4FE4D35
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4ca4cb28-a7e2-4328-8d90-bfef9c6001d8.roa
Signing time: Mon 24 Feb 2025 10:28:18 +0000
ROA not before: Mon 24 Feb 2025 10:28:18 +0000
ROA not after: Mon 31 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:7a:4b:a0:a1:50:8e:c2:60:42:78:90:89:9c:a6:22:e4:fe:4d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 24 10:28:18 2025 GMT
Not After : Mar 31 23:59:59 2025 GMT
Subject: serialNumber=fa0e4d52cdea40735e2ab3495756096de69dad735ad98b8f1573ea6b436806bf, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:57:41:72:c8:dd:c2:cc:15:bb:44:6a:28:
52:19:d1:6d:db:a5:e4:b5:08:c7:f1:08:cc:17:d7:
22:68:3e:cf:67:ae:e4:b6:4d:8c:a7:5f:1d:e6:44:
bb:e0:10:be:46:d2:c2:b0:02:7f:5f:95:a2:c1:ba:
ee:e8:7c:2f:70:07:ca:9e:d8:30:4e:81:71:e4:70:
61:bb:b7:33:75:73:d4:0f:30:46:65:eb:db:d4:53:
62:51:cc:f0:e3:f4:9c:82:ff:c0:10:73:e8:71:10:
5e:c0:a2:bf:2e:a8:c1:3c:4d:fc:8b:54:74:25:d0:
b2:64:09:5a:28:1e:0d:c1:de:2c:ae:4a:2b:88:06:
08:ce:2a:61:c5:b2:31:a8:7c:02:36:67:72:0a:71:
17:86:7e:50:58:4a:6c:fd:38:14:02:61:0d:c5:94:
95:3b:c7:29:ec:0e:ae:c6:ca:1a:d4:5f:66:69:df:
ed:c7:5d:48:37:8a:5a:9f:17:d6:b9:20:d0:05:2e:
e4:03:5f:62:e7:06:32:eb:73:7a:ad:4c:53:7e:5a:
25:95:e5:21:66:21:a5:ce:e0:c7:d8:ee:de:d0:7c:
45:89:b0:81:5f:d3:68:6b:76:23:14:be:72:f6:ae:
07:44:62:f2:b1:37:82:2b:0a:b4:a8:65:04:d5:8a:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DF:A6:44:13:B3:14:89:91:67:70:A3:BC:0F:94:7A:9E:1C:E7:08
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4ca4cb28-a7e2-4328-8d90-bfef9c6001d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:02:45:11:ee:63:f3:cb:3f:94:b2:19:d4:8b:87:85:03:c2:
2a:b5:93:ae:3a:19:20:b2:4a:2f:fb:b6:46:7d:1f:1f:15:db:
9f:67:b6:f7:15:f9:02:e0:f3:56:7b:f9:ab:bb:2f:52:f7:fe:
5a:9c:86:a7:ee:f8:9e:ae:9c:d9:33:46:53:ed:c2:8a:80:87:
4c:9a:8d:6b:c3:34:b4:bf:13:43:6e:ef:e2:61:53:49:cb:17:
84:82:9b:1c:cc:8b:95:60:7c:3b:f3:9f:90:68:e2:59:31:11:
10:74:a7:37:a3:28:24:37:4f:92:46:36:df:5e:0d:6c:92:5d:
48:22:a7:27:33:ce:91:11:13:8d:7c:f1:5c:9d:52:43:d4:1b:
7f:b4:5d:22:50:5b:be:6c:df:a7:d1:3b:50:d5:ef:fd:37:75:
ec:5b:1a:6b:15:90:4a:0e:6f:08:df:d6:a2:ab:d6:45:a6:52:
2b:45:cf:05:14:2b:78:1a:6f:46:11:1e:eb:6e:ff:96:f7:f4:
ba:b7:00:6c:af:76:66:3d:c2:b5:6c:2d:9d:9d:62:83:5c:07:
c3:a5:b4:45:9b:77:6f:63:9b:89:06:89:da:61:7a:0e:3a:f6:
1f:a8:4e:e3:56:10:02:20:96:81:0b:47:e9:51:88:38:50:b4:
02:1b:e4:46
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUT3pLoKFQjsJgQniQiZymIuT+TTUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMjI0MTAyODE4WhcNMjUwMzMxMjM1OTU5
WjB6MUkwRwYDVQQFE0BmYTBlNGQ1MmNkZWE0MDczNWUyYWIzNDk1NzU2MDk2ZGU2
OWRhZDczNWFkOThiOGYxNTczZWE2YjQzNjgwNmJmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6NldBcsjdwswVu0RqKFIZ0W3bpeS1CMfxCMwX1yJoPs9n
ruS2TYynXx3mRLvgEL5G0sKwAn9flaLBuu7ofC9wB8qe2DBOgXHkcGG7tzN1c9QP
MEZl69vUU2JRzPDj9JyC/8AQc+hxEF7Aor8uqME8TfyLVHQl0LJkCVooHg3B3iyu
SiuIBgjOKmHFsjGofAI2Z3IKcReGflBYSmz9OBQCYQ3FlJU7xynsDq7GyhrUX2Zp
3+3HXUg3ilqfF9a5INAFLuQDX2LnBjLrc3qtTFN+WiWV5SFmIaXO4MfY7t7QfEWJ
sIFf02hrdiMUvnL2rgdEYvKxN4IrCrSoZQTVil4vAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUet+mRBOzFImRZ3CjvA+Uep4c5wgwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzRjYTRjYjI4LWE3ZTItNDMyOC04ZDkwLWJmZWY5YzYwMDFkOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALECRRHuY/PLP5SyGdSLh4UDwiq1
k646GSCySi/7tkZ9Hx8V259ntvcV+QLg81Z7+au7L1L3/lqchqfu+J6unNkzRlPt
woqAh0yajWvDNLS/E0Nu7+JhU0nLF4SCmxzMi5VgfDvzn5Bo4lkxERB0pzejKCQ3
T5JGNt9eDWySXUgipyczzpERE4188VydUkPUG3+0XSJQW75s36fRO1DV7/03dexb
GmsVkEoObwjf1qKr1kWmUitFzwUUK3gab0YRHutu/5b39Lq3AGyvdmY9wrVsLZ2d
YoNcB8OltEWbd29jm4kGidpheg469h+oTuNWEAIgloELR+lRiDhQtAIb5EY=
-----END CERTIFICATE-----
Generated at Wed May 7 13:10:56 2025 by rpki-client