Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4d10103e-fcb7-41c7-b2d7-5e577129526c.roa
File: 4d10103e-fcb7-41c7-b2d7-5e577129526c.roa (raw, json)
Hash identifier: I3iYV1g2j+jbJn44NNzTGObbrVVYdNUKkObUlvdjCdY=
Subject key identifier: B4:F5:D0:08:38:96:C8:73:97:C9:5F:32:B5:51:93:BE:AA:19:0A:8B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 01C878EA105644C343D44496398F5699548EABBA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4d10103e-fcb7-41c7-b2d7-5e577129526c.roa
Signing time: Tue 18 Feb 2025 12:58:20 +0000
ROA not before: Tue 18 Feb 2025 12:58:20 +0000
ROA not after: Tue 25 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c8:78:ea:10:56:44:c3:43:d4:44:96:39:8f:56:99:54:8e:ab:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 18 12:58:20 2025 GMT
Not After : Mar 25 23:59:59 2025 GMT
Subject: serialNumber=242ab12acd061ad8513b64dcf92da2b0aa2ea3e9c6dab3167986a056e674429a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:3e:cb:7b:60:a7:55:f4:a3:b7:cf:9f:29:
3a:22:92:35:1a:df:e8:35:bd:30:2c:82:38:eb:27:
51:d2:4f:77:e7:5b:57:3e:51:95:03:da:c9:cd:3f:
1e:75:d2:95:0f:04:b0:b2:38:58:82:71:3e:09:ce:
be:f5:33:14:7b:aa:e8:7b:33:1f:19:75:15:d3:fb:
ac:bd:84:3b:68:9d:54:51:c9:ec:41:f5:df:a8:a3:
dd:75:5a:a0:0b:f6:57:1b:40:de:d3:f8:09:88:8f:
57:44:a1:d7:31:77:06:fe:29:35:da:a0:19:99:77:
9c:a3:67:18:d1:69:16:b4:43:b4:1d:f9:fb:cb:ec:
5b:fb:fe:11:54:9e:4f:c8:75:87:99:70:d6:01:f1:
b8:26:fb:7e:3d:a3:f8:09:12:9f:b7:8f:fc:3e:72:
d6:34:84:26:36:f2:3b:04:a5:94:64:a6:5c:cd:f2:
3e:f2:be:a3:7e:b3:ca:a3:db:0f:fd:aa:ce:0b:2f:
31:9d:41:ae:78:c2:01:0a:b8:f7:09:43:3f:9f:9d:
9c:af:30:38:72:a4:28:12:82:c7:cc:81:87:ca:17:
d2:25:38:f3:57:b0:ce:4e:b0:5f:3b:e4:10:91:75:
71:21:7e:84:2e:9c:e4:51:a6:aa:cf:e0:b1:30:ce:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F5:D0:08:38:96:C8:73:97:C9:5F:32:B5:51:93:BE:AA:19:0A:8B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4d10103e-fcb7-41c7-b2d7-5e577129526c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fa:47:3d:7b:e8:cb:dd:60:59:b4:22:91:80:02:35:6e:9d:
bd:d2:68:de:de:01:ad:de:d0:5a:15:c3:ae:83:b1:5a:ae:c8:
4f:96:0f:a5:17:00:a1:0f:0d:de:db:b7:31:9b:7b:2b:e2:34:
92:57:ef:18:13:db:c0:37:79:d7:97:73:2e:09:56:1b:45:08:
6c:9c:02:7f:ee:0d:ea:5a:d4:02:f7:6c:e3:43:16:cb:b7:ee:
c9:97:f1:ae:07:44:3d:ec:ad:f7:1b:5b:63:9a:e9:36:bd:7d:
f6:9e:03:77:e4:37:6d:62:86:95:0a:e3:ee:3f:99:af:6d:92:
17:08:87:31:ec:3e:8d:66:31:69:d0:c0:9a:3f:da:87:f4:fd:
08:56:2b:23:31:ff:b0:16:87:96:7b:3b:7f:65:08:1a:ed:c7:
ce:9d:ff:26:89:97:d8:b0:78:06:93:b1:66:92:ee:d0:d9:2b:
9f:c4:cc:84:03:48:34:c6:e0:dc:98:07:84:79:11:bb:dc:84:
67:a1:f2:15:23:26:26:b3:98:8b:7f:93:e1:7d:fd:34:0a:3e:
d5:6d:c2:17:12:a5:2e:72:97:bd:79:8b:a4:58:0c:22:b9:2e:
fa:10:db:39:fd:9b:fe:3c:c6:40:7a:c4:32:f7:cf:e4:a1:06:
19:8a:f1:bf
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAch46hBWRMND1ESWOY9WmVSOq7owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMjE4MTI1ODIwWhcNMjUwMzI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNDJhYjEyYWNkMDYxYWQ4NTEzYjY0ZGNmOTJkYTJiMGFh
MmVhM2U5YzZkYWIzMTY3OTg2YTA1NmU2NzQ0MjlhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCy/T7Le2CnVfSjt8+fKToikjUa3+g1vTAsgjjrJ1HST3fn
W1c+UZUD2snNPx510pUPBLCyOFiCcT4Jzr71MxR7quh7Mx8ZdRXT+6y9hDtonVRR
yexB9d+oo911WqAL9lcbQN7T+AmIj1dEodcxdwb+KTXaoBmZd5yjZxjRaRa0Q7Qd
+fvL7Fv7/hFUnk/IdYeZcNYB8bgm+349o/gJEp+3j/w+ctY0hCY28jsEpZRkplzN
8j7yvqN+s8qj2w/9qs4LLzGdQa54wgEKuPcJQz+fnZyvMDhypCgSgsfMgYfKF9Il
OPNXsM5OsF875BCRdXEhfoQunORRpqrP4LEwzlwVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtPXQCDiWyHOXyV8ytVGTvqoZCoswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzRkMTAxMDNlLWZjYjctNDFjNy1iMmQ3LTVlNTc3MTI5NTI2Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFj6Rz176MvdYFm0IpGAAjVunb3S
aN7eAa3e0FoVw66DsVquyE+WD6UXAKEPDd7btzGbeyviNJJX7xgT28A3edeXcy4J
VhtFCGycAn/uDepa1AL3bONDFsu37smX8a4HRD3srfcbW2Oa6Ta9ffaeA3fkN21i
hpUK4+4/ma9tkhcIhzHsPo1mMWnQwJo/2of0/QhWKyMx/7AWh5Z7O39lCBrtx86d
/yaJl9iweAaTsWaS7tDZK5/EzIQDSDTG4NyYB4R5EbvchGeh8hUjJiazmIt/k+F9
/TQKPtVtwhcSpS5yl715i6RYDCK5LvoQ2zn9m/48xkB6xDL3z+ShBhmK8b8=
-----END CERTIFICATE-----
Generated at Tue May 6 13:07:25 2025 by rpki-client