Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/512a40b6-3815-4d5e-95db-490de367e47e.roa
File: 512a40b6-3815-4d5e-95db-490de367e47e.roa (raw, json)
Hash identifier: 9daAxs61ITEUuELx5awBp9UxCkrcUdfg6p3CzSUubPY=
Subject key identifier: 17:D8:09:FC:99:49:7A:22:C8:40:36:E6:2D:6B:06:75:BC:A9:AD:F4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 37A085363032398BAD5027CA25C26D461EB1A0EA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/512a40b6-3815-4d5e-95db-490de367e47e.roa
Signing time: Fri 30 Jun 2023 00:00:00 +0000
ROA not before: Fri 30 Jun 2023 00:00:00 +0000
ROA not after: Fri 04 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a0:85:36:30:32:39:8b:ad:50:27:ca:25:c2:6d:46:1e:b1:a0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 30 00:00:00 2023 GMT
Not After : Aug 4 23:59:59 2023 GMT
Subject: serialNumber=89edb27f99ec8305a9278bf417ff703af4c18ec3da5725e635f93521cdf238c4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:17:f3:bc:bb:38:fc:26:e3:05:fc:c9:85:
26:d6:5e:02:21:1c:1e:c1:ea:88:25:ad:a0:96:c2:
ce:21:1f:67:29:dc:10:d0:0c:2a:2c:2a:8d:0a:04:
79:10:4c:0b:92:33:38:75:ee:de:09:95:34:17:0b:
8b:fb:43:49:1b:8f:d0:5c:3f:3d:81:e2:a7:20:b3:
a8:a1:50:a1:6d:c9:ab:71:8a:d8:3b:66:1c:25:31:
78:e0:86:ae:10:45:6f:db:c1:c5:94:39:48:ac:44:
66:8c:49:3c:0e:38:38:f2:64:a0:9d:29:4f:d5:b4:
ea:1d:95:ff:ba:2e:59:bd:7d:39:28:8e:69:f7:f0:
60:c3:47:8d:e9:42:95:e6:40:bc:a9:2f:32:81:67:
da:e4:f1:b7:62:57:ef:52:7d:73:c3:28:58:1e:03:
1d:a8:0f:d6:f3:96:30:21:0f:e8:aa:76:30:dd:6f:
6b:b8:b8:d7:e6:8e:b7:dc:0c:16:d2:d4:ff:35:71:
10:35:3f:0f:2a:b1:c3:e3:cc:65:94:cf:be:f5:42:
89:c9:97:ed:96:77:56:e0:79:13:19:ca:03:66:35:
43:47:70:c3:bf:67:91:72:7d:d3:61:28:c4:ae:b2:
09:13:c2:92:88:b4:e2:e7:cf:49:4c:93:d2:8b:c0:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D8:09:FC:99:49:7A:22:C8:40:36:E6:2D:6B:06:75:BC:A9:AD:F4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/512a40b6-3815-4d5e-95db-490de367e47e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
08:39:9f:de:27:53:4f:4d:5a:1c:5f:6c:9a:39:b3:59:2f:3c:
88:05:14:19:ce:5e:3f:6b:1a:2f:cf:5b:21:00:0b:e3:24:60:
fa:ab:d6:4b:b0:60:7d:a1:98:31:51:b6:bd:e4:49:58:18:37:
88:fa:e5:cf:14:9b:87:fa:bd:c8:a0:51:89:93:26:66:1e:16:
05:ec:68:fe:28:aa:69:24:91:8a:c2:b2:9e:70:31:01:74:d9:
a5:31:1b:34:b2:46:20:9c:f2:c6:f2:af:18:51:e4:ed:64:37:
0a:73:a7:9d:86:e4:c4:92:bd:ca:2e:e0:e7:dc:bd:ea:1d:7a:
9a:52:8b:7c:07:e9:7e:d2:c5:82:3f:d4:76:cd:f4:aa:68:32:
5f:09:33:d0:59:e7:66:63:8d:43:d8:76:30:7c:03:24:65:78:
e1:8f:ca:ba:a9:49:df:3f:1c:66:ab:0a:b9:f7:36:7d:12:c0:
8b:b8:99:13:83:31:1e:2a:c0:51:78:75:64:d2:36:a6:ba:87:
0d:63:14:5e:d1:a3:56:72:61:e6:1b:78:62:b6:49:09:31:87:
b0:59:8c:39:2f:01:56:3e:00:ca:8d:20:c2:aa:8b:fe:ef:ab:
49:ce:b4:16:b6:67:68:a6:6d:07:4f:de:6d:36:c1:1d:5c:d6:
fb:04:79:ee
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUN6CFNjAyOYutUCfKJcJtRh6xoOowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjMwMDAwMDAwWhcNMjMwODA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4OWVkYjI3Zjk5ZWM4MzA1YTkyNzhiZjQxN2ZmNzAzYWY0
YzE4ZWMzZGE1NzI1ZTYzNWY5MzUyMWNkZjIzOGM0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6SBfzvLs4/CbjBfzJhSbWXgIhHB7B6oglraCWws4hH2cp
3BDQDCosKo0KBHkQTAuSMzh17t4JlTQXC4v7Q0kbj9BcPz2B4qcgs6ihUKFtyatx
itg7ZhwlMXjghq4QRW/bwcWUOUisRGaMSTwOODjyZKCdKU/VtOodlf+6Llm9fTko
jmn38GDDR43pQpXmQLypLzKBZ9rk8bdiV+9SfXPDKFgeAx2oD9bzljAhD+iqdjDd
b2u4uNfmjrfcDBbS1P81cRA1Pw8qscPjzGWUz771QonJl+2Wd1bgeRMZygNmNUNH
cMO/Z5FyfdNhKMSusgkTwpKItOLnz0lMk9KLwPrRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUF9gJ/JlJeiLIQDbmLWsGdbyprfQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzUxMmE0MGI2LTM4MTUtNGQ1ZS05NWRiLTQ5MGRlMzY3ZTQ3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAg5n94nU09NWhxfbJo5s1kvPIgF
FBnOXj9rGi/PWyEAC+MkYPqr1kuwYH2hmDFRtr3kSVgYN4j65c8Um4f6vcigUYmT
JmYeFgXsaP4oqmkkkYrCsp5wMQF02aUxGzSyRiCc8sbyrxhR5O1kNwpzp52G5MSS
vcou4OfcveodeppSi3wH6X7SxYI/1HbN9KpoMl8JM9BZ52ZjjUPYdjB8AyRleOGP
yrqpSd8/HGarCrn3Nn0SwIu4mRODMR4qwFF4dWTSNqa6hw1jFF7Ro1ZyYeYbeGK2
SQkxh7BZjDkvAVY+AMqNIMKqi/7vq0nOtBa2Z2imbQdP3m02wR1c1vsEee4=
-----END CERTIFICATE-----
Generated at Tue May 6 12:27:10 2025 by rpki-client