Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5b91c84a-1e13-44f4-8ce4-88c9f6623df0.roa
File: 5b91c84a-1e13-44f4-8ce4-88c9f6623df0.roa (raw, json)
Hash identifier: e0DtV106nWJ+sKitwDkxhMWaO5vIMpj/rawuQcCfTco=
Subject key identifier: BB:F3:C2:13:09:F7:5C:93:9C:05:52:50:D1:F6:9A:2D:D6:64:8F:42
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3BE84B45FAEE2DF0E59587827CD54E64CF4259D9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5b91c84a-1e13-44f4-8ce4-88c9f6623df0.roa
Signing time: Sat 01 Jul 2023 00:00:00 +0000
ROA not before: Sat 01 Jul 2023 00:00:00 +0000
ROA not after: Sat 05 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e8:4b:45:fa:ee:2d:f0:e5:95:87:82:7c:d5:4e:64:cf:42:59:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 1 00:00:00 2023 GMT
Not After : Aug 5 23:59:59 2023 GMT
Subject: serialNumber=d9709471a030fbb01606287898fcc965fcadbdede768ee7070cf45387c6eb949, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:15:3c:06:6a:95:fc:8a:42:9a:c4:59:75:
ee:b1:7e:9e:3e:00:24:e5:02:a1:2c:48:4f:7c:a7:
50:03:29:7a:d3:1d:73:88:13:9a:32:a9:ee:b6:d9:
5f:19:85:fe:94:51:ad:7b:1b:cd:d1:6f:50:87:98:
eb:88:77:2a:0a:a2:e6:4b:54:79:da:a7:47:e4:e7:
e1:88:ea:03:35:cf:c7:a6:83:60:d6:df:68:8a:ce:
2c:d2:8c:08:31:b7:4a:95:9c:d9:32:a1:82:e4:ef:
62:ec:8d:81:5c:4a:3e:b7:2a:2c:01:e9:f8:9a:e1:
c1:78:08:ca:6b:28:22:cd:57:ad:3e:20:fc:85:32:
2a:e9:0d:49:8e:7d:da:86:cd:c9:12:3c:bf:45:97:
39:13:f4:52:46:73:48:58:f9:b1:69:70:8c:78:43:
e4:25:77:44:f4:11:e8:82:ba:67:bb:c6:a8:72:7f:
bb:c7:a5:44:d9:b5:7a:5f:75:5e:3a:dd:e1:4b:fa:
71:81:d9:e2:37:6b:77:05:ac:94:b6:f3:65:d3:b2:
91:2d:7a:2d:58:22:a4:41:09:a2:03:a4:be:aa:79:
0e:d1:de:84:b1:16:53:9f:cb:39:cf:7e:b8:c4:63:
ba:1d:a8:46:a2:0e:48:8b:0f:d0:9a:97:50:89:25:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F3:C2:13:09:F7:5C:93:9C:05:52:50:D1:F6:9A:2D:D6:64:8F:42
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5b91c84a-1e13-44f4-8ce4-88c9f6623df0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:4d:4f:16:da:04:83:63:1b:e7:10:b3:90:39:ba:45:9a:05:
5e:a2:5e:70:0d:9a:30:b6:11:8d:b5:38:5f:1e:55:13:a9:d3:
f4:e3:d0:42:4c:21:56:48:c4:8f:c5:90:ff:58:b7:02:26:49:
ab:a6:5e:09:03:16:5e:7e:1d:9b:93:0c:77:02:88:00:31:01:
c8:de:45:af:8e:9e:24:21:75:e7:51:63:8b:00:5a:2f:e9:ee:
c3:53:b6:7f:d2:df:38:0c:1f:4e:a7:ce:03:24:27:f2:36:eb:
ee:c0:d8:bb:a7:39:e6:07:a1:3d:22:47:e8:a6:ad:9d:3e:42:
eb:23:cb:87:aa:d5:b8:1f:f8:2a:da:1c:0f:f1:c5:25:22:64:
bc:96:c6:74:76:a6:7c:1a:15:cf:cc:31:36:62:d1:54:60:c6:
e2:cd:ae:e9:14:d2:d5:76:b2:9d:d5:d3:be:37:66:07:ec:bf:
00:f0:f5:de:bd:f2:76:08:9f:0d:37:e6:5d:2a:fa:18:cd:88:
58:a8:35:47:c6:01:48:b1:44:ac:51:6d:7d:60:40:e1:e9:77:
66:79:fa:55:81:de:9b:af:cd:9a:d6:fe:63:77:da:2c:3e:59:
af:ca:23:6e:c2:ea:27:74:b8:23:e1:19:e0:12:4d:23:0a:2e:
8d:2e:ad:e6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUO+hLRfruLfDllYeCfNVOZM9CWdkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzAxMDAwMDAwWhcNMjMwODA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BkOTcwOTQ3MWEwMzBmYmIwMTYwNjI4Nzg5OGZjYzk2NWZj
YWRiZGVkZTc2OGVlNzA3MGNmNDUzODdjNmViOTQ5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuGhU8BmqV/IpCmsRZde6xfp4+ACTlAqEsSE98p1ADKXrT
HXOIE5oyqe622V8Zhf6UUa17G83Rb1CHmOuIdyoKouZLVHnap0fk5+GI6gM1z8em
g2DW32iKzizSjAgxt0qVnNkyoYLk72LsjYFcSj63KiwB6fia4cF4CMprKCLNV60+
IPyFMirpDUmOfdqGzckSPL9FlzkT9FJGc0hY+bFpcIx4Q+Qld0T0EeiCume7xqhy
f7vHpUTZtXpfdV463eFL+nGB2eI3a3cFrJS282XTspEtei1YIqRBCaIDpL6qeQ7R
3oSxFlOfyznPfrjEY7odqEaiDkiLD9Cal1CJJYldAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUu/PCEwn3XJOcBVJQ0faaLdZkj0IwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzViOTFjODRhLTFlMTMtNDRmNC04Y2U0LTg4YzlmNjYyM2RmMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGpNTxbaBINjG+cQs5A5ukWaBV6i
XnANmjC2EY21OF8eVROp0/Tj0EJMIVZIxI/FkP9YtwImSaumXgkDFl5+HZuTDHcC
iAAxAcjeRa+OniQhdedRY4sAWi/p7sNTtn/S3zgMH06nzgMkJ/I26+7A2LunOeYH
oT0iR+imrZ0+Qusjy4eq1bgf+CraHA/xxSUiZLyWxnR2pnwaFc/MMTZi0VRgxuLN
rukU0tV2sp3V0743ZgfsvwDw9d698nYInw035l0q+hjNiFioNUfGAUixRKxRbX1g
QOHpd2Z5+lWB3puvzZrW/mN32iw+Wa/KI27C6id0uCPhGeASTSMKLo0ureY=
-----END CERTIFICATE-----
Generated at Tue May 6 09:51:40 2025 by rpki-client