Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8009b2a1-7662-452d-82f0-10255d91ab97.roa
File: 8009b2a1-7662-452d-82f0-10255d91ab97.roa (raw, json)
Hash identifier: ZCTcSYPH6Z/0xgHJjgX9NUVm+aH8gVfvqXIJ26Uqdq8=
Subject key identifier: 56:05:C3:C3:DE:A0:C7:BE:56:25:D1:48:B8:A9:A5:86:97:90:CA:71
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 563D29BDD12FB97A148788BBC5EAD538FE324FFF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8009b2a1-7662-452d-82f0-10255d91ab97.roa
Signing time: Sat 15 Mar 2025 22:33:19 +0000
ROA not before: Sat 15 Mar 2025 22:33:19 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:3d:29:bd:d1:2f:b9:7a:14:87:88:bb:c5:ea:d5:38:fe:32:4f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 15 22:33:19 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: serialNumber=5e769b4b8ceb610262a6ab2077528d214f7473da5139fe98daf1f09c7499c56c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:8d:5c:d2:32:b0:27:8b:6a:1c:87:8c:09:
ca:62:ec:24:98:5c:b3:ce:a5:4d:8b:4a:96:66:f0:
d0:0f:6b:5f:16:4c:4e:59:72:a2:06:6a:b8:95:c1:
07:b6:91:50:59:26:fe:b1:f7:f5:4c:eb:c1:04:8c:
45:c2:97:37:87:8a:36:e8:db:f6:0c:62:c5:1c:0d:
2c:95:c9:44:82:f0:3d:f8:37:47:22:00:ae:ac:f9:
75:02:4d:7f:aa:d4:73:53:64:93:ee:e0:d4:a4:58:
bd:f2:52:1b:2b:7d:67:d2:79:1d:52:59:e4:20:15:
e4:19:ca:bc:1f:6b:11:c4:38:c9:16:f6:3c:88:d3:
c9:1b:e9:06:7c:9e:6f:40:3e:3f:05:9c:eb:47:28:
dc:14:4b:75:31:d3:44:87:09:b0:fa:1a:6e:29:68:
67:41:21:4b:7f:e3:18:ef:4b:63:5f:49:a4:cf:b1:
0a:60:5b:2e:d2:b7:7c:db:b2:bf:96:a1:13:f0:62:
a2:54:a2:49:f2:a0:fc:b0:7b:75:12:5d:e0:3e:0a:
5b:1b:4d:2d:94:f5:d5:a6:7e:f7:32:2f:0b:2d:a1:
da:01:82:4f:b8:b4:d1:f3:b7:95:72:5d:96:ca:cc:
fc:3a:71:c4:2e:d2:99:3c:b0:22:2b:55:e0:a3:71:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:05:C3:C3:DE:A0:C7:BE:56:25:D1:48:B8:A9:A5:86:97:90:CA:71
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8009b2a1-7662-452d-82f0-10255d91ab97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:11:ce:e4:19:22:5b:a8:e1:d1:18:b7:1a:29:2e:ae:19:74:
7f:57:73:92:89:32:ac:b0:80:34:7d:43:5a:99:c1:8c:17:ef:
0a:00:56:c1:21:22:25:6a:81:6d:f4:f2:2f:81:f6:55:36:c5:
2e:c2:cc:95:24:9a:50:ea:9f:55:db:1a:a2:2b:3d:1d:12:49:
31:d6:24:1e:b0:87:b4:e3:2c:81:fc:80:13:e9:75:45:a5:3b:
37:67:45:fe:97:95:e0:d2:c9:98:ed:3f:45:90:b9:9f:59:16:
b9:8e:00:60:94:b0:43:0a:a9:99:ef:09:a5:9c:8b:0e:cc:cc:
15:46:54:9d:60:02:18:2e:42:b9:cb:02:1a:02:29:28:5d:96:
5c:c9:90:e5:8a:f0:19:f2:f1:dc:d8:1e:93:33:a0:e9:05:f3:
62:08:8a:a4:c6:b9:ae:95:30:a5:fc:74:64:3e:43:56:23:54:
ad:ef:29:2d:ff:68:06:fb:54:c2:e7:95:f4:3e:6d:b4:73:d1:
f7:72:d4:df:a7:3b:c4:88:d0:70:93:9c:46:58:fa:44:d6:35:
bf:ab:ba:3d:7f:87:b1:11:b8:2b:99:ee:78:32:10:7b:9b:1b:
ec:9f:dd:ae:69:ba:cd:47:6f:3b:1a:47:0a:2a:de:63:88:8e:
9d:80:fb:b2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVj0pvdEvuXoUh4i7xerVOP4yT/8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMzE1MjIzMzE5WhcNMjUwNDE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZTc2OWI0YjhjZWI2MTAyNjJhNmFiMjA3NzUyOGQyMTRm
NzQ3M2RhNTEzOWZlOThkYWYxZjA5Yzc0OTljNTZjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2CI1c0jKwJ4tqHIeMCcpi7CSYXLPOpU2LSpZm8NAPa18W
TE5ZcqIGariVwQe2kVBZJv6x9/VM68EEjEXClzeHijbo2/YMYsUcDSyVyUSC8D34
N0ciAK6s+XUCTX+q1HNTZJPu4NSkWL3yUhsrfWfSeR1SWeQgFeQZyrwfaxHEOMkW
9jyI08kb6QZ8nm9APj8FnOtHKNwUS3Ux00SHCbD6Gm4paGdBIUt/4xjvS2NfSaTP
sQpgWy7St3zbsr+WoRPwYqJUoknyoPywe3USXeA+ClsbTS2U9dWmfvcyLwstodoB
gk+4tNHzt5VyXZbKzPw6ccQu0pk8sCIrVeCjcU3JAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVgXDw96gx75WJdFIuKmlhpeQynEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzgwMDliMmExLTc2NjItNDUyZC04MmYwLTEwMjU1ZDkxYWI5Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAK0RzuQZIluo4dEYtxopLq4ZdH9X
c5KJMqywgDR9Q1qZwYwX7woAVsEhIiVqgW308i+B9lU2xS7CzJUkmlDqn1XbGqIr
PR0SSTHWJB6wh7TjLIH8gBPpdUWlOzdnRf6XleDSyZjtP0WQuZ9ZFrmOAGCUsEMK
qZnvCaWciw7MzBVGVJ1gAhguQrnLAhoCKShdllzJkOWK8Bny8dzYHpMzoOkF82II
iqTGua6VMKX8dGQ+Q1YjVK3vKS3/aAb7VMLnlfQ+bbRz0fdy1N+nO8SI0HCTnEZY
+kTWNb+ruj1/h7ERuCuZ7ngyEHubG+yf3a5pus1HbzsaRwoq3mOIjp2A+7I=
-----END CERTIFICATE-----
Generated at Sun May 11 10:09:20 2025 by rpki-client