Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9b50ea41-a458-4d01-8a46-4327c8ceecdd.roa
File: 9b50ea41-a458-4d01-8a46-4327c8ceecdd.roa (raw, json)
Hash identifier: 7fFklvBIWkNDKK5lR1Hm0sL1bbgvpbjvlZFiW2QBhmc=
Subject key identifier: 3A:32:FC:E1:56:96:34:80:EC:52:75:01:B5:23:95:97:B6:E7:1D:52
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7B532CEEFCA1CA3E83938FFD822ECEBFABD3E95B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9b50ea41-a458-4d01-8a46-4327c8ceecdd.roa
Signing time: Tue 20 Jun 2023 00:00:00 +0000
ROA not before: Tue 20 Jun 2023 00:00:00 +0000
ROA not after: Tue 25 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:53:2c:ee:fc:a1:ca:3e:83:93:8f:fd:82:2e:ce:bf:ab:d3:e9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 20 00:00:00 2023 GMT
Not After : Jul 25 23:59:59 2023 GMT
Subject: serialNumber=49503f3cb2c5ac93ae2678353bd0deffa417d6d77bdce1dbc86a408d43bd0aa3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:63:fa:2a:00:c3:ee:d8:ac:0d:0a:5e:bb:
86:b8:97:e2:8c:b1:cc:70:06:e3:75:ac:24:4b:e7:
67:13:18:87:4b:51:cb:fd:ed:90:7c:39:69:d8:2f:
8e:76:a0:f9:a4:06:8c:46:0f:0d:2e:b3:96:b6:64:
0b:9a:d4:44:49:e9:ef:4c:c7:c4:ba:0b:01:97:13:
cf:94:af:6f:2b:a8:ff:8a:ce:9b:56:ce:2d:d1:a4:
a3:21:33:56:c2:8a:a7:af:fc:67:63:11:db:b0:67:
81:9c:97:68:7f:75:b0:98:e2:1c:8e:d1:da:96:67:
65:f4:f5:1b:fb:02:7c:cc:d1:b0:5f:63:9c:36:30:
04:7f:28:bc:bb:c2:e0:a2:5e:48:8f:97:2a:44:8c:
dd:bf:91:64:e7:40:1a:d0:9d:b4:94:ec:73:30:c2:
91:00:17:b7:7d:fa:e5:65:6a:8a:6c:a2:5d:7d:57:
1a:27:69:d7:64:57:97:2e:44:61:4d:aa:cc:5c:81:
72:fb:0f:e3:c8:a3:c8:84:fc:ad:b1:36:ad:65:23:
71:3a:01:ce:b4:8b:0b:2f:8f:a0:b3:82:96:f8:e5:
b7:d7:73:32:a4:2f:46:e9:53:69:ec:30:9d:b5:38:
19:8a:ac:4a:21:44:c9:e9:4b:92:be:cb:b1:c8:c9:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:32:FC:E1:56:96:34:80:EC:52:75:01:B5:23:95:97:B6:E7:1D:52
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9b50ea41-a458-4d01-8a46-4327c8ceecdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a0:fd:6e:70:29:d7:20:bf:e0:c5:9b:f5:9d:d3:2c:7f:76:
d1:dc:8f:e0:35:ea:96:96:12:25:7d:09:a8:72:94:b7:47:ca:
e5:72:e6:39:31:24:64:12:4d:6f:54:1c:5d:ca:85:01:50:5c:
4d:c6:9c:e9:a6:27:80:1f:95:66:16:22:78:10:eb:59:19:ed:
72:a3:54:67:f8:b3:d2:c1:98:e7:f3:27:3a:72:f7:b6:16:20:
aa:57:69:88:b2:f3:e8:2e:fb:2c:b3:f0:ca:f4:5a:b9:82:80:
dc:6c:9a:40:c3:7b:69:06:97:54:38:79:d9:7b:80:57:27:ff:
20:c3:33:c2:4f:71:28:b4:7f:25:2b:4b:f1:b7:6a:7b:0e:ad:
09:c4:0c:af:92:75:71:61:26:ef:52:da:9c:8d:ed:67:c6:7a:
9d:52:ac:05:00:f7:cc:5e:48:21:66:8a:ea:7d:d0:a7:8a:e8:
ec:17:14:e6:d4:d4:28:85:06:4c:c3:bc:bd:cf:08:5b:7d:f1:
dc:01:5b:64:5d:9b:46:46:22:ec:0d:1d:48:aa:73:0b:5e:19:
a0:be:40:22:c9:c1:c4:00:b9:3b:53:f2:e2:a1:9a:e6:4e:94:
f9:6a:a2:3a:80:9c:f3:e9:c7:48:92:07:ab:a1:b5:d0:d3:0a:
e6:30:4a:6a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUe1Ms7vyhyj6Dk4/9gi7Ov6vT6VswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjIwMDAwMDAwWhcNMjMwNzI1MjM1OTU5
WjB6MUkwRwYDVQQFE0A0OTUwM2YzY2IyYzVhYzkzYWUyNjc4MzUzYmQwZGVmZmE0
MTdkNmQ3N2JkY2UxZGJjODZhNDA4ZDQzYmQwYWEzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDf3mP6KgDD7tisDQpeu4a4l+KMscxwBuN1rCRL52cTGIdL
Ucv97ZB8OWnYL452oPmkBoxGDw0us5a2ZAua1ERJ6e9Mx8S6CwGXE8+Ur28rqP+K
zptWzi3RpKMhM1bCiqev/GdjEduwZ4Gcl2h/dbCY4hyO0dqWZ2X09Rv7AnzM0bBf
Y5w2MAR/KLy7wuCiXkiPlypEjN2/kWTnQBrQnbSU7HMwwpEAF7d9+uVlaopsol19
VxonaddkV5cuRGFNqsxcgXL7D+PIo8iE/K2xNq1lI3E6Ac60iwsvj6Czgpb45bfX
czKkL0bpU2nsMJ21OBmKrEohRMnpS5K+y7HIyew/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOjL84VaWNIDsUnUBtSOVl7bnHVIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzliNTBlYTQxLWE0NTgtNGQwMS04YTQ2LTQzMjdjOGNlZWNkZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJKg/W5wKdcgv+DFm/Wd0yx/dtHc
j+A16paWEiV9CahylLdHyuVy5jkxJGQSTW9UHF3KhQFQXE3GnOmmJ4AflWYWIngQ
61kZ7XKjVGf4s9LBmOfzJzpy97YWIKpXaYiy8+gu+yyz8Mr0WrmCgNxsmkDDe2kG
l1Q4edl7gFcn/yDDM8JPcSi0fyUrS/G3ansOrQnEDK+SdXFhJu9S2pyN7WfGep1S
rAUA98xeSCFmiup90KeK6OwXFObU1CiFBkzDvL3PCFt98dwBW2Rdm0ZGIuwNHUiq
cwteGaC+QCLJwcQAuTtT8uKhmuZOlPlqojqAnPPpx0iSB6uhtdDTCuYwSmo=
-----END CERTIFICATE-----
Generated at Sun May 11 04:18:55 2025 by rpki-client