Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b6eac228-1d13-42ee-9987-9e30d5e8018b.roa
File: b6eac228-1d13-42ee-9987-9e30d5e8018b.roa (raw, json)
Hash identifier: UmhUQQAMdepVAUleEHum119uHizrqqrLJNTH0SZ2Bxs=
Subject key identifier: 1A:EE:56:04:8D:D2:3D:CC:6B:01:B3:A0:6C:EB:7E:E1:15:48:4E:B8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 41595F2E6736261573C5E4D1AF97C12210154C9D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b6eac228-1d13-42ee-9987-9e30d5e8018b.roa
Signing time: Sat 24 Jun 2023 00:00:00 +0000
ROA not before: Sat 24 Jun 2023 00:00:00 +0000
ROA not after: Sat 29 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:59:5f:2e:67:36:26:15:73:c5:e4:d1:af:97:c1:22:10:15:4c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 24 00:00:00 2023 GMT
Not After : Jul 29 23:59:59 2023 GMT
Subject: serialNumber=3cf49bddfc50f68389489d99c32d13ffb2087cd297a35e05df387d3140ff3039, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b5:6f:53:98:95:05:97:0a:d4:ee:df:2f:55:
dd:ca:ad:f0:b6:ee:d2:f3:e0:3f:d3:07:c9:01:f0:
4f:73:3c:de:8e:f5:3c:01:aa:ce:dd:af:86:3d:ea:
81:04:43:1e:37:a9:52:2b:f2:c1:4f:e9:7c:a1:d1:
fb:10:77:5a:9b:ad:15:44:05:5d:af:fc:a6:c9:55:
9e:32:04:f0:63:b4:1e:2a:29:6c:ff:3b:c2:f5:63:
0c:e7:1a:eb:66:8b:41:3b:f8:d4:47:33:7d:f4:e6:
ca:fa:b1:9a:3d:fe:08:2d:9e:a2:88:af:05:3b:d9:
31:0c:d8:87:7e:6e:d6:e1:ea:ce:34:22:7c:9f:f3:
ca:80:9a:76:58:05:0f:1a:eb:ee:04:30:82:9a:62:
cb:06:33:95:f6:0b:75:a5:c8:5a:18:fa:a1:be:ff:
97:5c:d1:3c:e6:de:3a:cf:96:92:89:ff:78:1f:ac:
ec:eb:32:91:33:1c:f7:bc:60:47:2c:64:16:a2:4b:
0c:c8:fa:67:8b:a0:0f:d0:61:43:38:d6:f9:36:ec:
f0:48:35:41:17:4b:50:1d:8c:fa:0b:ef:b7:8b:29:
20:80:88:81:78:eb:37:9c:c4:08:5a:e7:63:0a:00:
d4:09:a3:66:d9:fe:9b:3c:92:8a:a6:75:3f:d9:78:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EE:56:04:8D:D2:3D:CC:6B:01:B3:A0:6C:EB:7E:E1:15:48:4E:B8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b6eac228-1d13-42ee-9987-9e30d5e8018b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f6:37:a3:0e:15:88:f8:ad:ac:cc:91:5e:77:b4:aa:be:a6:
66:be:a3:f5:57:df:b3:ef:3c:2f:5b:7a:7d:6a:9c:c9:c9:c7:
c7:47:d2:12:d2:94:4e:08:cd:36:30:ee:5b:45:f8:fc:04:4c:
b4:ff:6e:65:ed:03:76:a8:e1:4f:bd:5a:ec:4c:07:f6:f6:dd:
25:2b:9b:47:c4:f8:8b:4c:a0:27:68:bf:31:c2:e2:58:32:f8:
02:84:76:53:af:ac:1f:d2:1c:a0:f8:20:06:ab:0f:53:bb:36:
19:24:e5:3a:64:a2:33:d8:b1:3e:b6:17:21:ff:52:9e:56:99:
45:9c:25:a0:67:da:90:86:dc:a4:1c:e7:52:75:8e:96:a5:43:
c3:23:45:60:09:49:cf:59:51:39:b3:f6:57:2e:f7:62:00:06:
25:44:8c:42:c6:96:e4:4a:c3:5c:e6:59:45:b3:fd:7c:d1:2a:
7d:0f:67:fc:21:c7:ff:dc:0a:42:32:15:34:0d:c4:02:ae:38:
4a:70:9b:5a:f8:39:17:cb:7a:18:3f:da:1f:ef:8f:ef:35:2b:
91:ec:90:f1:61:1b:a0:d5:b3:a3:6b:24:cf:eb:b2:d8:41:56:
4c:c7:37:04:9f:40:16:90:ef:3f:ec:ae:42:91:26:cd:bb:8f:
1d:49:8d:4b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQVlfLmc2JhVzxeTRr5fBIhAVTJ0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjI0MDAwMDAwWhcNMjMwNzI5MjM1OTU5
WjB6MUkwRwYDVQQFE0AzY2Y0OWJkZGZjNTBmNjgzODk0ODlkOTljMzJkMTNmZmIy
MDg3Y2QyOTdhMzVlMDVkZjM4N2QzMTQwZmYzMDM5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDwtW9TmJUFlwrU7t8vVd3KrfC27tLz4D/TB8kB8E9zPN6O
9TwBqs7dr4Y96oEEQx43qVIr8sFP6Xyh0fsQd1qbrRVEBV2v/KbJVZ4yBPBjtB4q
KWz/O8L1YwznGutmi0E7+NRHM3305sr6sZo9/ggtnqKIrwU72TEM2Id+btbh6s40
Inyf88qAmnZYBQ8a6+4EMIKaYssGM5X2C3WlyFoY+qG+/5dc0Tzm3jrPlpKJ/3gf
rOzrMpEzHPe8YEcsZBaiSwzI+meLoA/QYUM41vk27PBINUEXS1AdjPoL77eLKSCA
iIF46zecxAha52MKANQJo2bZ/ps8koqmdT/ZeBoDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGu5WBI3SPcxrAbOgbOt+4RVITrgwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2I2ZWFjMjI4LTFkMTMtNDJlZS05OTg3LTllMzBkNWU4MDE4Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKT2N6MOFYj4razMkV53tKq+pma+
o/VX37PvPC9ben1qnMnJx8dH0hLSlE4IzTYw7ltF+PwETLT/bmXtA3ao4U+9WuxM
B/b23SUrm0fE+ItMoCdovzHC4lgy+AKEdlOvrB/SHKD4IAarD1O7Nhkk5TpkojPY
sT62FyH/Up5WmUWcJaBn2pCG3KQc51J1jpalQ8MjRWAJSc9ZUTmz9lcu92IABiVE
jELGluRKw1zmWUWz/XzRKn0PZ/whx//cCkIyFTQNxAKuOEpwm1r4ORfLehg/2h/v
j+81K5HskPFhG6DVs6NrJM/rsthBVkzHNwSfQBaQ7z/srkKRJs27jx1JjUs=
-----END CERTIFICATE-----
Generated at Wed May 7 11:03:09 2025 by rpki-client