Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dc7f7434-46e6-40db-abdf-66f21829ccbd.roa
File: dc7f7434-46e6-40db-abdf-66f21829ccbd.roa (raw, json)
Hash identifier: ZkexBIPljcoAE5Ets1bOrKzWMyQUaKYRzlGz2FjTyik=
Subject key identifier: FB:2F:31:FD:17:00:D3:32:26:D0:65:A9:19:DC:9D:9F:BA:08:AD:FF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4962D0D641EC7C6340641267EC6AE82C0C7420B4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dc7f7434-46e6-40db-abdf-66f21829ccbd.roa
Signing time: Sun 07 Jan 2024 00:00:00 +0000
ROA not before: Sun 07 Jan 2024 00:00:00 +0000
ROA not after: Sun 11 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:62:d0:d6:41:ec:7c:63:40:64:12:67:ec:6a:e8:2c:0c:74:20:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 7 00:00:00 2024 GMT
Not After : Feb 11 23:59:59 2024 GMT
Subject: serialNumber=b629cf1ae36a5fa685e213179b96fe33bb9f65ea13092425778ebcafe53c73ed, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:90:82:35:57:a0:cd:4b:43:54:1e:a4:d3:
47:6f:5a:48:dc:2b:87:40:f8:0f:d4:43:d2:bd:85:
c5:f7:ae:9c:ab:0e:e1:65:a4:a8:2c:21:a4:b1:21:
f7:ba:fe:e6:be:5c:42:82:0f:95:9b:86:1a:62:e3:
4b:a8:17:04:dd:ae:bc:8a:8e:5e:5f:24:d7:d1:fd:
b9:02:35:8c:55:b4:35:78:27:a9:57:d2:a0:d1:03:
08:45:59:96:63:a1:42:b3:3e:ff:4c:48:ea:33:5d:
6d:8b:4f:8e:27:d3:6a:c3:6f:b9:30:66:d7:8b:c8:
a9:08:62:0e:4c:87:60:7f:8b:81:af:7b:0a:45:fd:
9a:9e:f7:58:00:ac:3d:27:5b:8d:ee:4a:b9:ff:2e:
d6:68:df:65:35:c7:83:dc:e0:c4:79:00:dd:66:d0:
ff:e5:57:9a:47:1e:78:f1:e3:a9:21:2e:9c:17:ac:
40:7e:ec:24:23:1e:83:79:66:b8:bd:1e:00:19:62:
e2:d3:7d:8f:87:82:6f:e3:32:12:21:1f:44:1b:6f:
11:0c:6c:47:87:3f:1d:52:d2:b4:24:96:9e:c7:fb:
43:5b:c3:37:6f:c9:b0:0e:8f:db:f9:c7:14:42:0c:
69:86:63:47:dd:2e:5f:cb:09:5c:9f:20:5c:c8:db:
c3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2F:31:FD:17:00:D3:32:26:D0:65:A9:19:DC:9D:9F:BA:08:AD:FF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dc7f7434-46e6-40db-abdf-66f21829ccbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
93:9d:44:3e:01:e1:f3:67:21:76:32:56:73:4c:f3:68:8d:a0:
a4:8e:66:97:35:6f:9a:eb:5d:d7:91:1b:62:e4:8b:10:7e:dd:
50:1c:10:36:bd:ca:ad:25:a5:08:47:03:8a:7b:d7:ab:c7:3d:
3b:cd:4b:3a:ff:7d:53:d9:30:d3:19:d0:de:d5:14:19:e9:b8:
6f:1c:3d:3b:77:10:d4:ec:22:44:7d:33:74:38:38:dd:ab:d9:
15:96:84:52:fd:ca:43:d9:b5:af:a1:ea:93:83:14:23:15:2e:
93:4c:86:45:cf:4a:ee:4b:5f:f4:eb:90:ce:e4:a8:64:08:19:
8f:03:08:1f:e5:d5:7f:ca:df:1f:1b:12:e8:32:d3:d7:8c:4a:
9e:08:7e:3b:05:31:be:84:46:b4:0e:0c:a8:a9:77:5e:cb:24:
5a:cb:c5:4f:92:06:c9:00:c2:7b:33:0c:75:14:f1:7e:b9:54:
53:b6:84:04:b6:98:89:eb:85:5b:2d:f2:06:62:4b:68:82:94:
8d:6a:b9:cb:f9:4e:5d:a1:42:07:7b:c1:34:e6:ac:87:e3:21:
0d:e2:4a:99:a0:69:47:d5:be:99:4f:55:d8:6e:2a:f4:0d:8e:
04:3f:f4:37:a3:4f:66:5e:15:c7:d8:e4:e3:89:bb:57:6d:7c:
0e:fe:f7:3c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSWLQ1kHsfGNAZBJn7GroLAx0ILQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMTA3MDAwMDAwWhcNMjQwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNjI5Y2YxYWUzNmE1ZmE2ODVlMjEzMTc5Yjk2ZmUzM2Ji
OWY2NWVhMTMwOTI0MjU3NzhlYmNhZmU1M2M3M2VkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCm3pCCNVegzUtDVB6k00dvWkjcK4dA+A/UQ9K9hcX3rpyr
DuFlpKgsIaSxIfe6/ua+XEKCD5Wbhhpi40uoFwTdrryKjl5fJNfR/bkCNYxVtDV4
J6lX0qDRAwhFWZZjoUKzPv9MSOozXW2LT44n02rDb7kwZteLyKkIYg5Mh2B/i4Gv
ewpF/Zqe91gArD0nW43uSrn/LtZo32U1x4Pc4MR5AN1m0P/lV5pHHnjx46khLpwX
rEB+7CQjHoN5Zri9HgAZYuLTfY+Hgm/jMhIhH0QbbxEMbEeHPx1S0rQklp7H+0Nb
wzdvybAOj9v5xxRCDGmGY0fdLl/LCVyfIFzI28PBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+y8x/RcA0zIm0GWpGdydn7oIrf8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2RjN2Y3NDM0LTQ2ZTYtNDBkYi1hYmRmLTY2ZjIxODI5Y2NiZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJOdRD4B4fNnIXYyVnNM82iNoKSO
Zpc1b5rrXdeRG2LkixB+3VAcEDa9yq0lpQhHA4p716vHPTvNSzr/fVPZMNMZ0N7V
FBnpuG8cPTt3ENTsIkR9M3Q4ON2r2RWWhFL9ykPZta+h6pODFCMVLpNMhkXPSu5L
X/TrkM7kqGQIGY8DCB/l1X/K3x8bEugy09eMSp4IfjsFMb6ERrQODKipd17LJFrL
xU+SBskAwnszDHUU8X65VFO2hAS2mInrhVst8gZiS2iClI1qucv5Tl2hQgd7wTTm
rIfjIQ3iSpmgaUfVvplPVdhuKvQNjgQ/9DejT2ZeFcfY5OOJu1dtfA7+9zw=
-----END CERTIFICATE-----
Generated at Wed May 7 10:34:58 2025 by rpki-client