Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dda55783-7a0a-4d44-8ae0-2489ed291b78.roa
File: dda55783-7a0a-4d44-8ae0-2489ed291b78.roa (raw, json)
Hash identifier: YB2kiPYefNxHus30fdnWgTe2/VZT8aRROfWyWtaV8dY=
Subject key identifier: E4:B5:76:89:E3:7A:69:C1:4B:A9:FB:7F:E1:85:30:0D:B4:51:0C:86
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 53647F6D5CE1FC0B4BCC7B3CBD8BF31D39084CB3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dda55783-7a0a-4d44-8ae0-2489ed291b78.roa
Signing time: Wed 15 Nov 2023 00:00:00 +0000
ROA not before: Wed 15 Nov 2023 00:00:00 +0000
ROA not after: Wed 20 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:64:7f:6d:5c:e1:fc:0b:4b:cc:7b:3c:bd:8b:f3:1d:39:08:4c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 15 00:00:00 2023 GMT
Not After : Dec 20 23:59:59 2023 GMT
Subject: serialNumber=9f21d5a4b2fb9c48c6d1840c127a85e9879acdbe6cedd53274c50aecad710215, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:3b:05:27:2a:ca:ec:b8:d9:6a:bc:51:09:
5f:aa:1e:5b:b4:f2:2b:62:67:82:67:6f:1d:44:74:
f0:04:4e:47:df:53:2f:ea:8a:47:fa:4a:e9:a2:ab:
66:95:d4:ee:76:53:47:a0:8f:96:22:23:ed:0a:1d:
1a:ee:a8:30:33:eb:fc:18:a0:9a:d2:05:1a:8f:8f:
3e:ac:aa:b2:b3:e5:91:45:50:b0:aa:0a:6c:d1:5c:
cf:7d:0c:a6:6b:04:14:3f:e8:af:69:7b:de:e8:fe:
ca:f4:1d:d5:24:9f:b2:9f:ca:4c:57:78:b2:69:a0:
e6:6a:6a:8a:6a:91:73:f2:cd:ba:ef:d7:10:cf:0d:
30:28:39:4b:76:55:27:45:ba:cd:ab:55:9c:27:bd:
7c:e7:7b:4d:fc:26:35:9b:e5:26:cc:69:a7:96:03:
9a:0f:09:7e:97:a4:98:ee:a3:24:2f:74:40:7d:ca:
f3:88:dd:6b:15:10:68:09:0e:c2:56:42:d5:6a:d8:
06:f1:a7:df:f5:8f:f1:de:73:97:03:f6:ca:bb:16:
8d:a1:92:fd:17:6c:15:74:69:a1:36:0b:69:4b:e0:
0e:73:75:a4:36:f7:48:52:47:f5:7f:16:1e:44:45:
91:6e:d0:c8:74:e7:e1:23:7c:e8:de:60:d5:59:00:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B5:76:89:E3:7A:69:C1:4B:A9:FB:7F:E1:85:30:0D:B4:51:0C:86
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dda55783-7a0a-4d44-8ae0-2489ed291b78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
02:3a:07:07:70:00:c0:f7:9b:df:78:2a:99:1f:a0:d1:e1:8b:
cb:66:43:47:bf:77:51:fd:06:d4:b3:c8:a8:2c:62:0a:0f:34:
2e:73:87:c6:a8:0d:b6:47:a9:fc:cf:2f:22:00:5e:47:25:85:
e0:44:6a:8d:3f:7d:35:99:b2:85:84:eb:24:c8:88:3c:58:00:
89:34:6b:e6:a8:17:6c:fb:d5:b3:8c:fa:06:14:c6:bc:f4:6f:
e4:e4:9b:7b:2b:62:0c:89:c2:c9:6f:05:8c:b5:26:70:3d:03:
81:f4:68:9e:3a:64:ec:ed:ba:4c:09:d2:70:19:f2:fc:42:f9:
cc:00:a9:82:1a:be:43:69:ef:64:b4:2d:3a:d4:24:2e:3c:e0:
1c:e8:dc:05:72:24:a6:3b:12:52:65:e2:fd:47:66:eb:66:77:
13:21:cc:68:6f:bd:0c:c8:2e:fb:75:62:21:46:32:86:2b:f8:
e4:16:d3:59:ae:7d:99:00:86:2f:20:a8:45:01:a3:cb:0f:24:
b6:fc:3c:06:ac:9f:8b:4f:b3:fe:69:94:49:a7:fa:fc:b5:5f:
0d:ea:54:03:d5:24:82:b2:9f:8d:6f:87:8a:84:79:6b:7c:58:
0e:49:f1:fd:a4:8b:19:cd:c4:91:ec:81:30:6a:93:72:97:2d:
7a:63:10:af
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUU2R/bVzh/AtLzHs8vYvzHTkITLMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTE1MDAwMDAwWhcNMjMxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZjIxZDVhNGIyZmI5YzQ4YzZkMTg0MGMxMjdhODVlOTg3
OWFjZGJlNmNlZGQ1MzI3NGM1MGFlY2FkNzEwMjE1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9YTsFJyrK7LjZarxRCV+qHlu08itiZ4Jnbx1EdPAETkff
Uy/qikf6Sumiq2aV1O52U0egj5YiI+0KHRruqDAz6/wYoJrSBRqPjz6sqrKz5ZFF
ULCqCmzRXM99DKZrBBQ/6K9pe97o/sr0HdUkn7KfykxXeLJpoOZqaopqkXPyzbrv
1xDPDTAoOUt2VSdFus2rVZwnvXzne038JjWb5SbMaaeWA5oPCX6XpJjuoyQvdEB9
yvOI3WsVEGgJDsJWQtVq2Abxp9/1j/Hec5cD9sq7Fo2hkv0XbBV0aaE2C2lL4A5z
daQ290hSR/V/Fh5ERZFu0Mh05+EjfOjeYNVZAN9jAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5LV2ieN6acFLqft/4YUwDbRRDIYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2RkYTU1NzgzLTdhMGEtNGQ0NC04YWUwLTI0ODllZDI5MWI3OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAI6BwdwAMD3m994KpkfoNHhi8tm
Q0e/d1H9BtSzyKgsYgoPNC5zh8aoDbZHqfzPLyIAXkclheBEao0/fTWZsoWE6yTI
iDxYAIk0a+aoF2z71bOM+gYUxrz0b+Tkm3srYgyJwslvBYy1JnA9A4H0aJ46ZOzt
ukwJ0nAZ8vxC+cwAqYIavkNp72S0LTrUJC484Bzo3AVyJKY7ElJl4v1HZutmdxMh
zGhvvQzILvt1YiFGMoYr+OQW01mufZkAhi8gqEUBo8sPJLb8PAasn4tPs/5plEmn
+vy1Xw3qVAPVJIKyn41vh4qEeWt8WA5J8f2kixnNxJHsgTBqk3KXLXpjEK8=
-----END CERTIFICATE-----
Generated at Sun May 11 03:42:29 2025 by rpki-client