Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/de989050-52d8-4e1e-9ead-22f73ea6f909.roa
File: de989050-52d8-4e1e-9ead-22f73ea6f909.roa (raw, json)
Hash identifier: G4t/qVuHQZ8hVXlqiMC52MbfFE908Aih5uotLjb88kw=
Subject key identifier: 85:E8:82:8C:58:C5:A3:77:68:C8:6B:B1:F6:95:09:0F:CA:9D:03:1C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 620F9038FD1F3DF86A589CA3292F3E75C086BF96
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/de989050-52d8-4e1e-9ead-22f73ea6f909.roa
Signing time: Mon 03 Mar 2025 09:23:20 +0000
ROA not before: Mon 03 Mar 2025 09:23:20 +0000
ROA not after: Mon 07 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:0f:90:38:fd:1f:3d:f8:6a:58:9c:a3:29:2f:3e:75:c0:86:bf:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 3 09:23:20 2025 GMT
Not After : Apr 7 23:59:59 2025 GMT
Subject: serialNumber=71a30e6f1828268fa8ea7f58a6fa466c311b1be3392bcfaa59ae2190e10cd1ff, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e8:5d:d3:1c:ef:00:e2:e7:31:40:d7:d4:0b:
ef:38:87:24:69:99:78:f4:d8:5d:5b:85:ed:7c:98:
d5:1d:c0:97:d6:05:09:04:b3:3b:ea:45:f4:c5:f3:
53:ff:12:95:90:5a:60:3b:0c:5b:fd:f4:d3:3d:a2:
96:de:75:c3:ff:61:26:31:49:9a:df:5d:71:79:01:
d3:36:11:8b:a0:9f:59:c8:e3:71:f7:8b:a6:69:60:
a5:6d:b5:1c:6b:44:0e:c4:05:4a:b0:6c:96:ee:96:
76:8b:52:f1:6d:c6:3a:eb:66:41:77:5b:19:3d:fe:
f0:1c:8f:5d:db:57:ac:53:16:82:f6:58:6a:29:ab:
8d:0d:8e:da:b2:77:5c:49:c3:46:be:fb:58:15:9e:
3e:db:8a:cc:26:27:b8:b5:7e:5e:23:89:1e:15:58:
e3:50:b7:4d:fe:b3:38:12:75:ad:a9:da:e7:d1:bf:
0b:05:6f:9c:ae:77:31:75:d6:53:c1:81:07:69:1d:
45:d1:d9:fe:e2:f3:db:c2:d4:e2:1e:df:93:f5:80:
cb:a4:2a:8c:eb:2c:50:12:33:06:d9:d3:fd:3d:3b:
0f:e3:db:19:ca:ca:8b:e0:b2:ec:61:cb:03:d9:99:
7c:fc:44:26:9b:3e:ed:d1:0e:c1:cc:59:0d:6a:f7:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E8:82:8C:58:C5:A3:77:68:C8:6B:B1:F6:95:09:0F:CA:9D:03:1C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/de989050-52d8-4e1e-9ead-22f73ea6f909.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
42:10:aa:99:41:77:7a:79:97:da:cc:e6:f3:1f:28:5b:2e:7a:
5a:00:fb:b4:89:7f:79:23:97:bd:60:98:13:2b:07:de:4a:99:
27:4b:e9:72:3b:55:8b:96:21:da:b9:8d:47:cf:20:0b:4f:b1:
f7:83:7f:e6:e4:1a:4b:a8:d2:6e:98:91:c7:1d:4a:c7:30:d3:
7b:c5:90:79:b1:b2:e8:04:9e:ec:5d:e0:7a:5e:03:82:62:69:
b8:d9:28:f4:31:18:72:df:36:6d:74:2a:3b:5e:7c:25:f3:af:
af:12:12:a6:45:f1:3a:31:7f:59:59:3e:26:fc:d5:7f:c5:bb:
c4:99:66:8c:2c:67:f3:98:84:c6:be:91:c0:ac:d8:e8:2a:59:
cc:7b:a0:2d:07:b4:40:52:24:14:4f:a1:82:a8:b5:6c:11:3b:
35:6c:ef:e3:64:e4:77:f5:f8:bc:8f:fb:a3:e6:fd:b3:ee:28:
e8:07:00:be:8e:91:ca:57:bd:d1:7b:b8:61:ec:47:5a:28:97:
3d:6a:7f:61:05:ff:9f:65:94:2e:2d:92:90:98:a7:e1:12:65:
83:51:ef:91:85:3b:1f:1e:9c:6f:37:2b:a5:3a:bc:30:6b:63:
d7:c3:35:78:c0:ec:69:f2:c8:1b:2c:ba:80:a6:f0:f0:c0:e1:
c5:ac:d8:a1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYg+QOP0fPfhqWJyjKS8+dcCGv5YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMzAzMDkyMzIwWhcNMjUwNDA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MWEzMGU2ZjE4MjgyNjhmYThlYTdmNThhNmZhNDY2YzMx
MWIxYmUzMzkyYmNmYWE1OWFlMjE5MGUxMGNkMWZmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDe6F3THO8A4ucxQNfUC+84hyRpmXj02F1bhe18mNUdwJfW
BQkEszvqRfTF81P/EpWQWmA7DFv99NM9opbedcP/YSYxSZrfXXF5AdM2EYugn1nI
43H3i6ZpYKVttRxrRA7EBUqwbJbulnaLUvFtxjrrZkF3Wxk9/vAcj13bV6xTFoL2
WGopq40Njtqyd1xJw0a++1gVnj7biswmJ7i1fl4jiR4VWONQt03+szgSda2p2ufR
vwsFb5yudzF11lPBgQdpHUXR2f7i89vC1OIe35P1gMukKozrLFASMwbZ0/09Ow/j
2xnKyovgsuxhywPZmXz8RCabPu3RDsHMWQ1q9+xjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUheiCjFjFo3doyGux9pUJD8qdAxwwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2RlOTg5MDUwLTUyZDgtNGUxZS05ZWFkLTIyZjczZWE2ZjkwOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEIQqplBd3p5l9rM5vMfKFsueloA
+7SJf3kjl71gmBMrB95KmSdL6XI7VYuWIdq5jUfPIAtPsfeDf+bkGkuo0m6Ykccd
Sscw03vFkHmxsugEnuxd4HpeA4JiabjZKPQxGHLfNm10KjtefCXzr68SEqZF8Tox
f1lZPib81X/Fu8SZZowsZ/OYhMa+kcCs2OgqWcx7oC0HtEBSJBRPoYKotWwROzVs
7+Nk5Hf1+LyP+6Pm/bPuKOgHAL6OkcpXvdF7uGHsR1oolz1qf2EF/59llC4tkpCY
p+ESZYNR75GFOx8enG83K6U6vDBrY9fDNXjA7GnyyBssuoCm8PDA4cWs2KE=
-----END CERTIFICATE-----
Generated at Sat May 10 07:25:30 2025 by rpki-client