Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e3538763-90c3-433f-b853-0c1c41a5f350.roa
File: e3538763-90c3-433f-b853-0c1c41a5f350.roa (raw, json)
Hash identifier: 0zL5VTioxNnlGqXWDbB8xCN4S7wPgvHLRKqWHYYoEd4=
Subject key identifier: 19:A7:31:23:22:FC:B1:EA:01:47:72:B3:5A:B6:59:6D:84:F5:8F:A4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2BD5A0E032B3A6EB4C29E7B736963A0BFE9D2741
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e3538763-90c3-433f-b853-0c1c41a5f350.roa
Signing time: Tue 04 Mar 2025 00:38:22 +0000
ROA not before: Tue 04 Mar 2025 00:38:22 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d5:a0:e0:32:b3:a6:eb:4c:29:e7:b7:36:96:3a:0b:fe:9d:27:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 4 00:38:22 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: serialNumber=da7bec0903d427557215243cd0e2ca282ed0a242e095a80eddc9343c58010a03, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8a:25:a5:c6:31:d6:eb:c3:8c:d5:75:fd:f3:
49:fb:ec:9a:89:36:a4:b4:b0:13:5b:94:ce:26:92:
67:17:6f:6e:1d:d4:7a:32:68:ec:89:c1:b0:86:26:
1a:ee:e4:ca:ca:5b:a7:2f:99:68:90:4e:4a:1e:44:
14:60:cb:19:c3:21:61:e7:f1:f9:78:ca:8f:8b:37:
e7:b1:70:95:92:13:2d:7d:64:0a:16:7c:ed:42:c7:
99:ee:40:63:a2:62:04:bc:77:2b:dd:99:de:33:44:
bc:da:e9:9c:08:71:80:0d:62:39:9e:f8:d9:25:c8:
44:0a:a5:88:bc:ad:ed:e5:55:e1:01:4f:c9:37:eb:
ff:a1:4f:a2:48:72:61:8e:04:48:93:13:0d:a3:bd:
99:46:3a:f6:d9:6c:5c:87:b2:33:9d:49:2a:47:09:
19:db:d3:64:c7:17:1c:c8:9a:bf:6c:72:bb:fa:6e:
9d:94:6b:c8:be:de:db:57:d4:d7:f6:77:42:8c:ea:
92:b8:1e:aa:25:9c:3d:65:27:0a:4d:19:49:ea:ae:
3a:82:78:5e:64:6d:b0:1e:6f:40:2b:be:f6:41:8e:
c4:e0:df:f9:cc:0c:62:98:7a:b6:55:0a:c6:f7:14:
2a:02:40:4d:b3:ee:4f:86:cc:95:34:b6:18:ef:06:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A7:31:23:22:FC:B1:EA:01:47:72:B3:5A:B6:59:6D:84:F5:8F:A4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e3538763-90c3-433f-b853-0c1c41a5f350.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:f8:c5:e6:c2:8f:f5:b4:30:f5:0a:35:c0:b7:26:77:8b:d4:
1a:0a:1a:9d:3b:b8:d9:c7:21:30:7b:ce:4e:81:61:f8:77:c3:
14:66:3a:b8:93:3f:48:81:84:57:45:07:f5:a4:27:89:3d:ad:
0a:02:ac:32:be:6e:ef:46:d2:f6:88:76:c1:50:23:79:6a:6f:
e9:91:a8:5e:02:42:4b:2e:e9:d5:bc:b6:43:0f:3c:15:3c:61:
b3:7b:40:5f:89:89:73:59:15:37:c4:76:0f:06:17:8d:a9:6b:
5e:25:33:36:b0:da:90:da:41:ed:ab:ff:a1:5b:0c:ba:c8:20:
e7:c6:6f:2f:75:63:58:c1:49:b0:71:ba:36:6b:bc:60:4a:fb:
08:8c:df:e7:5a:4e:24:b6:64:7d:06:f8:e3:1a:df:d3:12:4f:
b5:2c:97:79:78:05:24:9e:a8:6c:a6:2f:b1:63:cd:7c:b7:30:
50:8b:04:93:bf:82:2b:48:37:b3:5b:18:32:b9:19:93:fe:14:
39:e3:d9:9b:a8:45:e7:41:1a:94:03:b0:56:3d:d2:88:63:20:
1e:e7:8b:90:e9:89:ee:c3:86:67:0c:e3:c5:4e:7b:90:b9:4b:
1b:79:c3:80:41:d7:98:15:4e:d1:29:fc:39:cd:7c:09:c3:64:
1e:e1:dc:75
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUK9Wg4DKzputMKee3NpY6C/6dJ0EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMzA0MDAzODIyWhcNMjUwNDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYTdiZWMwOTAzZDQyNzU1NzIxNTI0M2NkMGUyY2EyODJl
ZDBhMjQyZTA5NWE4MGVkZGM5MzQzYzU4MDEwYTAzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDwiiWlxjHW68OM1XX980n77JqJNqS0sBNblM4mkmcXb24d
1HoyaOyJwbCGJhru5MrKW6cvmWiQTkoeRBRgyxnDIWHn8fl4yo+LN+excJWSEy19
ZAoWfO1Cx5nuQGOiYgS8dyvdmd4zRLza6ZwIcYANYjme+NklyEQKpYi8re3lVeEB
T8k36/+hT6JIcmGOBEiTEw2jvZlGOvbZbFyHsjOdSSpHCRnb02THFxzImr9scrv6
bp2Ua8i+3ttX1Nf2d0KM6pK4HqolnD1lJwpNGUnqrjqCeF5kbbAeb0ArvvZBjsTg
3/nMDGKYerZVCsb3FCoCQE2z7k+GzJU0thjvBgg5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGacxIyL8seoBR3KzWrZZbYT1j6QwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2UzNTM4NzYzLTkwYzMtNDMzZi1iODUzLTBjMWM0MWE1ZjM1MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALP4xebCj/W0MPUKNcC3JneL1BoK
Gp07uNnHITB7zk6BYfh3wxRmOriTP0iBhFdFB/WkJ4k9rQoCrDK+bu9G0vaIdsFQ
I3lqb+mRqF4CQksu6dW8tkMPPBU8YbN7QF+JiXNZFTfEdg8GF42pa14lMzaw2pDa
Qe2r/6FbDLrIIOfGby91Y1jBSbBxujZrvGBK+wiM3+daTiS2ZH0G+OMa39MST7Us
l3l4BSSeqGymL7FjzXy3MFCLBJO/gitIN7NbGDK5GZP+FDnj2ZuoRedBGpQDsFY9
0ohjIB7ni5Dpie7DhmcM48VOe5C5Sxt5w4BB15gVTtEp/DnNfAnDZB7h3HU=
-----END CERTIFICATE-----
Generated at Fri May 9 23:52:02 2025 by rpki-client