Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e845c517-4282-475b-9b1a-9dc75ff1bdb8.roa
File: e845c517-4282-475b-9b1a-9dc75ff1bdb8.roa (raw, json)
Hash identifier: tXCOuA4Q1vmUK8/dTzfxbc2lEm9o1sdzBu33TIiACbs=
Subject key identifier: 82:C7:CF:AB:01:D1:E9:B2:44:2C:30:88:43:07:9C:DB:7A:11:14:D6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5EE86E4D3B18C3B07FF09CA8C97467B46363D96F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e845c517-4282-475b-9b1a-9dc75ff1bdb8.roa
Signing time: Thu 13 Mar 2025 15:53:25 +0000
ROA not before: Thu 13 Mar 2025 15:53:25 +0000
ROA not after: Thu 17 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e8:6e:4d:3b:18:c3:b0:7f:f0:9c:a8:c9:74:67:b4:63:63:d9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 13 15:53:25 2025 GMT
Not After : Apr 17 23:59:59 2025 GMT
Subject: serialNumber=5e4da8e6283fa1c6057646626bf119be73811ec271229d8e187ea56eab7782d5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:7c:ab:f1:e3:c5:e4:d1:10:10:20:71:70:
d3:e8:de:bb:3c:9a:af:bd:11:7c:2d:54:af:af:c6:
99:bd:49:78:72:81:13:0d:43:01:3e:65:70:9d:bb:
f1:80:37:49:52:80:b9:86:54:84:85:43:84:bc:fe:
86:c3:e6:1c:3c:bc:b0:c2:ed:e3:91:fd:f1:a0:90:
2a:9e:22:9e:fb:43:62:0c:0a:4b:08:31:6f:2d:90:
2f:c5:e9:a9:d8:84:97:79:9c:bb:15:7e:ee:3f:d1:
ca:8f:9f:5e:fc:b6:82:89:23:00:c9:72:16:05:42:
a7:a1:b3:72:0b:e4:78:5c:73:68:90:13:9c:3d:cb:
e2:10:4c:84:25:98:96:ba:38:8a:66:af:34:48:55:
69:ed:f0:63:c5:10:30:4d:7d:f5:14:f6:11:94:5f:
66:01:a2:6d:3a:fe:8a:8e:8d:d9:47:69:2e:04:47:
2d:de:d0:b3:21:03:f3:38:3f:c0:8a:48:83:aa:e2:
6c:23:22:21:6d:32:c3:eb:42:80:69:0b:d9:e7:1a:
67:e8:f3:b5:b1:6b:5e:2b:64:70:27:47:c1:46:22:
82:47:4d:b2:68:78:17:ab:e4:ed:1a:c0:b8:c2:46:
f3:9f:6b:a9:de:c6:5f:06:a8:91:9f:a7:72:eb:1f:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C7:CF:AB:01:D1:E9:B2:44:2C:30:88:43:07:9C:DB:7A:11:14:D6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e845c517-4282-475b-9b1a-9dc75ff1bdb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
45:06:67:61:2d:a0:5b:94:82:9d:26:fe:a6:71:30:92:c2:4f:
01:6d:ce:8d:70:a0:68:a9:92:42:3a:aa:07:11:41:fc:38:92:
36:5d:78:3b:03:84:21:4b:39:71:ce:e5:f1:4f:b1:c0:72:b6:
ea:18:8e:46:1c:c8:bc:d1:a9:0a:03:8a:f9:56:8c:49:0f:d2:
7f:d2:e1:d4:11:c4:35:fa:5c:ad:2f:66:59:f6:a7:62:de:09:
67:d2:f9:a4:ce:04:9a:ef:6a:f4:a8:c0:83:51:06:e7:4e:92:
d6:e5:cf:de:b5:ce:1d:96:cf:5f:e8:2f:a3:50:d3:55:49:39:
c9:c3:96:ea:27:51:00:bd:da:89:1a:72:f2:8d:e2:84:36:48:
0d:73:2b:d9:67:46:15:5d:d9:70:02:d6:f9:b2:33:be:3f:47:
c5:dd:3a:49:6b:81:be:af:07:bb:9b:b6:6e:dd:da:5f:86:41:
b0:2e:52:2d:a1:d4:b6:8a:76:cf:82:59:06:bc:27:54:2a:ba:
75:d3:8f:5a:5f:f3:53:b6:3d:27:20:ca:ac:a5:16:01:9c:3e:
3d:a5:c8:f4:ba:be:11:fa:58:17:e5:85:91:0a:d4:19:a9:65:
31:ea:df:0a:fa:9d:c4:ce:74:be:aa:96:48:bc:87:c8:67:f0:
10:18:84:5c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXuhuTTsYw7B/8JyoyXRntGNj2W8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMzEzMTU1MzI1WhcNMjUwNDE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZTRkYThlNjI4M2ZhMWM2MDU3NjQ2NjI2YmYxMTliZTcz
ODExZWMyNzEyMjlkOGUxODdlYTU2ZWFiNzc4MmQ1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCw3yr8ePF5NEQECBxcNPo3rs8mq+9EXwtVK+vxpm9SXhy
gRMNQwE+ZXCdu/GAN0lSgLmGVISFQ4S8/obD5hw8vLDC7eOR/fGgkCqeIp77Q2IM
CksIMW8tkC/F6anYhJd5nLsVfu4/0cqPn178toKJIwDJchYFQqehs3IL5Hhcc2iQ
E5w9y+IQTIQlmJa6OIpmrzRIVWnt8GPFEDBNffUU9hGUX2YBom06/oqOjdlHaS4E
Ry3e0LMhA/M4P8CKSIOq4mwjIiFtMsPrQoBpC9nnGmfo87Wxa14rZHAnR8FGIoJH
TbJoeBer5O0awLjCRvOfa6nexl8GqJGfp3LrH5xZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUgsfPqwHR6bJELDCIQwec23oRFNYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2U4NDVjNTE3LTQyODItNDc1Yi05YjFhLTlkYzc1ZmYxYmRiOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEUGZ2EtoFuUgp0m/qZxMJLCTwFt
zo1woGipkkI6qgcRQfw4kjZdeDsDhCFLOXHO5fFPscBytuoYjkYcyLzRqQoDivlW
jEkP0n/S4dQRxDX6XK0vZln2p2LeCWfS+aTOBJrvavSowINRBudOktblz961zh2W
z1/oL6NQ01VJOcnDluonUQC92okacvKN4oQ2SA1zK9lnRhVd2XAC1vmyM74/R8Xd
Oklrgb6vB7ubtm7d2l+GQbAuUi2h1LaKds+CWQa8J1QqunXTj1pf81O2PScgyqyl
FgGcPj2lyPS6vhH6WBflhZEK1BmpZTHq3wr6ncTOdL6qlki8h8hn8BAYhFw=
-----END CERTIFICATE-----
Generated at Sat May 10 08:08:18 2025 by rpki-client