Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fc9382d5-799d-40cf-a624-751422b22ad9.roa
File: fc9382d5-799d-40cf-a624-751422b22ad9.roa (raw, json)
Hash identifier: YJEj2NCGKiQIDQHvlZtQN/amNF/3IGIoSK+V4SkQG7E=
Subject key identifier: EA:EC:E2:8E:E1:A9:A3:DB:C4:F6:3B:C5:C9:93:1A:75:14:11:6D:E6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 33F77BAD9428A3CF85BFC2E150EB2EA6B9CD826D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fc9382d5-799d-40cf-a624-751422b22ad9.roa
Signing time: Thu 22 Jun 2023 00:00:00 +0000
ROA not before: Thu 22 Jun 2023 00:00:00 +0000
ROA not after: Thu 27 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f7:7b:ad:94:28:a3:cf:85:bf:c2:e1:50:eb:2e:a6:b9:cd:82:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 22 00:00:00 2023 GMT
Not After : Jul 27 23:59:59 2023 GMT
Subject: serialNumber=61322c12b3ce6d28be02f41d42d2f6670e55ac7861d34a1f440e02f6d829b11e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:40:ee:e9:82:ed:c4:a7:f7:e4:41:df:e4:
db:24:bb:dc:bf:65:3d:51:0a:92:b3:d8:aa:ad:5d:
03:86:5e:f5:0f:60:30:fa:52:fa:eb:1e:f2:de:3f:
7d:5d:27:d8:a2:91:ea:6f:76:d1:a1:32:9e:47:cb:
ce:c0:58:ac:3f:f3:29:22:46:db:14:59:c8:41:44:
21:f6:eb:d5:c7:cf:87:06:dd:be:1e:72:65:36:be:
57:d4:62:92:4a:97:9b:14:ac:32:f9:9c:94:02:49:
32:93:01:36:4d:62:75:4d:8f:c5:9c:50:b6:19:12:
1b:45:22:3b:96:d1:06:6f:d4:56:02:cd:9e:92:46:
3e:88:f0:7e:1c:32:1d:bf:c9:c6:1a:3d:6c:15:ad:
6f:c5:7c:5f:76:73:47:97:3c:95:ab:17:a7:e5:fc:
b5:f5:f7:4e:c2:16:9a:eb:8f:69:eb:78:d5:d5:ac:
79:fc:a8:2a:77:7a:b3:76:9e:f0:8c:6f:c7:56:a0:
bf:f3:a1:31:5c:c8:f8:89:32:42:2e:3e:71:0d:bb:
59:3f:49:c0:5f:c1:35:c3:bd:ab:17:a6:83:da:40:
cc:4d:e7:43:aa:4c:69:fc:a0:e6:4f:b0:5e:f3:61:
99:4d:98:dd:47:0b:96:2c:f1:78:26:28:a7:d1:49:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EC:E2:8E:E1:A9:A3:DB:C4:F6:3B:C5:C9:93:1A:75:14:11:6D:E6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fc9382d5-799d-40cf-a624-751422b22ad9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:7a:a2:04:cd:d9:8c:a4:18:09:af:96:10:24:b9:ef:b2:46:
0a:a9:7b:4f:04:85:7a:7f:43:f4:77:6a:bc:8f:3b:c2:c0:73:
62:c2:1f:0e:48:7d:d1:f1:fa:6b:ef:cd:81:5c:2b:a1:71:77:
a7:13:c9:d9:23:1d:c8:94:6d:1a:d4:12:87:f2:53:80:27:f2:
e8:a5:6f:e0:90:66:e5:fc:6b:d5:0e:a1:17:84:18:9f:c2:1e:
ac:e7:97:9a:0d:99:a4:32:fe:31:cd:c9:af:f9:d1:00:d5:b8:
6d:3a:82:95:41:c6:98:45:3b:ad:95:d5:f9:8b:6e:e7:75:26:
e6:6a:5c:36:6b:7a:ac:1b:c5:98:20:3b:96:68:fe:5d:86:ef:
90:05:3d:84:05:bd:c6:97:b9:5c:dc:b3:6a:83:69:19:c1:bc:
75:79:09:88:6d:bc:b8:a0:9f:61:51:d3:c0:44:4f:14:c5:b2:
d4:21:67:fb:a7:4e:ac:25:d1:04:00:3e:de:e9:08:b4:f6:5a:
5b:1f:69:8c:5c:23:89:52:86:19:d3:99:bb:60:e2:58:f7:8e:
e8:75:ad:a7:eb:f1:28:74:4b:a8:b9:b4:c5:fe:b7:f1:45:85:
2b:95:33:19:6c:36:cb:0b:ac:a2:b8:ce:3d:c8:8f:48:d8:2d:
86:bd:c9:a5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUM/d7rZQoo8+Fv8LhUOsuprnNgm0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjIyMDAwMDAwWhcNMjMwNzI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MTMyMmMxMmIzY2U2ZDI4YmUwMmY0MWQ0MmQyZjY2NzBl
NTVhYzc4NjFkMzRhMWY0NDBlMDJmNmQ4MjliMTFlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUJUDu6YLtxKf35EHf5Nsku9y/ZT1RCpKz2KqtXQOGXvUP
YDD6UvrrHvLeP31dJ9iikepvdtGhMp5Hy87AWKw/8ykiRtsUWchBRCH269XHz4cG
3b4ecmU2vlfUYpJKl5sUrDL5nJQCSTKTATZNYnVNj8WcULYZEhtFIjuW0QZv1FYC
zZ6SRj6I8H4cMh2/ycYaPWwVrW/FfF92c0eXPJWrF6fl/LX1907CFprrj2nreNXV
rHn8qCp3erN2nvCMb8dWoL/zoTFcyPiJMkIuPnENu1k/ScBfwTXDvasXpoPaQMxN
50OqTGn8oOZPsF7zYZlNmN1HC5Ys8XgmKKfRSQ5TAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6uzijuGpo9vE9jvFyZMadRQRbeYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2ZjOTM4MmQ1LTc5OWQtNDBjZi1hNjI0LTc1MTQyMmIyMmFkOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKR6ogTN2YykGAmvlhAkue+yRgqp
e08EhXp/Q/R3aryPO8LAc2LCHw5IfdHx+mvvzYFcK6Fxd6cTydkjHciUbRrUEofy
U4An8uilb+CQZuX8a9UOoReEGJ/CHqznl5oNmaQy/jHNya/50QDVuG06gpVBxphF
O62V1fmLbud1JuZqXDZreqwbxZggO5Zo/l2G75AFPYQFvcaXuVzcs2qDaRnBvHV5
CYhtvLign2FR08BETxTFstQhZ/unTqwl0QQAPt7pCLT2WlsfaYxcI4lShhnTmbtg
4lj3juh1rafr8Sh0S6i5tMX+t/FFhSuVMxlsNssLrKK4zj3Ij0jYLYa9yaU=
-----END CERTIFICATE-----
Generated at Fri May 9 20:46:04 2025 by rpki-client