Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd2a3e00-5d2a-46fd-8bd0-cc59da6973c5.roa
File: fd2a3e00-5d2a-46fd-8bd0-cc59da6973c5.roa (raw, json)
Hash identifier: 7WyrWr5YOBDGkZbtPHPbMldRkclvGCnA9SEQrqh50Z4=
Subject key identifier: 0C:25:77:81:7C:81:0E:CD:21:D4:1D:06:78:36:42:30:C9:F9:DD:1E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 51FCD37588D936670DD10A4A219DBAB6337D8E7B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd2a3e00-5d2a-46fd-8bd0-cc59da6973c5.roa
Signing time: Fri 06 Oct 2023 00:00:00 +0000
ROA not before: Fri 06 Oct 2023 00:00:00 +0000
ROA not after: Fri 10 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:fc:d3:75:88:d9:36:67:0d:d1:0a:4a:21:9d:ba:b6:33:7d:8e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 6 00:00:00 2023 GMT
Not After : Nov 10 23:59:59 2023 GMT
Subject: serialNumber=66ee7a8279b4ec2cd26c9fb08a3cf804104c230d01d17100aff8d4abf94e18c1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:2e:32:f6:31:21:48:42:5c:dc:5f:15:d3:
92:60:e7:44:a5:21:e4:f6:b4:09:a3:03:dc:10:52:
9a:19:ad:dd:32:88:97:17:dd:2a:03:93:22:a2:53:
20:9d:3d:e7:dc:95:e9:95:f8:e6:0d:dd:9f:eb:08:
10:c7:f7:93:58:7c:36:90:ee:1f:66:ab:ef:ef:b2:
be:72:e9:48:21:08:ea:76:3d:2e:02:1c:5b:47:51:
c7:73:a6:23:05:53:1b:2e:06:87:49:34:21:04:a5:
42:f0:d3:3a:d7:e9:bb:76:5d:ee:95:d9:4d:7d:ee:
2a:2b:0b:86:67:e3:66:70:61:08:80:ad:e4:12:28:
2a:17:ef:75:f3:33:b6:ba:e5:e8:fd:5f:d9:e6:7b:
a4:03:0d:fa:5f:ec:d2:11:5e:aa:fc:ec:a3:af:0b:
66:a8:e3:71:7d:a5:b1:29:59:69:a1:df:48:d7:52:
be:b1:53:6b:4b:1e:7b:9b:57:39:46:af:29:60:05:
83:16:ab:d2:6e:23:a4:5c:83:8c:b1:08:bb:17:e1:
f4:f5:d8:c9:b8:03:ab:aa:8e:16:2c:73:d3:8c:45:
be:3f:04:26:6a:f4:0f:86:28:a2:f0:36:5f:00:e7:
55:2b:26:a9:cf:a2:85:a5:41:45:35:cf:0a:6f:bd:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:25:77:81:7C:81:0E:CD:21:D4:1D:06:78:36:42:30:C9:F9:DD:1E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd2a3e00-5d2a-46fd-8bd0-cc59da6973c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ef:a1:cb:d7:08:61:cd:78:4b:ad:74:af:f9:66:ba:e9:f9:
92:63:ac:cd:b0:32:c4:ed:e3:3e:e1:b8:20:91:d1:77:82:29:
17:a7:9d:4b:5f:b0:4d:86:a2:43:e3:a6:65:3d:21:92:0c:b5:
b5:45:92:65:ef:0f:42:43:8e:ce:74:a9:d2:e7:00:0a:78:e5:
10:16:85:cb:2f:1d:10:72:84:a0:e3:25:c5:8f:ee:be:3e:ca:
9d:2a:23:ff:c1:40:7f:8d:95:db:d8:5e:01:12:f6:d2:54:c7:
9a:7a:21:12:0f:46:5c:41:fb:35:8f:b9:32:65:32:fe:2f:6b:
aa:10:e6:49:d8:76:6c:8e:18:fe:b3:f5:77:da:37:d2:19:63:
24:3b:8e:d7:ee:cf:96:b6:a8:21:18:0d:b1:40:bf:41:00:f6:
3e:d6:59:11:a0:07:8a:52:57:73:98:1c:82:bf:9f:db:f0:8a:
95:36:c4:f7:fd:ce:10:1a:87:1e:69:dc:3a:75:64:b9:c0:e3:
df:57:c8:d3:36:bd:1a:4b:a7:22:15:21:96:38:7a:ef:7a:1e:
d6:4d:41:0f:47:e2:ef:2e:94:6e:72:7e:c9:4d:b1:1c:a2:e7:
fe:7c:44:01:ba:c1:47:46:aa:0d:5b:0e:0f:1c:25:ef:88:db:
7f:3b:ca:3b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUfzTdYjZNmcN0QpKIZ26tjN9jnswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDA2MDAwMDAwWhcNMjMxMTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A2NmVlN2E4Mjc5YjRlYzJjZDI2YzlmYjA4YTNjZjgwNDEw
NGMyMzBkMDFkMTcxMDBhZmY4ZDRhYmY5NGUxOGMxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrUS4y9jEhSEJc3F8V05Jg50SlIeT2tAmjA9wQUpoZrd0y
iJcX3SoDkyKiUyCdPefclemV+OYN3Z/rCBDH95NYfDaQ7h9mq+/vsr5y6UghCOp2
PS4CHFtHUcdzpiMFUxsuBodJNCEEpULw0zrX6bt2Xe6V2U197iorC4Zn42ZwYQiA
reQSKCoX73XzM7a65ej9X9nme6QDDfpf7NIRXqr87KOvC2ao43F9pbEpWWmh30jX
Ur6xU2tLHnubVzlGrylgBYMWq9JuI6Rcg4yxCLsX4fT12Mm4A6uqjhYsc9OMRb4/
BCZq9A+GKKLwNl8A51UrJqnPooWlQUU1zwpvvVk9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDCV3gXyBDs0h1B0GeDZCMMn53R4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2ZkMmEzZTAwLTVkMmEtNDZmZC04YmQwLWNjNTlkYTY5NzNjNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJzvocvXCGHNeEutdK/5Zrrp+ZJj
rM2wMsTt4z7huCCR0XeCKRennUtfsE2GokPjpmU9IZIMtbVFkmXvD0JDjs50qdLn
AAp45RAWhcsvHRByhKDjJcWP7r4+yp0qI//BQH+NldvYXgES9tJUx5p6IRIPRlxB
+zWPuTJlMv4va6oQ5knYdmyOGP6z9XfaN9IZYyQ7jtfuz5a2qCEYDbFAv0EA9j7W
WRGgB4pSV3OYHIK/n9vwipU2xPf9zhAahx5p3Dp1ZLnA499XyNM2vRpLpyIVIZY4
eu96HtZNQQ9H4u8ulG5yfslNsRyi5/58RAG6wUdGqg1bDg8cJe+I2387yjs=
-----END CERTIFICATE-----
Generated at Wed May 7 11:11:39 2025 by rpki-client