![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/03a1d9dc-2dc3-4955-9768-5db2f11d0974.roa
File: 03a1d9dc-2dc3-4955-9768-5db2f11d0974.roa (raw, json)
Hash identifier: ytXB4FUQ5Xg1pqiHmqyE1kJKa6yHyjrHQlcuTyq79tQ=
Subject key identifier: 04:13:4B:BB:7D:F9:BB:10:23:40:FD:74:71:4E:E2:E0:A3:96:BF:A8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1DA84E4A7DD003AF4F23C8C7CAE4AE8AFBAF3AC7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/03a1d9dc-2dc3-4955-9768-5db2f11d0974.roa
Signing time: Mon 14 Aug 2023 00:00:00 +0000
ROA not before: Mon 14 Aug 2023 00:00:00 +0000
ROA not after: Mon 18 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a8:4e:4a:7d:d0:03:af:4f:23:c8:c7:ca:e4:ae:8a:fb:af:3a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 14 00:00:00 2023 GMT
Not After : Sep 18 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:a7:f2:d9:ca:96:53:6b:82:d4:00:5e:58:
b5:4b:22:9f:b4:d0:83:52:9b:1c:bc:13:06:5f:40:
69:23:8f:80:7a:12:5b:1e:11:90:49:ee:7c:50:0a:
e5:67:d2:85:cd:1d:e3:e2:7a:ec:d1:ac:dd:5b:b7:
8b:93:cc:c0:57:d2:a0:ed:de:2a:85:ba:fa:63:ee:
ea:47:97:ef:6a:23:7f:b5:33:3c:f5:6c:97:bf:7b:
bd:15:27:d1:83:c0:aa:a6:b7:fb:75:31:b9:36:79:
07:1e:39:a0:83:b0:75:eb:e6:b4:29:7b:f0:fe:83:
8e:29:ef:9a:3c:cd:ab:24:fe:a0:ac:76:57:f5:1c:
71:0e:60:46:6a:c2:74:56:c6:84:cd:17:cf:1d:07:
69:94:a7:b0:a6:9a:88:7f:57:88:2e:b3:0d:29:55:
4f:d0:8d:55:c6:44:3e:57:93:87:fc:69:03:be:eb:
d6:3a:35:4e:55:47:54:56:65:95:27:f3:98:59:d8:
b7:db:12:41:ba:11:85:fd:0d:e7:ae:1e:20:5c:c4:
b3:8c:dd:1d:a9:8e:d2:ce:7b:a3:68:e1:89:97:5a:
e2:5d:db:8c:a2:16:f8:87:7e:75:44:24:19:2a:ac:
5f:a7:d5:d2:a8:64:d4:45:10:29:d4:ab:a9:98:49:
6b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:13:4B:BB:7D:F9:BB:10:23:40:FD:74:71:4E:E2:E0:A3:96:BF:A8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/03a1d9dc-2dc3-4955-9768-5db2f11d0974.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
45:03:90:46:91:7f:11:d8:41:b7:f5:a9:2e:1a:15:3a:03:66:
cd:70:e0:f8:d5:ab:5c:94:c7:57:d1:ea:d0:5a:10:8a:dc:b1:
91:b6:a3:09:66:13:de:cb:96:2b:7e:1a:a5:f3:e8:2f:29:31:
72:93:ff:d1:fc:14:30:d6:b9:7a:dd:30:c3:c3:86:5c:5a:76:
c4:6f:b7:42:6d:af:78:17:96:c9:44:a4:a9:01:76:ae:ab:53:
fa:97:9d:a5:80:a9:57:76:69:f1:25:7f:fb:2b:74:93:f6:45:
49:1b:76:ed:fa:3b:9c:02:f1:b5:7d:4c:32:c6:53:47:0e:d2:
96:b1:cf:57:27:ec:ae:0e:7e:d7:91:30:45:10:16:c5:56:7d:
cb:97:45:4a:90:8f:c7:dd:96:ed:35:bc:49:cc:fc:44:d2:2c:
eb:a4:95:27:40:99:20:ad:5a:53:13:05:86:4d:1a:ec:5d:a9:
a0:b1:82:11:26:70:ba:9f:45:69:b1:43:c0:20:63:d2:b7:7b:
40:52:c2:2f:e3:e1:89:40:3d:37:ae:48:22:60:08:13:88:3f:
b6:6a:af:33:b0:7d:59:cf:00:50:d1:6f:95:84:bf:be:0e:b5:
19:41:7e:bb:f6:2a:9a:4c:23:5c:13:2a:2a:93:4b:29:05:5d:
03:bb:55:9b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHahOSn3QA69PI8jHyuSuivuvOscwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODE0MDAwMDAwWhcNMjMwOTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmOGFjNzQ0Y2M3NzZmNzIyNjUzMTIxZTc1NWU0NmMyNjI4
OWRkMzk1M2YxYjRjYWE1Y2Y4MTczMWM4YWFkOTQ2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQ1qfy2cqWU2uC1ABeWLVLIp+00INSmxy8EwZfQGkjj4B6
ElseEZBJ7nxQCuVn0oXNHePieuzRrN1bt4uTzMBX0qDt3iqFuvpj7upHl+9qI3+1
Mzz1bJe/e70VJ9GDwKqmt/t1Mbk2eQceOaCDsHXr5rQpe/D+g44p75o8zask/qCs
dlf1HHEOYEZqwnRWxoTNF88dB2mUp7Cmmoh/V4gusw0pVU/QjVXGRD5Xk4f8aQO+
69Y6NU5VR1RWZZUn85hZ2LfbEkG6EYX9DeeuHiBcxLOM3R2pjtLOe6No4YmXWuJd
24yiFviHfnVEJBkqrF+n1dKoZNRFECnUq6mYSWuXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUBBNLu335uxAjQP10cU7i4KOWv6gwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzAzYTFkOWRjLTJkYzMtNDk1NS05NzY4LTVkYjJmMTFkMDk3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEUDkEaRfxHYQbf1qS4aFToDZs1w
4PjVq1yUx1fR6tBaEIrcsZG2owlmE97Llit+GqXz6C8pMXKT/9H8FDDWuXrdMMPD
hlxadsRvt0Jtr3gXlslEpKkBdq6rU/qXnaWAqVd2afElf/srdJP2RUkbdu36O5wC
8bV9TDLGU0cO0paxz1cn7K4OfteRMEUQFsVWfcuXRUqQj8fdlu01vEnM/ETSLOuk
lSdAmSCtWlMTBYZNGuxdqaCxghEmcLqfRWmxQ8AgY9K3e0BSwi/j4YlAPTeuSCJg
CBOIP7ZqrzOwfVnPAFDRb5WEv74OtRlBfrv2KppMI1wTKiqTSykFXQO7VZs=
-----END CERTIFICATE-----
Generated at Tue Feb 18 06:59:49 2025 by rpki-client