Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1b508eea-a562-442c-9329-f13b7e5c4d9a.roa
File: 1b508eea-a562-442c-9329-f13b7e5c4d9a.roa (raw, json)
Hash identifier: BMQw7d7AyIhcWVlvZN/MeFWrLI04Zyfh5+aqhf9+qk8=
Subject key identifier: 9E:07:5A:34:36:F4:CF:85:C0:23:F4:1B:51:EE:0E:DC:12:54:CC:A3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4C1359326BD5FDFC8E8CB09A185A79AFC7BCEA05
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1b508eea-a562-442c-9329-f13b7e5c4d9a.roa
Signing time: Mon 26 Jun 2023 00:00:00 +0000
ROA not before: Mon 26 Jun 2023 00:00:00 +0000
ROA not after: Mon 31 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:13:59:32:6b:d5:fd:fc:8e:8c:b0:9a:18:5a:79:af:c7:bc:ea:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 26 00:00:00 2023 GMT
Not After : Jul 31 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:25:c7:fe:74:d8:da:f0:df:85:84:41:6c:
e3:ab:f7:0a:54:14:1a:d3:90:cd:09:05:06:46:87:
f6:d4:5b:a0:8e:a7:e0:4a:cd:2c:e2:92:f6:3f:2f:
f4:60:71:2c:fe:42:b7:90:61:71:a3:65:84:f6:39:
72:93:be:90:04:01:23:ae:96:b2:b0:ee:43:55:bb:
2b:f7:96:7a:af:05:6a:c3:02:e0:70:e6:a8:9d:4c:
12:64:cb:89:f4:c1:77:8b:cf:1c:41:5f:64:e1:96:
38:61:4d:3d:53:37:ee:a7:e6:c5:72:f7:db:73:34:
2e:a9:bd:b7:7e:f0:77:88:fe:ff:30:fb:db:4f:c6:
f0:5c:45:21:bc:58:85:9e:2c:7a:91:14:87:ce:fd:
f5:57:77:8f:04:b0:fa:58:ed:ef:f9:e8:b0:b9:61:
0c:ba:03:1b:04:e1:47:bf:38:a4:53:97:a8:75:0c:
93:0c:23:da:7b:92:2d:79:88:ac:45:de:86:d2:9f:
f7:bc:78:b0:fa:ec:ef:07:b7:51:b4:4d:31:6c:e2:
36:05:eb:f2:7c:a3:99:b8:31:d7:d6:a8:8b:f3:0f:
b1:12:e7:c7:ec:dc:bf:97:28:78:e1:7c:60:b8:a8:
ca:17:f4:35:12:94:78:1e:ae:67:ea:c6:2d:46:c4:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:07:5A:34:36:F4:CF:85:C0:23:F4:1B:51:EE:0E:DC:12:54:CC:A3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1b508eea-a562-442c-9329-f13b7e5c4d9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
04:df:f9:91:05:2d:0f:ad:07:19:79:70:7b:91:5e:75:35:97:
e2:07:ad:1c:13:52:5a:ef:73:98:81:e6:68:89:4c:36:38:bb:
59:fb:d6:fb:d4:3f:20:a0:99:49:16:51:f1:22:93:df:75:79:
f3:7e:cb:cc:0f:17:42:49:47:e9:aa:23:c2:4b:61:05:05:9c:
ef:3e:d1:33:a5:ce:45:a6:db:f0:13:a0:bf:60:b6:90:a6:2b:
61:1d:d8:40:d1:2d:bc:f5:9e:67:c5:02:b9:e2:1d:7c:a6:5e:
78:f0:28:ef:26:61:26:8a:95:4e:ac:40:0a:3b:e7:38:98:79:
19:62:4c:53:8c:8b:64:9f:3c:99:9a:96:2f:43:87:59:e9:55:
9e:54:61:3a:3b:41:ae:69:02:a4:04:36:79:b8:5d:b7:21:28:
3f:05:e1:b1:68:d1:f7:37:cb:c9:a0:c8:dc:9f:ed:dd:dc:d5:
8c:4a:83:e0:71:d3:a9:a8:d0:80:0c:b8:5d:4a:a5:b7:cf:54:
33:ae:7e:37:f9:92:f6:b0:ae:c3:ea:3b:fa:81:30:54:5d:42:
9c:0e:65:3a:04:04:e9:47:f0:fe:29:75:ea:38:b7:e3:5a:59:
11:ef:39:95:14:61:82:17:06:4a:da:ee:05:0c:b4:2e:55:82:
f5:e5:b7:68
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTBNZMmvV/fyOjLCaGFp5r8e86gUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjI2MDAwMDAwWhcNMjMwNzMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ODk2ZjI5ZjljZmNkYzFhNTI2ZTVmNGY2ZGMyNWY1MjFl
NTQxODNmMjgxMzBiMDdkZWE2ODUwN2RlMTNhYmRmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoTCXH/nTY2vDfhYRBbOOr9wpUFBrTkM0JBQZGh/bUW6CO
p+BKzSzikvY/L/RgcSz+QreQYXGjZYT2OXKTvpAEASOulrKw7kNVuyv3lnqvBWrD
AuBw5qidTBJky4n0wXeLzxxBX2ThljhhTT1TN+6n5sVy99tzNC6pvbd+8HeI/v8w
+9tPxvBcRSG8WIWeLHqRFIfO/fVXd48EsPpY7e/56LC5YQy6AxsE4Ue/OKRTl6h1
DJMMI9p7ki15iKxF3obSn/e8eLD67O8Ht1G0TTFs4jYF6/J8o5m4MdfWqIvzD7ES
58fs3L+XKHjhfGC4qMoX9DUSlHgermfqxi1GxJUhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUngdaNDb0z4XAI/QbUe4O3BJUzKMwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzFiNTA4ZWVhLWE1NjItNDQyYy05MzI5LWYxM2I3ZTVjNGQ5YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAATf+ZEFLQ+tBxl5cHuRXnU1l+IH
rRwTUlrvc5iB5miJTDY4u1n71vvUPyCgmUkWUfEik991efN+y8wPF0JJR+mqI8JL
YQUFnO8+0TOlzkWm2/AToL9gtpCmK2Ed2EDRLbz1nmfFArniHXymXnjwKO8mYSaK
lU6sQAo75ziYeRliTFOMi2SfPJmali9Dh1npVZ5UYTo7Qa5pAqQENnm4XbchKD8F
4bFo0fc3y8mgyNyf7d3c1YxKg+Bx06mo0IAMuF1KpbfPVDOufjf5kvawrsPqO/qB
MFRdQpwOZToEBOlH8P4pdeo4t+NaWRHvOZUUYYIXBkra7gUMtC5VgvXlt2g=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:52 2025 by rpki-client