Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/33e36482-fb6a-49ca-b3e6-3b190ac3fa35.roa
File: 33e36482-fb6a-49ca-b3e6-3b190ac3fa35.roa (raw, json)
Hash identifier: 8df/zcqg+xkv0RwAfwwq94IfFoS9BhBbvJaSIesWPpk=
Subject key identifier: CB:D9:0A:F8:A3:C6:D2:59:3C:EF:A0:6F:9E:E0:20:E5:BB:1B:26:74
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5DCB51DD15C6ACB445271FA96123005B37C0953C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/33e36482-fb6a-49ca-b3e6-3b190ac3fa35.roa
Signing time: Tue 15 Aug 2023 00:00:00 +0000
ROA not before: Tue 15 Aug 2023 00:00:00 +0000
ROA not after: Tue 19 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:cb:51:dd:15:c6:ac:b4:45:27:1f:a9:61:23:00:5b:37:c0:95:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 15 00:00:00 2023 GMT
Not After : Sep 19 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:f5:d2:38:00:d7:43:fd:32:d6:23:f3:c6:
1a:53:d7:47:8c:46:c5:94:58:b4:53:70:23:52:36:
9a:94:8f:6f:44:5f:24:88:bd:49:97:b4:51:cd:82:
cf:e1:87:57:97:28:b5:6e:e5:86:0f:66:48:d0:4e:
27:d9:c1:10:a4:f2:67:2d:ce:0a:67:74:e9:c8:74:
f8:40:35:ee:c0:a5:62:f2:1b:d9:d6:84:5f:f7:b8:
f4:d7:5d:42:c1:31:fa:f2:fe:6e:4b:19:f0:a0:e5:
50:d9:0a:eb:4f:26:cb:6d:e6:82:bb:08:fa:f3:c1:
e3:30:61:d8:1e:eb:d6:c3:dd:55:b9:7b:13:6e:91:
47:e7:a4:b6:f0:46:5b:86:e2:8e:8a:50:3a:4f:22:
31:10:ce:2a:ed:3f:5c:6a:8c:2a:db:d8:71:37:e7:
f2:44:eb:ba:60:ee:99:03:73:7a:ab:89:1a:1e:26:
4f:d1:b8:d2:ce:b1:e2:12:bc:82:fa:ff:7f:63:36:
9f:60:c0:c8:db:e0:7d:cb:f8:45:fa:50:dc:61:71:
a4:64:10:4f:76:41:f7:36:0a:cb:fc:fc:5b:fd:21:
30:9c:92:ba:ef:46:75:13:e6:b4:26:2c:38:8c:73:
93:87:50:73:cb:3a:dd:20:e6:74:96:52:98:da:f7:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D9:0A:F8:A3:C6:D2:59:3C:EF:A0:6F:9E:E0:20:E5:BB:1B:26:74
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/33e36482-fb6a-49ca-b3e6-3b190ac3fa35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
97:20:14:ae:b7:ba:f7:c6:ac:9b:f6:4d:09:6e:07:95:1c:24:
be:ff:7c:d2:ba:26:4e:cc:5b:be:44:f8:80:58:5a:4b:1f:8b:
8f:ac:fb:f5:dc:0f:61:28:ad:2d:9b:b6:05:6d:65:f6:f3:87:
f6:50:af:de:77:12:e9:f1:bd:21:0a:d0:5d:22:3e:d7:14:57:
bf:35:1d:e8:71:d3:7b:13:9f:4d:ea:28:32:63:7e:c6:6f:01:
13:ab:64:9d:a2:15:a2:25:80:35:69:62:31:ef:53:e4:7a:52:
ce:d0:f0:78:59:6c:eb:37:fd:29:22:e5:6e:69:47:c2:b3:6c:
06:15:54:ee:5b:0c:d3:96:8d:14:5f:e2:b3:44:fa:dc:a4:f0:
61:91:11:87:a5:f3:ff:a3:99:81:a5:a7:ac:cf:e6:84:e9:1f:
0d:70:b4:e3:c3:7e:39:50:5e:00:e3:e5:d6:43:1d:9a:cf:b0:
d6:75:e5:ba:3e:5b:61:9c:14:09:e0:55:7c:b4:63:94:78:be:
7e:05:aa:b7:c6:f7:54:7e:63:95:c9:33:70:36:a2:09:59:17:
eb:23:db:11:2c:85:00:14:fd:ea:fa:79:a7:fd:99:48:50:1e:
0d:36:d7:56:86:41:79:06:92:88:df:a2:dc:d0:38:13:33:de:
65:f3:1e:f5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXctR3RXGrLRFJx+pYSMAWzfAlTwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODE1MDAwMDAwWhcNMjMwOTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZjdlYzNjMmJjMmExNzYwMjkxNzQ5ODRmZGE3NGI1NTAx
NWRkMGRkMDY0OTM3ZTc5ZTBkMjU4YTNlNzcyOGMwMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2APXSOADXQ/0y1iPzxhpT10eMRsWUWLRTcCNSNpqUj29E
XySIvUmXtFHNgs/hh1eXKLVu5YYPZkjQTifZwRCk8mctzgpndOnIdPhANe7ApWLy
G9nWhF/3uPTXXULBMfry/m5LGfCg5VDZCutPJstt5oK7CPrzweMwYdge69bD3VW5
exNukUfnpLbwRluG4o6KUDpPIjEQzirtP1xqjCrb2HE35/JE67pg7pkDc3qriRoe
Jk/RuNLOseISvIL6/39jNp9gwMjb4H3L+EX6UNxhcaRkEE92Qfc2Csv8/Fv9ITCc
krrvRnUT5rQmLDiMc5OHUHPLOt0g5nSWUpja98G1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUy9kK+KPG0lk876BvnuAg5bsbJnQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzMzZTM2NDgyLWZiNmEtNDljYS1iM2U2LTNiMTkwYWMzZmEzNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJcgFK63uvfGrJv2TQluB5UcJL7/
fNK6Jk7MW75E+IBYWksfi4+s+/XcD2EorS2btgVtZfbzh/ZQr953EunxvSEK0F0i
PtcUV781Hehx03sTn03qKDJjfsZvAROrZJ2iFaIlgDVpYjHvU+R6Us7Q8HhZbOs3
/Ski5W5pR8KzbAYVVO5bDNOWjRRf4rNE+tyk8GGREYel8/+jmYGlp6zP5oTpHw1w
tOPDfjlQXgDj5dZDHZrPsNZ15bo+W2GcFAngVXy0Y5R4vn4FqrfG91R+Y5XJM3A2
oglZF+sj2xEshQAU/er6eaf9mUhQHg0211aGQXkGkojfotzQOBMz3mXzHvU=
-----END CERTIFICATE-----
Generated at Tue Feb 18 07:04:24 2025 by rpki-client