Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3ee361b0-eec3-49b6-8edd-21df7ad764e6.roa
File: 3ee361b0-eec3-49b6-8edd-21df7ad764e6.roa (raw, json)
Hash identifier: 8pMV9r0V0qqd0+xNj94Ats7AhO6Z1MC4LTuUVV4XAVg=
Subject key identifier: 9E:54:F6:91:32:8F:48:B2:72:DA:51:49:BD:87:52:0B:81:DE:4A:55
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 15C79FEF5B39B7914300A67DF4333DDC37A76CDD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3ee361b0-eec3-49b6-8edd-21df7ad764e6.roa
Signing time: Tue 12 Dec 2023 00:00:00 +0000
ROA not before: Tue 12 Dec 2023 00:00:00 +0000
ROA not after: Tue 16 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c7:9f:ef:5b:39:b7:91:43:00:a6:7d:f4:33:3d:dc:37:a7:6c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 12 00:00:00 2023 GMT
Not After : Jan 16 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:58:95:1a:1a:de:25:52:e9:8c:e3:b7:56:
11:02:31:d1:59:52:09:12:99:87:db:39:fe:b2:f5:
97:70:e7:2b:9c:e6:c8:dd:c1:e3:a5:2b:b3:f7:2a:
db:41:cd:60:dc:a9:8c:c0:9e:38:37:93:9a:5d:35:
c4:8f:fa:d1:5a:b9:df:b6:4b:7e:d3:4d:d3:b5:70:
ec:55:7f:01:1c:86:ef:ff:7c:70:06:54:92:01:05:
cc:b8:e0:85:06:0c:96:51:62:de:cd:43:09:18:ef:
63:b3:ab:60:22:92:66:c4:a7:ca:60:23:76:19:f2:
9f:34:c2:11:19:b0:37:e5:a0:2b:ad:37:90:5b:3a:
e4:4b:e3:30:ad:46:1e:ce:71:c7:2e:3e:5c:06:ad:
8f:53:9a:4f:90:68:6b:8f:6b:80:f3:ff:84:a6:0d:
18:69:25:36:90:1e:30:b8:1c:2f:49:12:7f:92:f6:
b2:fd:44:87:b7:4e:01:20:44:b2:c6:3c:68:47:16:
89:7c:f3:47:ed:ca:66:02:bf:05:6b:bb:b5:54:d1:
1b:d8:76:9f:13:d8:98:4a:77:cb:fb:e3:b2:04:4d:
6e:86:95:80:c5:c1:56:f1:2f:70:74:07:ab:a8:89:
ee:50:54:e8:a0:23:bc:e6:eb:3e:a5:52:a7:cf:e3:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:54:F6:91:32:8F:48:B2:72:DA:51:49:BD:87:52:0B:81:DE:4A:55
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3ee361b0-eec3-49b6-8edd-21df7ad764e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:aa:34:89:eb:49:70:63:47:e9:be:32:78:89:03:38:cb:78:
5e:60:33:b9:3c:a6:97:d2:bf:ec:ed:b8:e7:0d:3b:da:fb:fb:
28:d2:7e:39:5f:c2:6a:7f:01:a4:ee:fd:35:cf:48:ce:3f:d6:
ef:ab:d9:6a:4d:93:92:a5:bd:4b:26:35:94:fd:ca:75:3e:93:
3b:db:4c:e4:b6:52:be:38:f5:f8:f0:81:b5:90:2f:3c:91:e7:
14:6b:27:85:31:79:5a:e4:39:e3:02:36:de:4a:db:9d:81:d2:
ca:af:ea:4e:9d:a2:52:fb:01:08:f2:ec:41:0d:dd:65:b2:a2:
f5:c3:29:5f:5f:53:c6:2c:33:84:24:f0:79:42:e8:99:32:4c:
dd:f7:36:80:24:86:83:91:af:66:96:16:5a:ec:6b:e6:83:52:
17:b0:bd:83:35:e2:ae:3d:b5:48:0c:89:e8:dd:81:86:bd:6b:
e3:fc:4a:70:dd:17:7b:19:6a:03:bc:7d:50:a0:3d:a5:08:11:
54:aa:22:ff:04:f4:6d:f6:a9:95:c4:f7:cc:44:b1:72:03:cf:
eb:70:36:5c:a4:bd:ca:3f:bb:60:3e:ca:6d:ce:e6:ef:34:aa:
62:0d:0d:0d:0c:d1:55:90:14:21:63:34:ad:d6:e1:ba:df:23:
85:6c:1c:dc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFcef71s5t5FDAKZ99DM93DenbN0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjEyMDAwMDAwWhcNMjQwMTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0AxMDBjZjliOWQ1ZDU3MTdjNGVlMzZiNDQ3ZGM2NDg3ZmEx
MWY4OGYyMjNjZDlhZDBlZGZkZmY4ODg1MzFiNjhhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/dViVGhreJVLpjOO3VhECMdFZUgkSmYfbOf6y9Zdw5yuc
5sjdweOlK7P3KttBzWDcqYzAnjg3k5pdNcSP+tFaud+2S37TTdO1cOxVfwEchu//
fHAGVJIBBcy44IUGDJZRYt7NQwkY72Ozq2AikmbEp8pgI3YZ8p80whEZsDfloCut
N5BbOuRL4zCtRh7OcccuPlwGrY9Tmk+QaGuPa4Dz/4SmDRhpJTaQHjC4HC9JEn+S
9rL9RIe3TgEgRLLGPGhHFol880ftymYCvwVru7VU0RvYdp8T2JhKd8v747IETW6G
lYDFwVbxL3B0B6uoie5QVOigI7zm6z6lUqfP46OVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnlT2kTKPSLJy2lFJvYdSC4HeSlUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzNlZTM2MWIwLWVlYzMtNDliNi04ZWRkLTIxZGY3YWQ3NjRlNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJ6qNInrSXBjR+m+MniJAzjLeF5g
M7k8ppfSv+ztuOcNO9r7+yjSfjlfwmp/AaTu/TXPSM4/1u+r2WpNk5KlvUsmNZT9
ynU+kzvbTOS2Ur449fjwgbWQLzyR5xRrJ4UxeVrkOeMCNt5K252B0sqv6k6dolL7
AQjy7EEN3WWyovXDKV9fU8YsM4Qk8HlC6JkyTN33NoAkhoORr2aWFlrsa+aDUhew
vYM14q49tUgMiejdgYa9a+P8SnDdF3sZagO8fVCgPaUIEVSqIv8E9G32qZXE98xE
sXIDz+twNlykvco/u2A+ym3O5u80qmINDQ0M0VWQFCFjNK3W4brfI4VsHNw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:06 2025 by rpki-client