Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/427959ba-2817-47d3-b781-fe0c8a0e88b2.roa
File: 427959ba-2817-47d3-b781-fe0c8a0e88b2.roa (raw, json)
Hash identifier: L8RBevpNpiByPD1GoScUY+9axXxKBy81bYnNuvaVLZU=
Subject key identifier: AA:BC:0C:92:CB:44:C8:B1:5F:AE:3F:8A:F0:56:2F:ED:BF:73:3F:84
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 778D55995A8C1DBBFB89900F712912FE61DB1F39
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/427959ba-2817-47d3-b781-fe0c8a0e88b2.roa
Signing time: Sat 18 Nov 2023 00:00:00 +0000
ROA not before: Sat 18 Nov 2023 00:00:00 +0000
ROA not after: Sat 23 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:8d:55:99:5a:8c:1d:bb:fb:89:90:0f:71:29:12:fe:61:db:1f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 18 00:00:00 2023 GMT
Not After : Dec 23 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:27:cf:f7:57:f1:81:d7:e6:b7:91:97:fa:4e:
3a:3a:aa:43:ab:8b:94:c7:51:1b:00:04:ee:4a:4f:
22:8d:cc:ff:18:1a:e0:86:c1:c0:22:08:10:19:d2:
38:8a:7f:bb:ca:e0:76:c8:98:ea:d7:b3:f1:df:20:
1e:ef:49:f5:9f:50:8f:59:02:14:80:30:f4:be:8f:
c8:00:40:4b:32:42:ba:30:df:70:75:9d:1e:18:fc:
c4:0b:1a:2a:db:9b:78:0b:71:aa:cd:fc:bb:99:3e:
b7:0f:7c:e7:c1:94:06:1a:e7:2d:0f:28:b3:11:b5:
85:7f:ef:97:ca:1e:41:2b:3b:54:bc:67:10:3d:ba:
27:ca:6a:cd:0a:23:af:4f:1f:e0:d5:e5:62:8f:7d:
21:dd:59:83:16:8b:ec:5b:99:7e:46:26:ca:b1:ab:
5f:26:c4:b4:27:23:cf:91:2c:fa:57:02:7e:d2:85:
5d:5e:77:23:73:df:7f:d1:98:55:de:9b:4b:6b:b5:
36:3b:3d:d9:35:9a:e0:ff:ef:5a:bd:77:47:e2:24:
72:95:5b:52:38:4e:ea:40:a2:0c:3d:16:b8:eb:bd:
6f:2f:b3:8c:f9:eb:e3:5c:6b:8d:26:16:89:cd:b3:
fa:04:0e:b4:d3:92:2d:50:45:e2:95:28:17:8e:f9:
d5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BC:0C:92:CB:44:C8:B1:5F:AE:3F:8A:F0:56:2F:ED:BF:73:3F:84
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/427959ba-2817-47d3-b781-fe0c8a0e88b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
92:8d:4b:9a:e4:97:07:d6:2d:73:b5:86:02:a1:90:b1:b8:75:
43:81:e7:8d:fc:ed:bc:66:ad:ef:f1:72:66:80:aa:1c:df:23:
7d:a1:af:ee:41:99:13:a1:b8:70:18:dd:6e:11:22:98:b2:ad:
3f:57:bd:0f:65:04:da:9c:f5:8f:e2:0a:96:cd:e0:3d:77:52:
aa:eb:95:e2:d8:58:31:ea:4d:0a:77:e3:f9:32:df:a5:06:05:
0c:3b:8e:a7:d6:85:c6:23:fb:7f:20:dc:05:f3:af:83:cc:8b:
59:84:23:5f:b0:b0:11:87:b4:7f:8f:ea:db:4a:54:1c:78:d7:
a3:3f:1d:b9:84:76:18:f5:d3:e7:ea:e6:f7:f5:9b:1a:ae:b8:
2e:32:49:c6:76:fa:be:22:74:4c:70:36:6f:98:a7:65:08:c3:
6d:6a:f6:cb:64:d2:43:22:0c:74:c7:13:4d:3d:b7:f6:d3:f5:
63:a0:a6:72:39:c0:fa:9e:ad:d5:8d:d5:c5:16:d0:01:86:65:
43:53:98:78:4e:f6:6b:9a:44:7b:3d:4e:ec:72:eb:01:a9:2f:
cf:db:3f:84:db:9c:91:5e:e9:7e:e9:5a:40:8e:1d:d6:aa:5c:
4c:cf:89:a1:88:a8:92:52:50:73:db:54:e4:48:73:96:bc:de:
53:b3:f7:ef
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUd41VmVqMHbv7iZAPcSkS/mHbHzkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTE4MDAwMDAwWhcNMjMxMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMmZjYmMyZmZjMTA2ZDg3NDhjMTFiYzg5YzdhNzUwMWI5
NTVhMWVjMDNiNDI3YzEzMmMxYmNjMDJjYTM3NzZiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDvJ8/3V/GB1+a3kZf6Tjo6qkOri5THURsABO5KTyKNzP8Y
GuCGwcAiCBAZ0jiKf7vK4HbImOrXs/HfIB7vSfWfUI9ZAhSAMPS+j8gAQEsyQrow
33B1nR4Y/MQLGirbm3gLcarN/LuZPrcPfOfBlAYa5y0PKLMRtYV/75fKHkErO1S8
ZxA9uifKas0KI69PH+DV5WKPfSHdWYMWi+xbmX5GJsqxq18mxLQnI8+RLPpXAn7S
hV1edyNz33/RmFXem0trtTY7Pdk1muD/71q9d0fiJHKVW1I4TupAogw9FrjrvW8v
s4z56+Nca40mFonNs/oEDrTTki1QReKVKBeO+dWZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqrwMkstEyLFfrj+K8FYv7b9zP4QwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzQyNzk1OWJhLTI4MTctNDdkMy1iNzgxLWZlMGM4YTBlODhiMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJKNS5rklwfWLXO1hgKhkLG4dUOB
54387bxmre/xcmaAqhzfI32hr+5BmROhuHAY3W4RIpiyrT9XvQ9lBNqc9Y/iCpbN
4D13UqrrleLYWDHqTQp34/ky36UGBQw7jqfWhcYj+38g3AXzr4PMi1mEI1+wsBGH
tH+P6ttKVBx416M/HbmEdhj10+fq5vf1mxquuC4yScZ2+r4idExwNm+Yp2UIw21q
9stk0kMiDHTHE009t/bT9WOgpnI5wPqerdWN1cUW0AGGZUNTmHhO9muaRHs9Tuxy
6wGpL8/bP4TbnJFe6X7pWkCOHdaqXEzPiaGIqJJSUHPbVORIc5a83lOz9+8=
-----END CERTIFICATE-----
Generated at Tue Feb 18 07:00:39 2025 by rpki-client