Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a55fbef-ecf9-4b56-bd30-eaea9ebf5eb2.roa
File: 6a55fbef-ecf9-4b56-bd30-eaea9ebf5eb2.roa (raw, json)
Hash identifier: DGod6pRyUqGZj1nAPVv4F5CHcH4bhANaSI5Zyz8Oo7A=
Subject key identifier: EB:1B:80:8D:F2:A2:F2:8C:8A:D1:00:BD:AF:D7:9E:F7:C9:C7:51:4A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6BC08B0D40096F9C7D59E0666F0C6D08900D9131
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a55fbef-ecf9-4b56-bd30-eaea9ebf5eb2.roa
Signing time: Fri 08 Mar 2024 00:00:00 +0000
ROA not before: Fri 08 Mar 2024 00:00:00 +0000
ROA not after: Fri 12 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:c0:8b:0d:40:09:6f:9c:7d:59:e0:66:6f:0c:6d:08:90:0d:91:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 8 00:00:00 2024 GMT
Not After : Apr 12 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:e3:2c:0d:48:83:22:b5:85:78:1f:b6:64:
e3:d1:c2:c8:3e:ab:d2:b6:bd:82:99:ae:db:b1:97:
1d:6d:9e:1c:d6:fa:68:9f:d6:b3:f0:fa:94:78:ce:
bd:0c:52:bf:02:87:00:40:9d:83:49:eb:56:c7:f1:
55:52:b0:a7:13:60:e0:e7:1b:7c:08:9c:c8:ac:8e:
d9:22:d8:e4:86:07:b9:31:fd:b5:de:0d:cf:1d:fe:
97:96:a6:0a:7a:25:52:db:50:83:a1:a3:54:2f:a0:
e4:dc:65:51:29:43:1f:2e:78:47:73:46:34:cc:c0:
85:1d:47:ec:3f:69:f7:b3:e5:a8:79:45:8e:11:92:
b8:f9:f3:0a:aa:e8:2c:60:18:a3:df:b8:c6:cf:05:
0b:bd:9a:c3:d7:67:0a:9d:4f:d1:07:1d:7a:b7:49:
57:18:40:c4:f5:cb:86:57:b3:8e:09:5b:13:65:4c:
93:c0:16:7c:5a:3f:fa:60:f3:d7:16:8b:eb:b9:22:
10:3e:a4:42:79:1c:8c:50:60:24:f3:e8:07:82:c6:
68:f5:c2:61:4c:5c:ff:5c:e6:91:15:fe:15:83:59:
89:f8:9c:2e:64:d8:bb:cf:04:5d:bd:12:0f:5b:35:
ce:6d:7c:d8:54:f7:2b:86:5d:69:57:64:53:e9:04:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1B:80:8D:F2:A2:F2:8C:8A:D1:00:BD:AF:D7:9E:F7:C9:C7:51:4A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a55fbef-ecf9-4b56-bd30-eaea9ebf5eb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
30:37:d8:3a:4c:87:57:2c:3d:a7:c6:ad:34:fb:c1:41:37:f6:
a8:83:61:96:8b:98:83:60:de:c8:e7:47:3b:8f:04:04:6f:83:
bf:dd:bd:3f:bc:7a:ed:f9:cf:e6:d5:7e:10:ee:cf:31:05:c2:
97:b4:27:d3:33:42:af:c6:c7:7f:60:71:73:06:4b:b0:0b:a5:
65:ad:ab:a7:07:4a:47:74:26:c5:d5:da:5b:63:39:39:5b:d2:
52:77:00:10:03:42:c0:69:d0:c3:f4:dc:43:f6:b3:c8:7a:a8:
fb:42:c6:ce:7b:ed:4e:be:66:cc:d9:ea:b5:74:3a:18:ff:c1:
ee:eb:2d:92:f1:8f:c4:69:06:9c:b6:6b:79:13:3b:36:5e:93:
42:e3:4f:fa:85:d2:0a:16:1a:ed:0c:af:0f:2e:e1:49:65:48:
c6:ce:7a:e9:43:e1:bf:25:ec:d0:07:3d:29:f4:f5:a2:15:41:
3c:eb:51:4f:1b:1e:72:42:26:25:69:62:e7:c2:24:2c:04:25:
29:08:8d:67:79:90:1a:28:be:2a:0e:95:f2:b6:85:66:82:de:
dd:a4:ad:af:0a:15:cb:09:08:87:ab:d1:cc:80:d0:c9:15:6e:
48:9e:4b:d0:64:51:8c:80:a3:ed:4a:85:1b:f2:9a:47:ec:33:
cf:f9:5c:6e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUa8CLDUAJb5x9WeBmbwxtCJANkTEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMzA4MDAwMDAwWhcNMjQwNDEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1MTNkMmVmYzA3N2JkN2Q3YjU2MGJiYzU5NmVhNjcwNWVk
NzA5NTc4YTZiYTJmYWQ3OGZjZTgzZjcyNzE0OWZlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3w+MsDUiDIrWFeB+2ZOPRwsg+q9K2vYKZrtuxlx1tnhzW
+mif1rPw+pR4zr0MUr8ChwBAnYNJ61bH8VVSsKcTYODnG3wInMisjtki2OSGB7kx
/bXeDc8d/peWpgp6JVLbUIOho1QvoOTcZVEpQx8ueEdzRjTMwIUdR+w/afez5ah5
RY4Rkrj58wqq6CxgGKPfuMbPBQu9msPXZwqdT9EHHXq3SVcYQMT1y4ZXs44JWxNl
TJPAFnxaP/pg89cWi+u5IhA+pEJ5HIxQYCTz6AeCxmj1wmFMXP9c5pEV/hWDWYn4
nC5k2LvPBF29Eg9bNc5tfNhU9yuGXWlXZFPpBK4tAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6xuAjfKi8oyK0QC9r9ee98nHUUowHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzZhNTVmYmVmLWVjZjktNGI1Ni1iZDMwLWVhZWE5ZWJmNWViMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADA32DpMh1csPafGrTT7wUE39qiD
YZaLmINg3sjnRzuPBARvg7/dvT+8eu35z+bVfhDuzzEFwpe0J9MzQq/Gx39gcXMG
S7ALpWWtq6cHSkd0JsXV2ltjOTlb0lJ3ABADQsBp0MP03EP2s8h6qPtCxs577U6+
ZszZ6rV0Ohj/we7rLZLxj8RpBpy2a3kTOzZek0LjT/qF0goWGu0Mrw8u4UllSMbO
eulD4b8l7NAHPSn09aIVQTzrUU8bHnJCJiVpYufCJCwEJSkIjWd5kBoovioOlfK2
hWaC3t2kra8KFcsJCIer0cyA0MkVbkieS9BkUYyAo+1KhRvymkfsM8/5XG4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:08 2025 by rpki-client