Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6aca5c44-b4ff-452b-b699-b7c8f00a071e.roa
File: 6aca5c44-b4ff-452b-b699-b7c8f00a071e.roa (raw, json)
Hash identifier: a/kv+EBXKy2gwIwzgeK/gZgK2egRtgi0ngHbx0Z/Yjk=
Subject key identifier: A8:F2:EE:B8:F8:39:7D:29:59:0D:B5:46:62:A6:60:0F:B8:9A:FD:AA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 55ED2BFCC2A8AFEC23F164567F373D565BC24430
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6aca5c44-b4ff-452b-b699-b7c8f00a071e.roa
Signing time: Fri 06 Oct 2023 00:00:00 +0000
ROA not before: Fri 06 Oct 2023 00:00:00 +0000
ROA not after: Fri 10 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ed:2b:fc:c2:a8:af:ec:23:f1:64:56:7f:37:3d:56:5b:c2:44:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 6 00:00:00 2023 GMT
Not After : Nov 10 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:fd:6a:a9:dd:83:77:70:a3:ff:7e:0b:75:
de:5d:8f:87:7a:46:04:b8:3e:a9:c3:bc:d8:67:58:
f9:a8:85:45:3b:21:9b:d8:ff:57:1e:e3:d7:8b:b4:
43:79:96:52:54:bb:7e:c9:2b:f6:5e:7c:2b:90:da:
e2:06:5f:f9:9d:e1:6d:33:38:2d:3b:b6:a9:9d:4e:
0c:63:9c:49:df:ec:03:68:62:e8:21:ea:fd:2e:78:
bd:50:6e:60:8d:74:cb:96:53:5d:2d:af:aa:f8:b9:
e5:1b:d4:7b:65:ad:e0:0c:50:03:24:a0:5a:9e:d3:
0c:88:4f:01:c5:6b:07:30:d7:39:3a:70:4a:df:b4:
e1:6d:17:d6:04:f3:dd:5f:a2:d6:96:66:56:95:cb:
3c:fe:82:a7:c2:e9:41:c5:14:a9:b3:67:d8:7d:c5:
dc:e4:f6:77:bd:ac:73:fb:fc:83:f8:81:38:48:93:
a6:63:04:05:02:83:af:9a:90:ef:d1:90:78:00:e4:
c4:35:8d:18:df:61:95:e9:04:4b:00:b8:95:e6:9a:
5a:70:1a:88:97:5b:30:81:15:83:1f:ac:a4:82:e0:
b4:67:ad:fa:c7:0b:39:52:c9:70:cb:d3:6b:2f:fa:
d3:dd:90:91:3e:fc:c7:f6:1c:88:cf:fb:b4:7d:8b:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F2:EE:B8:F8:39:7D:29:59:0D:B5:46:62:A6:60:0F:B8:9A:FD:AA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6aca5c44-b4ff-452b-b699-b7c8f00a071e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a3:33:9b:f1:26:ed:d7:f1:f1:71:83:d2:29:fb:91:c1:32:
94:23:d9:d5:c4:13:78:2b:a3:14:3b:72:f0:f8:84:c9:2a:11:
4b:76:55:7c:53:c5:be:23:89:78:da:28:72:2f:e7:1c:42:4a:
16:7b:d3:34:8a:0c:03:d1:20:44:d6:57:b9:0e:28:2b:0c:46:
03:94:70:a8:d9:05:50:c0:bd:02:a8:cb:df:ba:23:13:cc:d4:
0c:af:b0:88:d9:ef:ec:1b:65:d2:07:31:08:7a:1b:8e:f4:1b:
38:43:d2:b9:5f:04:71:00:1c:5a:66:8a:aa:ba:53:e1:66:78:
c4:5e:1d:1e:e6:0d:c4:20:25:06:86:22:bd:7d:2a:bc:13:f5:
7b:77:fb:35:a5:20:32:30:13:18:0c:f2:80:24:43:8f:07:64:
4f:1a:ae:c7:c4:1e:a4:d7:31:78:55:d0:bc:7b:2f:1a:f9:d4:
21:d7:2a:8f:18:8b:cf:d8:9a:54:a5:49:ec:53:e6:34:78:9a:
0c:ec:9a:6f:d5:3e:fe:6a:59:e3:a0:22:c0:bd:6f:cf:0b:a8:
3e:b2:29:86:c4:dd:54:1b:35:67:9f:7f:65:25:fe:10:f4:8b:
a3:8b:61:1f:5d:c6:ec:04:1b:b4:40:cf:71:ea:c7:8e:6c:c3:
13:f4:f6:06
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVe0r/MKor+wj8WRWfzc9VlvCRDAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDA2MDAwMDAwWhcNMjMxMTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A4Yzk5MjU0MTZkZTAyM2Y5MmZkMWVmOTU0ZWNjZWE1ZThm
NGZkZWQ1MDA5NDBiYWRlYjE0YTJiNjQwZTlkOTY2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwXP1qqd2Dd3Cj/34Ldd5dj4d6RgS4PqnDvNhnWPmohUU7
IZvY/1ce49eLtEN5llJUu37JK/ZefCuQ2uIGX/md4W0zOC07tqmdTgxjnEnf7ANo
Yugh6v0ueL1QbmCNdMuWU10tr6r4ueUb1HtlreAMUAMkoFqe0wyITwHFawcw1zk6
cErftOFtF9YE891fotaWZlaVyzz+gqfC6UHFFKmzZ9h9xdzk9ne9rHP7/IP4gThI
k6ZjBAUCg6+akO/RkHgA5MQ1jRjfYZXpBEsAuJXmmlpwGoiXWzCBFYMfrKSC4LRn
rfrHCzlSyXDL02sv+tPdkJE+/Mf2HIjP+7R9i6oFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqPLuuPg5fSlZDbVGYqZgD7ia/aowHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzZhY2E1YzQ0LWI0ZmYtNDUyYi1iNjk5LWI3YzhmMDBhMDcxZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAijM5vxJu3X8fFxg9Ip+5HBMpQj
2dXEE3groxQ7cvD4hMkqEUt2VXxTxb4jiXjaKHIv5xxCShZ70zSKDAPRIETWV7kO
KCsMRgOUcKjZBVDAvQKoy9+6IxPM1AyvsIjZ7+wbZdIHMQh6G470GzhD0rlfBHEA
HFpmiqq6U+FmeMReHR7mDcQgJQaGIr19KrwT9Xt3+zWlIDIwExgM8oAkQ48HZE8a
rsfEHqTXMXhV0Lx7Lxr51CHXKo8Yi8/YmlSlSexT5jR4mgzsmm/VPv5qWeOgIsC9
b88LqD6yKYbE3VQbNWeff2Ul/hD0i6OLYR9dxuwEG7RAz3Hqx45swxP09gY=
-----END CERTIFICATE-----
Generated at Tue Feb 18 06:53:31 2025 by rpki-client