Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78c6c138-c2f3-41d1-9c77-5fa90f39b462.roa
File: 78c6c138-c2f3-41d1-9c77-5fa90f39b462.roa (raw, json)
Hash identifier: xQOypEgmJ0VA9+bO2ND+4U6FgDkzYSaj13Ts5aoow6o=
Subject key identifier: 55:3B:C9:05:04:56:13:11:1C:2B:71:8D:85:7A:3A:18:CA:8A:C9:D1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 107085E2B6C0F10E4D36629D61BF191E0BA3F16A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78c6c138-c2f3-41d1-9c77-5fa90f39b462.roa
Signing time: Wed 02 Oct 2024 00:00:00 +0000
ROA not before: Wed 02 Oct 2024 00:00:00 +0000
ROA not after: Wed 06 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:70:85:e2:b6:c0:f1:0e:4d:36:62:9d:61:bf:19:1e:0b:a3:f1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 2 00:00:00 2024 GMT
Not After : Nov 6 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:32:fa:8c:02:4d:f1:42:a0:ba:97:d2:ad:
10:bf:f1:e2:40:f5:76:84:a5:43:44:d5:cd:6d:5d:
7a:03:f6:1e:30:78:2b:46:a7:18:75:26:50:db:a3:
29:aa:a6:29:11:50:3e:68:cb:13:a0:eb:d5:ec:fb:
1a:27:e4:40:72:bd:88:28:9e:d5:81:66:2f:b6:ea:
88:3e:6d:a8:dd:70:cc:8f:86:a7:77:19:53:5b:70:
6b:d5:46:a5:f8:9f:0e:7d:0f:e1:fa:1c:31:f0:c3:
d1:13:a7:40:8b:c3:6a:62:e3:65:df:48:74:97:9a:
65:bf:ad:85:7c:07:26:3c:ec:27:ac:e3:9f:01:9f:
df:a0:57:e2:48:ff:7b:5f:9e:82:17:ea:93:01:fc:
3f:b4:cf:75:b5:6b:9b:6e:c8:ac:6e:19:ff:d9:f7:
39:ac:43:e6:a0:cd:f6:fa:3e:56:dd:77:9c:78:2e:
4c:e6:9d:81:06:fe:f1:6f:e8:36:4d:76:b4:54:da:
a1:05:0e:f8:b7:c9:21:2f:bc:2c:19:41:ae:2a:70:
2d:e4:04:72:38:d5:20:7d:76:8b:0d:9c:aa:77:6b:
bb:38:84:b2:d3:15:1c:df:78:f8:78:ea:2d:3a:cb:
24:21:11:a9:44:c8:15:8a:95:90:c4:68:5a:2a:87:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3B:C9:05:04:56:13:11:1C:2B:71:8D:85:7A:3A:18:CA:8A:C9:D1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78c6c138-c2f3-41d1-9c77-5fa90f39b462.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
13:98:a4:57:93:9a:6b:03:b7:47:c7:f8:91:ea:16:1b:47:16:
e5:7c:7f:ac:9b:3f:ad:ea:10:a9:ea:e9:33:94:28:3a:2e:3b:
33:cb:20:35:4d:e1:27:2f:8d:11:29:6a:ed:58:da:6e:de:23:
0b:53:d9:2c:1c:e2:15:0b:b5:43:ab:8c:10:a7:86:f2:cb:1e:
66:85:be:93:de:18:0a:0b:9a:e5:00:f2:9c:e6:5a:9d:bf:a1:
1e:7e:5a:3c:b3:b1:9c:3f:a4:db:12:c3:87:d1:cf:58:e3:19:
9f:e4:71:cc:f7:8b:96:88:a8:f7:8f:51:73:2b:5f:18:0e:cb:
37:55:eb:b4:bf:ef:b1:33:05:81:22:d3:ab:3c:17:6a:3e:47:
86:85:fb:7e:f2:0a:89:b5:45:ee:af:99:58:bf:78:7c:4f:3f:
d8:18:27:ef:eb:d7:5a:6c:84:cb:3a:82:12:47:c0:37:13:77:
8b:1b:65:5a:56:c9:e1:fe:56:ba:14:bc:57:06:df:5d:4c:77:
17:37:52:a4:e0:1c:eb:d9:27:62:57:b6:38:95:0d:c2:85:bf:
2e:b3:fa:7c:95:af:7d:c2:57:b1:e1:0a:bc:97:c4:9e:62:9f:
32:99:ca:d3:5e:f4:b2:b6:86:f5:4d:08:6d:99:65:75:6e:27:
67:db:3f:73
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEHCF4rbA8Q5NNmKdYb8ZHguj8WowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDAyMDAwMDAwWhcNMjQxMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYzQ3YzZmYmUyZTVkNGZiNjBhNDhmNGE3ZTdjMTBiZWE0
NjZlMDkzOTg2NTdmM2NjOGUwYzUyZWViOTFlMDViMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrqTL6jAJN8UKgupfSrRC/8eJA9XaEpUNE1c1tXXoD9h4w
eCtGpxh1JlDboymqpikRUD5oyxOg69Xs+xon5EByvYgontWBZi+26og+bajdcMyP
hqd3GVNbcGvVRqX4nw59D+H6HDHww9ETp0CLw2pi42XfSHSXmmW/rYV8ByY87Ces
458Bn9+gV+JI/3tfnoIX6pMB/D+0z3W1a5tuyKxuGf/Z9zmsQ+agzfb6Plbdd5x4
LkzmnYEG/vFv6DZNdrRU2qEFDvi3ySEvvCwZQa4qcC3kBHI41SB9dosNnKp3a7s4
hLLTFRzfePh46i06yyQhEalEyBWKlZDEaFoqhzM9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVTvJBQRWExEcK3GNhXo6GMqKydEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzc4YzZjMTM4LWMyZjMtNDFkMS05Yzc3LTVmYTkwZjM5YjQ2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABOYpFeTmmsDt0fH+JHqFhtHFuV8
f6ybP63qEKnq6TOUKDouOzPLIDVN4ScvjREpau1Y2m7eIwtT2Swc4hULtUOrjBCn
hvLLHmaFvpPeGAoLmuUA8pzmWp2/oR5+WjyzsZw/pNsSw4fRz1jjGZ/kccz3i5aI
qPePUXMrXxgOyzdV67S/77EzBYEi06s8F2o+R4aF+37yCom1Re6vmVi/eHxPP9gY
J+/r11pshMs6ghJHwDcTd4sbZVpWyeH+VroUvFcG311Mdxc3UqTgHOvZJ2JXtjiV
DcKFvy6z+nyVr33CV7HhCryXxJ5inzKZytNe9LK2hvVNCG2ZZXVuJ2fbP3M=
-----END CERTIFICATE-----
Generated at Tue Feb 18 06:59:33 2025 by rpki-client