Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7da56aac-71e6-4fa5-b662-4d7f4dc01857.roa
File: 7da56aac-71e6-4fa5-b662-4d7f4dc01857.roa (raw, json)
Hash identifier: ZGpcws/WW+7OjYUt0g37tLTmE+DA2YiFmygqLfCiYx0=
Subject key identifier: C0:0A:D9:45:87:41:37:60:82:2E:09:BB:9C:8A:6C:47:4A:7C:7B:9F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6E9ABB7D6A6A18443F475E04D1951E97E95E27F5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7da56aac-71e6-4fa5-b662-4d7f4dc01857.roa
Signing time: Sat 23 Dec 2023 00:00:00 +0000
ROA not before: Sat 23 Dec 2023 00:00:00 +0000
ROA not after: Sat 27 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:9a:bb:7d:6a:6a:18:44:3f:47:5e:04:d1:95:1e:97:e9:5e:27:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 23 00:00:00 2023 GMT
Not After : Jan 27 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:77:a4:e0:00:0b:fc:52:be:11:8e:69:e2:
4c:58:70:3e:f6:1f:4c:14:3f:d9:d7:28:d1:bf:8a:
0a:26:c8:d9:51:54:27:19:3c:b6:f2:d5:da:4d:d9:
16:95:44:01:55:5f:88:10:2c:5a:e0:03:12:27:d5:
fc:f6:2b:ca:0a:eb:9e:fa:24:05:c5:55:67:10:b9:
95:83:9f:45:ce:eb:df:e1:f2:cc:75:06:0f:61:af:
5f:00:9a:40:27:17:5c:4e:7c:eb:32:d9:99:8d:dc:
15:3f:b8:b4:75:3f:80:64:13:d5:19:b5:29:41:7a:
a0:0c:f2:e4:b9:dd:65:29:3f:de:8a:33:c3:9a:18:
30:32:e8:ef:4d:24:c3:ab:0a:cf:27:81:3f:83:91:
e1:07:6c:d8:65:d3:42:ce:a8:40:e0:bd:65:6a:a6:
2c:cf:e3:c1:1f:73:50:ad:d0:81:b9:22:89:d7:80:
5b:0a:22:0d:58:84:47:80:06:2c:0b:59:b8:33:ad:
88:9e:cb:57:78:1e:f4:6a:bd:66:30:f9:8c:b8:d7:
21:dc:4b:e9:fa:5b:7d:e5:e6:b1:ff:e7:48:9b:42:
10:82:35:2c:84:a4:ea:49:52:04:13:ef:a1:89:de:
9f:e5:a9:79:cf:e0:41:78:07:96:9d:80:30:8e:ba:
37:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0A:D9:45:87:41:37:60:82:2E:09:BB:9C:8A:6C:47:4A:7C:7B:9F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7da56aac-71e6-4fa5-b662-4d7f4dc01857.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
63:97:eb:c5:b4:30:98:0c:0b:70:55:30:6b:ea:4a:de:73:3a:
81:55:51:4f:c0:c0:9c:3d:c1:f5:53:f5:7b:fc:8a:ce:be:2c:
1f:ce:7a:d6:b2:25:a1:22:e4:72:6d:ac:be:8e:99:1f:15:04:
6c:0b:26:21:de:55:2a:65:b3:ca:c1:5b:1a:23:2d:12:ec:16:
3f:66:d6:51:8e:b3:dd:45:36:85:f0:fd:7f:c0:88:62:1a:9e:
ee:ce:94:9a:c5:60:2e:e2:03:96:6e:80:0b:8a:db:7b:f2:d9:
4c:25:3a:bc:16:9b:13:7f:00:6a:9c:bc:53:81:e9:0f:b8:e0:
79:4c:14:9a:3d:8a:df:11:8b:27:87:55:bc:36:94:2e:7e:3b:
3b:53:dd:ae:69:b4:d8:75:1a:94:45:c3:87:b8:32:03:b8:48:
1f:05:3e:9c:5e:6d:ca:e6:5d:96:de:f9:bb:10:c4:3f:93:2b:
0e:bf:a3:cd:5c:a1:36:2b:d0:63:3f:22:3e:ef:25:50:77:77:
a0:00:90:98:25:6d:c8:21:4e:95:dd:5f:a9:ff:bb:9a:1d:61:
0e:a8:bc:6d:61:87:f2:df:c4:bf:ad:c2:c0:a0:20:e0:d7:62:
2b:9e:72:8c:f5:56:51:c3:1f:c0:cd:2f:88:8c:e8:60:af:b5:
01:f3:4f:5c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbpq7fWpqGEQ/R14E0ZUel+leJ/UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjIzMDAwMDAwWhcNMjQwMTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AyMjAxYTBmMjdlNjA3YjQ5ZWNkZjhhMTNhZjgyNTkxNTNj
OTc2ZjIwMjc4NDlmNzU2YWZhYzc2MDc2NTVhN2VjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHZXek4AAL/FK+EY5p4kxYcD72H0wUP9nXKNG/igomyNlR
VCcZPLby1dpN2RaVRAFVX4gQLFrgAxIn1fz2K8oK6576JAXFVWcQuZWDn0XO69/h
8sx1Bg9hr18AmkAnF1xOfOsy2ZmN3BU/uLR1P4BkE9UZtSlBeqAM8uS53WUpP96K
M8OaGDAy6O9NJMOrCs8ngT+DkeEHbNhl00LOqEDgvWVqpizP48Efc1Ct0IG5IonX
gFsKIg1YhEeABiwLWbgzrYiey1d4HvRqvWYw+Yy41yHcS+n6W33l5rH/50ibQhCC
NSyEpOpJUgQT76GJ3p/lqXnP4EF4B5adgDCOujevAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwArZRYdBN2CCLgm7nIpsR0p8e58wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzdkYTU2YWFjLTcxZTYtNGZhNS1iNjYyLTRkN2Y0ZGMwMTg1Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGOX68W0MJgMC3BVMGvqSt5zOoFV
UU/AwJw9wfVT9Xv8is6+LB/OetayJaEi5HJtrL6OmR8VBGwLJiHeVSpls8rBWxoj
LRLsFj9m1lGOs91FNoXw/X/AiGIanu7OlJrFYC7iA5ZugAuK23vy2UwlOrwWmxN/
AGqcvFOB6Q+44HlMFJo9it8RiyeHVbw2lC5+OztT3a5ptNh1GpRFw4e4MgO4SB8F
PpxebcrmXZbe+bsQxD+TKw6/o81coTYr0GM/Ij7vJVB3d6AAkJglbcghTpXdX6n/
u5odYQ6ovG1hh/LfxL+twsCgIODXYiuecoz1VlHDH8DNL4iM6GCvtQHzT1w=
-----END CERTIFICATE-----
Generated at Tue Feb 18 07:08:01 2025 by rpki-client