Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9042f908-b4c0-4b15-918b-1fae1e5b7100.roa
File: 9042f908-b4c0-4b15-918b-1fae1e5b7100.roa (raw, json)
Hash identifier: a97ji0skSZkoSYaKCEUDfv5hZi73v8FjAGUUV14L8SQ=
Subject key identifier: B3:9F:00:FB:3E:C4:3D:46:00:C9:B1:FC:2A:B8:B8:DD:17:04:73:2D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0C162CF59FA9D50AB912BE8F91404D172F1FA4E6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9042f908-b4c0-4b15-918b-1fae1e5b7100.roa
Signing time: Wed 20 Dec 2023 00:00:00 +0000
ROA not before: Wed 20 Dec 2023 00:00:00 +0000
ROA not after: Wed 24 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:16:2c:f5:9f:a9:d5:0a:b9:12:be:8f:91:40:4d:17:2f:1f:a4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 20 00:00:00 2023 GMT
Not After : Jan 24 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ef:3c:33:39:76:96:cf:9c:c1:43:88:bb:97:
ba:b2:71:85:7e:55:6b:22:1d:fa:30:27:40:a8:72:
77:0f:fb:06:12:a4:9a:d2:a8:a7:28:8f:35:68:00:
90:fd:a2:0b:d6:ef:19:8f:5d:08:e1:e3:02:64:fd:
78:03:90:19:04:9d:d4:b6:ff:74:6a:2e:99:ea:01:
45:fc:cb:d2:18:73:a5:ae:5e:15:5a:58:50:4f:6c:
57:b4:34:a9:b9:41:d2:41:f9:b4:d3:bd:ac:5d:03:
aa:c7:56:8a:78:02:33:be:e3:ca:34:cf:f5:b3:05:
84:d0:b9:60:8c:38:9c:fc:22:c5:b7:f7:66:e3:89:
08:09:80:6d:be:91:ef:2c:db:cf:1b:fe:80:8d:2e:
16:4c:24:f2:6e:69:4e:84:70:e7:7f:03:c3:53:ed:
79:38:f9:38:98:4c:f6:c2:c3:66:fb:b6:2b:a8:a6:
6a:ca:4f:1b:e1:c1:3b:d9:be:a7:f8:89:4b:6e:19:
00:ce:ba:f9:2b:9f:44:14:80:a2:a1:04:cd:cd:54:
b4:51:1b:d8:3b:0c:49:0a:be:ab:9b:be:3e:65:06:
84:87:b1:9c:98:c1:79:4c:61:12:38:5a:d1:21:fc:
74:6c:30:c5:30:de:3e:72:bf:ba:53:71:26:06:f3:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9F:00:FB:3E:C4:3D:46:00:C9:B1:FC:2A:B8:B8:DD:17:04:73:2D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9042f908-b4c0-4b15-918b-1fae1e5b7100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
73:1c:81:56:2f:25:61:ee:ae:0d:3e:1f:b6:72:e2:24:b0:e3:
c8:f6:46:12:6b:6d:89:9e:9b:9a:52:2d:46:63:92:02:22:8c:
dd:ff:2b:5f:d8:ba:90:05:4b:8e:b0:ee:4e:b4:e8:88:50:88:
ac:bd:3e:98:87:39:6f:46:bc:16:d0:e7:5e:7d:a4:a9:9b:34:
ba:77:b3:6e:6d:c9:80:98:7d:d1:c5:a4:8f:af:83:41:43:15:
54:7a:ee:f5:14:e0:8f:ff:d3:23:4d:b6:9a:0c:42:b1:06:0e:
ca:23:72:66:63:fa:68:62:33:06:33:54:30:09:95:9a:57:c7:
aa:d2:22:64:d2:fd:48:87:3f:27:0a:85:b8:f8:48:ac:c9:c0:
7e:08:e8:10:27:6e:fc:7c:58:23:6c:be:63:ce:e5:c7:73:5f:
1e:fc:5a:2b:f2:16:03:e4:c2:34:fd:c2:ed:18:6b:8d:bb:8f:
e5:cf:95:ff:e3:f5:01:6e:19:5b:79:0b:8d:14:4d:3c:f1:a2:
a5:25:81:cc:5e:ba:bc:85:07:cd:ed:b4:db:23:d0:b6:3d:ef:
73:f9:8b:ab:41:15:86:38:6c:32:fb:04:ad:ce:58:2b:04:17:
a6:dd:91:af:8f:b1:c3:c2:55:30:74:1d:27:24:57:e6:eb:1c:
3d:31:53:cd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDBYs9Z+p1Qq5Er6PkUBNFy8fpOYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjIwMDAwMDAwWhcNMjQwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ODc4NDUxYTY4NzhiMDA2NDJkZDQxYWI5MmUwOWFkNTA0
NWI0MWFhODExYzA0YTI1YjNmZmQyNzI3ZTM1MWMzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDe7zwzOXaWz5zBQ4i7l7qycYV+VWsiHfowJ0CocncP+wYS
pJrSqKcojzVoAJD9ogvW7xmPXQjh4wJk/XgDkBkEndS2/3RqLpnqAUX8y9IYc6Wu
XhVaWFBPbFe0NKm5QdJB+bTTvaxdA6rHVop4AjO+48o0z/WzBYTQuWCMOJz8IsW3
92bjiQgJgG2+ke8s288b/oCNLhZMJPJuaU6EcOd/A8NT7Xk4+TiYTPbCw2b7tiuo
pmrKTxvhwTvZvqf4iUtuGQDOuvkrn0QUgKKhBM3NVLRRG9g7DEkKvqubvj5lBoSH
sZyYwXlMYRI4WtEh/HRsMMUw3j5yv7pTcSYG83MZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUs58A+z7EPUYAybH8Kri43RcEcy0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzkwNDJmOTA4LWI0YzAtNGIxNS05MThiLTFmYWUxZTViNzEwMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHMcgVYvJWHurg0+H7Zy4iSw48j2
RhJrbYmem5pSLUZjkgIijN3/K1/YupAFS46w7k606IhQiKy9PpiHOW9GvBbQ5159
pKmbNLp3s25tyYCYfdHFpI+vg0FDFVR67vUU4I//0yNNtpoMQrEGDsojcmZj+mhi
MwYzVDAJlZpXx6rSImTS/UiHPycKhbj4SKzJwH4I6BAnbvx8WCNsvmPO5cdzXx78
WivyFgPkwjT9wu0Ya427j+XPlf/j9QFuGVt5C40UTTzxoqUlgcxeuryFB83ttNsj
0LY973P5i6tBFYY4bDL7BK3OWCsEF6bdka+PscPCVTB0HSckV+brHD0xU80=
-----END CERTIFICATE-----
Generated at Tue Feb 18 06:59:32 2025 by rpki-client