Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9292860f-3e5b-4405-be31-65a8bf9f9e8c.roa
File: 9292860f-3e5b-4405-be31-65a8bf9f9e8c.roa (raw, json)
Hash identifier: qFfAa1tp9TlDUWCK+ywoVOj6W/PXuoRG8Tu6WuTgiWI=
Subject key identifier: 76:82:58:9A:86:8A:22:DC:22:23:81:D3:8F:E4:43:23:E1:A3:95:90
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 67DB7FBAF92EDA7EAC69B9D3D2DA188C5A9C3E08
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9292860f-3e5b-4405-be31-65a8bf9f9e8c.roa
Signing time: Mon 02 Oct 2023 00:00:00 +0000
ROA not before: Mon 02 Oct 2023 00:00:00 +0000
ROA not after: Mon 06 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:db:7f:ba:f9:2e:da:7e:ac:69:b9:d3:d2:da:18:8c:5a:9c:3e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 2 00:00:00 2023 GMT
Not After : Nov 6 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:8b:a5:22:f1:28:ed:a9:50:f5:10:50:fb:
1d:c2:58:d7:c2:cd:c0:6b:55:37:7b:52:e6:29:09:
98:d6:58:3f:db:d2:09:5a:22:6f:86:80:dc:9d:3c:
10:80:a7:0f:36:c2:5d:9f:69:50:4e:8e:1c:1f:a6:
eb:ab:fa:7f:8c:9c:8f:a7:76:f0:81:ff:10:bb:93:
f7:98:59:49:3a:a6:08:2c:6a:86:89:50:5c:cc:1b:
5d:83:48:04:47:09:8e:86:16:e5:a2:1c:5a:f9:80:
6b:c0:f9:b5:2c:d1:6c:b9:2b:8a:2b:51:da:a9:a3:
19:98:9d:7d:5a:5f:cf:2b:f6:2c:22:1c:ad:5a:c3:
d3:4e:f8:a0:b3:8b:5e:d9:d1:99:a6:98:30:80:6e:
48:38:ac:43:36:4a:f3:5a:3d:e7:e7:aa:8a:1a:96:
3d:18:31:17:ca:89:26:4e:cd:16:70:fb:77:a8:56:
87:51:e3:5c:cf:de:8c:1f:7f:76:9f:35:46:3d:f2:
61:75:96:89:2d:ed:92:83:2f:6f:28:7e:c0:94:2c:
d3:ef:4a:e9:6e:c9:92:33:d2:56:fc:f4:29:e0:e2:
b0:99:95:de:96:0b:22:12:5c:41:c2:22:84:99:65:
bf:f2:79:b5:50:60:bd:cc:1c:ea:50:57:e6:0b:af:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:82:58:9A:86:8A:22:DC:22:23:81:D3:8F:E4:43:23:E1:A3:95:90
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9292860f-3e5b-4405-be31-65a8bf9f9e8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
13:89:7c:8b:1b:6e:63:86:07:82:a9:ea:fb:19:ff:bf:64:28:
ca:f6:7c:9e:cc:87:93:3e:c2:b3:ff:b5:8d:c3:f1:25:af:13:
b4:84:55:a3:d7:be:f3:d3:ca:54:8c:f3:fc:4a:4f:5f:49:16:
0c:89:c5:b1:b3:ba:5f:04:8a:fa:28:b0:d4:2e:98:d2:83:80:
6d:6d:0d:ef:11:99:4e:85:3a:6a:9b:3a:96:8b:78:83:2e:17:
35:93:9c:66:e5:1f:91:56:e9:dd:cb:fe:18:e6:1a:a4:81:50:
20:aa:d1:64:48:ba:41:46:a7:18:43:b7:8d:f1:2c:1a:85:9c:
67:94:c1:72:a3:4a:ae:9f:94:57:1e:f9:cd:0e:90:24:34:08:
4b:35:04:6e:3c:48:4c:9c:ac:8d:a6:e3:cd:de:43:41:df:c2:
83:db:8f:a2:40:46:3e:31:c8:65:ff:0a:64:d8:9b:43:e2:4d:
a6:82:7e:d0:9e:65:d9:09:46:8c:37:b3:d6:5a:50:fa:15:a9:
4c:26:7f:06:1e:7b:78:24:cf:8e:de:a3:a7:fd:68:9f:e8:33:
78:12:d6:d2:b5:0b:72:ef:3a:88:db:17:51:12:77:fe:4a:b9:
5e:86:92:d4:1a:4d:e1:45:c3:a0:0f:2c:92:6a:e2:81:a3:b4:
66:7b:e4:73
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZ9t/uvku2n6sabnT0toYjFqcPggwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDAyMDAwMDAwWhcNMjMxMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNzA0MDIyMjVhYjYwYjI1NTZhYmVjYzM3ODgxMGM4ZGRk
YWNiZTkzMTMxYzJiODZkODY3ZTJjNjliZWMzNjA4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCc+YulIvEo7alQ9RBQ+x3CWNfCzcBrVTd7UuYpCZjWWD/b
0glaIm+GgNydPBCApw82wl2faVBOjhwfpuur+n+MnI+ndvCB/xC7k/eYWUk6pggs
aoaJUFzMG12DSARHCY6GFuWiHFr5gGvA+bUs0Wy5K4orUdqpoxmYnX1aX88r9iwi
HK1aw9NO+KCzi17Z0ZmmmDCAbkg4rEM2SvNaPefnqooalj0YMRfKiSZOzRZw+3eo
VodR41zP3owff3afNUY98mF1lokt7ZKDL28ofsCULNPvSuluyZIz0lb89Cng4rCZ
ld6WCyISXEHCIoSZZb/yebVQYL3MHOpQV+YLr53vAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdoJYmoaKItwiI4HTj+RDI+GjlZAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzkyOTI4NjBmLTNlNWItNDQwNS1iZTMxLTY1YThiZjlmOWU4Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABOJfIsbbmOGB4Kp6vsZ/79kKMr2
fJ7Mh5M+wrP/tY3D8SWvE7SEVaPXvvPTylSM8/xKT19JFgyJxbGzul8EivoosNQu
mNKDgG1tDe8RmU6FOmqbOpaLeIMuFzWTnGblH5FW6d3L/hjmGqSBUCCq0WRIukFG
pxhDt43xLBqFnGeUwXKjSq6flFce+c0OkCQ0CEs1BG48SEycrI2m483eQ0HfwoPb
j6JARj4xyGX/CmTYm0PiTaaCftCeZdkJRow3s9ZaUPoVqUwmfwYee3gkz47eo6f9
aJ/oM3gS1tK1C3LvOojbF1ESd/5KuV6GktQaTeFFw6APLJJq4oGjtGZ75HM=
-----END CERTIFICATE-----
Generated at Tue Feb 18 07:03:47 2025 by rpki-client