Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9aa3e021-b429-4dd7-abf1-04b3ab46032c.roa
File: 9aa3e021-b429-4dd7-abf1-04b3ab46032c.roa (raw, json)
Hash identifier: rXRmtF3hO5OgUljBzZqaujwSw3kjnnF/1va/4oUpswA=
Subject key identifier: C9:12:74:16:06:84:F3:5F:E2:4E:BC:3D:F2:DD:0A:99:DB:3E:60:10
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4DFD954FB2049F0384349588D3016BBD9ACE6BFE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9aa3e021-b429-4dd7-abf1-04b3ab46032c.roa
Signing time: Thu 26 Oct 2023 00:00:00 +0000
ROA not before: Thu 26 Oct 2023 00:00:00 +0000
ROA not after: Thu 30 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:fd:95:4f:b2:04:9f:03:84:34:95:88:d3:01:6b:bd:9a:ce:6b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 26 00:00:00 2023 GMT
Not After : Nov 30 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:8d:ea:98:1e:4b:e7:d5:2d:ae:c5:03:4f:
82:93:cf:4a:d5:cd:15:a2:d6:71:2a:a7:a0:1c:2a:
6e:9d:88:65:90:bf:2a:af:67:15:da:42:89:49:f1:
45:73:d3:fd:5f:96:1f:b0:52:dc:d5:09:fa:7a:e3:
6e:44:a4:35:28:90:2e:53:ea:b0:1f:12:08:fb:d9:
34:a7:0f:c8:06:b0:80:82:ea:23:9f:b9:63:f5:a6:
d4:bf:37:1e:45:04:13:5f:4e:87:67:04:bb:86:78:
40:7c:d1:e4:11:6b:f7:0e:6e:02:62:8f:d4:17:40:
5e:e7:d3:38:79:be:ca:a9:21:67:06:6e:69:34:f8:
eb:b4:4e:88:eb:98:74:33:3a:72:a8:db:38:88:b6:
2b:52:e1:f8:93:f1:f4:08:1a:91:e1:54:a9:2b:1a:
d3:55:26:92:61:07:5e:30:42:09:af:5a:d5:5c:12:
22:35:a5:34:c1:5b:1a:a2:09:b5:3a:4e:ac:c4:e0:
b4:c6:bf:75:fc:f0:16:3f:42:d9:d3:47:a6:b6:7f:
72:a8:ac:13:77:cb:e1:90:69:49:87:ff:ac:21:a3:
27:45:d0:16:f0:c6:d7:db:8e:b8:37:2c:4d:16:65:
a6:69:c5:88:f5:c6:ed:91:7a:ea:65:22:e9:c1:f9:
7e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:12:74:16:06:84:F3:5F:E2:4E:BC:3D:F2:DD:0A:99:DB:3E:60:10
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9aa3e021-b429-4dd7-abf1-04b3ab46032c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:b4:4c:ff:57:30:8d:ba:ea:62:09:bb:4c:2c:6a:28:24:23:
d3:0b:91:2a:aa:43:2b:46:5d:27:6e:c5:39:54:2d:d6:7d:88:
1b:92:b1:e7:fe:b0:3f:d7:04:6d:70:c5:5c:15:e5:ed:5a:9c:
35:17:de:3a:74:d5:a6:f6:14:b5:e9:16:51:14:60:df:51:42:
33:b3:66:4b:99:00:f2:07:29:b8:ca:9a:12:82:89:34:e5:04:
b2:7b:56:ec:52:5f:f7:27:40:a2:c6:72:0c:05:1b:e6:7f:eb:
89:a6:3e:06:62:3a:eb:f8:9c:04:c8:27:c7:82:a4:c8:b9:3e:
60:47:18:0d:be:4c:eb:51:96:b7:39:71:03:7a:da:8d:91:37:
b3:8a:d0:11:45:84:71:9d:1a:f9:20:96:ea:ea:a6:76:31:6b:
77:5d:a3:72:3a:00:f3:96:90:b5:1c:76:a7:83:a5:c6:70:ff:
21:a5:bc:a6:0f:97:50:a0:5d:0f:7e:9d:17:86:45:f7:f4:51:
66:0a:6e:1f:66:4f:b3:56:f1:e1:92:60:15:a9:09:bc:b2:4a:
17:a1:05:6b:31:42:00:50:98:27:a9:b3:01:cf:3e:1f:be:64:
d5:bb:a4:af:c2:58:5c:a0:20:ec:94:41:8c:0d:a1:4d:04:eb:
87:99:49:d4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTf2VT7IEnwOENJWI0wFrvZrOa/4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDI2MDAwMDAwWhcNMjMxMTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNTc1MjljMzVjZmNlMTBmNzhmNjlmNjA2NWRjNDJjZjcz
NjU4MDg2M2E4Njg2M2MzY2E0MmZkM2NmMjc2M2Y1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDOzY3qmB5L59UtrsUDT4KTz0rVzRWi1nEqp6AcKm6diGWQ
vyqvZxXaQolJ8UVz0/1flh+wUtzVCfp6425EpDUokC5T6rAfEgj72TSnD8gGsICC
6iOfuWP1ptS/Nx5FBBNfTodnBLuGeEB80eQRa/cObgJij9QXQF7n0zh5vsqpIWcG
bmk0+Ou0TojrmHQzOnKo2ziItitS4fiT8fQIGpHhVKkrGtNVJpJhB14wQgmvWtVc
EiI1pTTBWxqiCbU6TqzE4LTGv3X88BY/QtnTR6a2f3KorBN3y+GQaUmH/6whoydF
0Bbwxtfbjrg3LE0WZaZpxYj1xu2ReuplIunB+X51AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUyRJ0FgaE81/iTrw98t0Kmds+YBAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzlhYTNlMDIxLWI0MjktNGRkNy1hYmYxLTA0YjNhYjQ2MDMyYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAB60TP9XMI266mIJu0wsaigkI9ML
kSqqQytGXSduxTlULdZ9iBuSsef+sD/XBG1wxVwV5e1anDUX3jp01ab2FLXpFlEU
YN9RQjOzZkuZAPIHKbjKmhKCiTTlBLJ7VuxSX/cnQKLGcgwFG+Z/64mmPgZiOuv4
nATIJ8eCpMi5PmBHGA2+TOtRlrc5cQN62o2RN7OK0BFFhHGdGvkglurqpnYxa3dd
o3I6APOWkLUcdqeDpcZw/yGlvKYPl1CgXQ9+nReGRff0UWYKbh9mT7NW8eGSYBWp
CbyyShehBWsxQgBQmCepswHPPh++ZNW7pK/CWFygIOyUQYwNoU0E64eZSdQ=
-----END CERTIFICATE-----
Generated at Tue Feb 18 06:55:14 2025 by rpki-client