Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab21fdc1-eab3-4c61-840d-bc97488d123a.roa
File: ab21fdc1-eab3-4c61-840d-bc97488d123a.roa (raw, json)
Hash identifier: HKWAS5X7KSSpfeKXkwhhlQMJchl7YL1QZthZ1dYQH1o=
Subject key identifier: 0A:55:72:6D:EF:42:CD:D9:2F:B7:9B:81:37:B7:5C:66:AE:E9:1A:45
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3D5389E94B19361E176A974635EA75A1C9292655
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab21fdc1-eab3-4c61-840d-bc97488d123a.roa
Signing time: Wed 21 Jun 2023 00:00:00 +0000
ROA not before: Wed 21 Jun 2023 00:00:00 +0000
ROA not after: Wed 26 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:53:89:e9:4b:19:36:1e:17:6a:97:46:35:ea:75:a1:c9:29:26:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 21 00:00:00 2023 GMT
Not After : Jul 26 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:4f:c7:5c:53:bf:98:f2:89:2b:03:77:97:
93:d1:86:38:c1:cb:a1:f3:d7:18:03:05:03:67:4b:
f4:ab:4d:71:e9:03:5a:0a:ef:8b:f1:3a:0c:4d:08:
1a:db:26:d2:9a:b7:70:d0:a4:80:b2:d2:7b:01:59:
f0:84:95:c9:8a:a4:5c:a2:4e:5f:6c:33:65:14:7c:
71:36:be:4b:03:af:45:bb:22:e3:53:24:2c:0f:51:
d6:d9:60:d5:4d:bb:54:84:1e:0b:4b:b7:18:04:eb:
6d:f7:1f:49:f3:41:be:34:c4:34:fb:79:17:ae:2f:
cf:e6:2a:cc:89:3c:cc:39:80:d3:07:6b:12:a1:99:
86:91:60:fa:32:e5:ed:b3:4e:d4:a4:0a:86:61:07:
8c:b2:ca:98:23:63:f9:52:6d:7c:11:6d:65:06:b3:
0f:62:44:a8:08:8d:1e:c8:0e:3f:e6:b1:eb:96:73:
70:41:bd:36:d3:5c:ca:1d:dd:5c:82:81:77:ad:e7:
72:0d:23:9c:92:a1:49:41:36:70:f9:9f:45:79:ad:
3c:83:1b:b6:39:f2:47:84:bf:97:70:4c:60:da:8a:
19:23:1e:46:2a:9e:df:68:b0:f6:08:76:f4:e6:b4:
e8:6f:fd:77:45:6c:12:77:fc:69:13:2c:be:36:0b:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:55:72:6D:EF:42:CD:D9:2F:B7:9B:81:37:B7:5C:66:AE:E9:1A:45
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab21fdc1-eab3-4c61-840d-bc97488d123a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:02:73:27:a1:36:36:5b:e3:03:ce:f5:fb:1c:38:bd:d7:29:
a6:b1:e3:94:ec:b1:b3:d6:e4:2e:33:0d:c3:cd:25:69:d9:36:
15:53:07:1a:e0:79:c2:a2:4c:7a:63:b6:4b:4e:a1:b7:0d:ec:
ff:ea:38:73:b2:3b:14:2e:b7:d7:41:ed:bc:9e:e4:5d:e5:3a:
db:fd:26:60:f0:96:7e:3e:ad:d2:63:cd:97:9a:0f:92:56:97:
d7:5b:67:66:92:60:56:3e:e5:c6:4a:07:a9:e4:bf:81:50:90:
a6:07:95:ca:b5:75:75:f2:4a:fd:83:8a:6a:43:92:3f:2c:a6:
2b:33:2e:9b:01:34:1b:cf:7d:ea:23:df:d7:80:1f:71:ae:a8:
b9:c4:d2:ad:71:28:07:a5:2d:c7:bf:1b:c3:50:71:b2:ce:99:
77:19:e0:6e:df:87:78:e1:6a:ac:b8:b2:2d:5e:f1:24:69:0d:
a0:38:4a:dd:6e:8c:15:8b:08:f6:36:ba:32:9e:79:36:da:cc:
b2:34:aa:48:cc:61:5a:ab:f9:1d:1d:da:e5:53:e7:33:b9:eb:
58:ac:f5:bc:69:62:cf:a7:62:5c:b0:e0:d8:aa:d5:e5:ee:67:
7b:dc:55:d0:e1:10:41:33:3a:37:c3:1b:fe:17:d1:27:63:12:
33:b6:e0:ff
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPVOJ6UsZNh4XapdGNep1ockpJlUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjIxMDAwMDAwWhcNMjMwNzI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YWYwMDEzZTI3ZTFhOWEzMDg5MTZkMzI4N2U2ZjI2MjZk
NDgzNjY5MWI3ZWQyNmY1NDE2NzEyYzA5OTdmMzEwMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6Ok/HXFO/mPKJKwN3l5PRhjjBy6Hz1xgDBQNnS/SrTXHp
A1oK74vxOgxNCBrbJtKat3DQpICy0nsBWfCElcmKpFyiTl9sM2UUfHE2vksDr0W7
IuNTJCwPUdbZYNVNu1SEHgtLtxgE6233H0nzQb40xDT7eReuL8/mKsyJPMw5gNMH
axKhmYaRYPoy5e2zTtSkCoZhB4yyypgjY/lSbXwRbWUGsw9iRKgIjR7IDj/mseuW
c3BBvTbTXMod3VyCgXet53INI5ySoUlBNnD5n0V5rTyDG7Y58keEv5dwTGDaihkj
HkYqnt9osPYIdvTmtOhv/XdFbBJ3/GkTLL42C52JAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUClVybe9Czdkvt5uBN7dcZq7pGkUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2FiMjFmZGMxLWVhYjMtNGM2MS04NDBkLWJjOTc0ODhkMTIzYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKsCcyehNjZb4wPO9fscOL3XKaax
45TssbPW5C4zDcPNJWnZNhVTBxrgecKiTHpjtktOobcN7P/qOHOyOxQut9dB7bye
5F3lOtv9JmDwln4+rdJjzZeaD5JWl9dbZ2aSYFY+5cZKB6nkv4FQkKYHlcq1dXXy
Sv2DimpDkj8spiszLpsBNBvPfeoj39eAH3GuqLnE0q1xKAelLce/G8NQcbLOmXcZ
4G7fh3jhaqy4si1e8SRpDaA4St1ujBWLCPY2ujKeeTbazLI0qkjMYVqr+R0d2uVT
5zO561is9bxpYs+nYlyw4Niq1eXuZ3vcVdDhEEEzOjfDG/4X0SdjEjO24P8=
-----END CERTIFICATE-----
Generated at Tue Feb 18 07:02:20 2025 by rpki-client