Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5a93772-7144-4bd9-b61d-09290c7b2a5a.roa
File: b5a93772-7144-4bd9-b61d-09290c7b2a5a.roa (raw, json)
Hash identifier: drmev15EFBOWoisZe7vjNscmZRyfBdWM8qwGXqciigU=
Subject key identifier: A2:9A:6C:AB:E9:65:21:65:A5:22:0C:55:4D:3E:33:0F:75:11:44:75
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5DA9E7794F5DA13CEACBBDE5DCA2431250877F78
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5a93772-7144-4bd9-b61d-09290c7b2a5a.roa
Signing time: Fri 22 Mar 2024 00:00:00 +0000
ROA not before: Fri 22 Mar 2024 00:00:00 +0000
ROA not after: Fri 26 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a9:e7:79:4f:5d:a1:3c:ea:cb:bd:e5:dc:a2:43:12:50:87:7f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 22 00:00:00 2024 GMT
Not After : Apr 26 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:7f:f3:94:9c:5b:28:d2:34:1c:c1:85:a7:
92:6e:5c:ef:8c:fa:c7:0c:2e:bc:33:00:6d:aa:e6:
96:7e:23:46:5c:fb:b3:56:c8:dd:f3:93:79:b0:26:
b1:7f:2b:66:0b:20:9f:f8:13:93:22:31:d5:82:90:
c8:f0:b3:da:92:52:43:80:3d:7a:f7:c9:6b:3e:d9:
73:fe:ac:5e:71:ab:60:7b:77:22:57:de:db:21:3b:
7c:06:9e:ad:dd:b9:51:ba:8b:2d:a1:25:6a:22:38:
0f:48:4f:fa:92:b1:e2:bf:4b:4e:cf:6b:13:10:2b:
f0:ff:4d:9d:02:c0:97:18:54:29:98:b2:a0:2e:4d:
f8:18:c5:12:0a:24:cb:ee:81:bd:fa:33:37:67:e1:
98:f9:a2:95:12:9e:44:c2:51:ba:ca:03:c4:e0:a1:
1c:20:94:62:90:6e:68:cd:8a:a7:6d:97:aa:80:7d:
36:e7:9d:65:df:10:4f:6e:a1:eb:d0:93:b7:f0:67:
e1:f5:5d:d7:7a:32:b4:7f:ce:c5:e1:fb:85:ca:6a:
34:f7:39:e2:57:17:8f:64:0e:a7:44:76:17:f0:36:
5f:c8:37:93:67:0f:f8:68:df:86:80:f6:38:02:16:
b0:7c:53:5c:66:7c:80:aa:0b:9f:48:43:05:dc:b5:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9A:6C:AB:E9:65:21:65:A5:22:0C:55:4D:3E:33:0F:75:11:44:75
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5a93772-7144-4bd9-b61d-09290c7b2a5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d8:4a:8c:e6:89:37:19:60:b6:d1:b6:7a:a9:8b:b2:5f:e4:
37:38:ab:25:2b:0d:ad:fa:32:c0:53:6e:b1:96:a9:ba:f0:55:
0a:66:70:fd:1d:60:57:03:be:09:65:26:c2:5b:f1:ed:54:23:
99:d8:ff:db:fb:59:c2:7c:5e:68:0e:b1:68:dc:8a:6c:8b:b7:
bf:06:85:39:e8:47:59:54:62:cf:5c:f5:53:53:37:8a:aa:cd:
f3:28:42:2d:9a:2f:e4:26:fb:9b:1e:b4:23:b4:aa:c6:66:68:
fa:e8:89:45:a3:a8:8e:f9:fd:cf:b2:92:97:fa:70:42:c8:51:
38:20:38:3e:1d:2d:f8:d9:07:2d:73:69:b0:44:af:3e:e8:fd:
7d:32:94:9a:3c:70:dc:ba:60:3b:2f:40:00:81:c4:86:3f:08:
d5:30:c1:26:1e:75:bf:dc:75:1b:59:1a:01:b2:22:a7:7a:cc:
13:18:09:f2:0c:3b:ee:d6:5b:31:f7:d5:dc:75:97:ba:3f:ce:
09:0a:f4:1c:d9:88:ad:6b:02:53:01:7d:6d:ba:74:87:f3:d6:
b8:12:72:9c:e4:16:de:aa:16:f4:47:b5:1d:d0:6a:3b:de:29:
be:38:f5:4a:aa:4b:97:2c:43:e0:05:43:59:ff:0e:90:53:0e:
9d:b5:0b:8d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXanneU9doTzqy73l3KJDElCHf3gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMzIyMDAwMDAwWhcNMjQwNDI2MjM1OTU5
WjB6MUkwRwYDVQQFE0AxOGE0M2ZkMzdmOTA1Yjc2ZmEwZTk2YjFhMTY5ODhjNTVj
NDQ5OTQwOWI1NGQ1YjNmNTNjMmI2ZTNiM2RjOGIzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8d3/zlJxbKNI0HMGFp5JuXO+M+scMLrwzAG2q5pZ+I0Zc
+7NWyN3zk3mwJrF/K2YLIJ/4E5MiMdWCkMjws9qSUkOAPXr3yWs+2XP+rF5xq2B7
dyJX3tshO3wGnq3duVG6iy2hJWoiOA9IT/qSseK/S07PaxMQK/D/TZ0CwJcYVCmY
sqAuTfgYxRIKJMvugb36Mzdn4Zj5opUSnkTCUbrKA8TgoRwglGKQbmjNiqdtl6qA
fTbnnWXfEE9uoevQk7fwZ+H1Xdd6MrR/zsXh+4XKajT3OeJXF49kDqdEdhfwNl/I
N5NnD/ho34aA9jgCFrB8U1xmfICqC59IQwXctTs5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUoppsq+llIWWlIgxVTT4zD3URRHUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2I1YTkzNzcyLTcxNDQtNGJkOS1iNjFkLTA5MjkwYzdiMmE1YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAI3YSozmiTcZYLbRtnqpi7Jf5Dc4
qyUrDa36MsBTbrGWqbrwVQpmcP0dYFcDvgllJsJb8e1UI5nY/9v7WcJ8XmgOsWjc
imyLt78GhTnoR1lUYs9c9VNTN4qqzfMoQi2aL+Qm+5setCO0qsZmaProiUWjqI75
/c+ykpf6cELIUTggOD4dLfjZBy1zabBErz7o/X0ylJo8cNy6YDsvQACBxIY/CNUw
wSYedb/cdRtZGgGyIqd6zBMYCfIMO+7WWzH31dx1l7o/zgkK9BzZiK1rAlMBfW26
dIfz1rgScpzkFt6qFvRHtR3QajveKb449UqqS5csQ+AFQ1n/DpBTDp21C40=
-----END CERTIFICATE-----
Generated at Tue Feb 18 06:50:36 2025 by rpki-client