Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bf71cc8c-d6ab-47c6-b9cb-2474de5f1e4e.roa
File: bf71cc8c-d6ab-47c6-b9cb-2474de5f1e4e.roa (raw, json)
Hash identifier: RhgsCoyHLwAR5rJzuANVxtXIzgopc2ANbOtJHeI2dao=
Subject key identifier: 9E:99:AA:FA:16:64:FB:1D:5E:3B:50:D5:FB:FD:5C:89:05:34:83:09
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 610400F41169380794B8A6041314784B58B22961
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bf71cc8c-d6ab-47c6-b9cb-2474de5f1e4e.roa
Signing time: Thu 15 Aug 2024 00:00:00 +0000
ROA not before: Thu 15 Aug 2024 00:00:00 +0000
ROA not after: Thu 19 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:04:00:f4:11:69:38:07:94:b8:a6:04:13:14:78:4b:58:b2:29:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 15 00:00:00 2024 GMT
Not After : Sep 19 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c1:d5:f5:81:d9:6c:c6:e1:9b:ec:be:88:91:
82:cc:4c:05:26:5c:12:41:af:d6:89:40:a8:bf:dc:
1c:61:ee:f3:83:6d:4f:1b:75:fe:f3:e4:d0:27:76:
92:84:c1:0f:f8:e7:ef:b8:04:24:6b:f3:35:90:61:
94:f4:0a:f1:ef:45:5e:4c:bd:a1:97:21:69:51:5e:
97:f8:10:1d:8a:e8:9e:46:bb:8c:ee:80:55:69:2c:
15:32:f4:29:a4:0d:7b:52:71:8e:7a:be:5f:54:0f:
52:31:a8:53:89:3e:a2:a4:ae:48:d9:6e:d6:f7:c0:
28:80:47:2a:de:e1:3e:4b:b1:7f:71:db:99:a4:cd:
ee:4c:72:fc:6a:db:ca:12:47:82:ee:2e:41:37:49:
05:2f:25:60:2a:d1:32:a0:a9:51:29:2c:a1:44:ba:
d5:66:f7:32:13:93:4d:2c:db:b2:85:59:30:90:fd:
e4:b4:3f:88:42:2a:7f:bd:9e:9c:63:6f:f3:00:90:
74:7b:4b:52:29:ad:16:8f:16:83:21:33:6f:77:67:
26:f0:18:c2:a2:69:5e:c0:b5:3c:42:96:d8:0a:ee:
87:b3:b7:3f:ef:3a:6d:fd:0f:90:8d:a4:17:d1:47:
18:76:cb:67:02:a2:dc:09:d4:c6:48:3a:db:37:54:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:99:AA:FA:16:64:FB:1D:5E:3B:50:D5:FB:FD:5C:89:05:34:83:09
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bf71cc8c-d6ab-47c6-b9cb-2474de5f1e4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:66:29:13:14:7f:69:97:10:99:44:66:77:dd:ad:46:2c:e8:
76:39:ba:77:1f:73:f2:79:c0:3e:0e:0f:03:bd:3c:22:7b:04:
c5:a0:35:f9:55:e2:35:d8:bf:43:16:a9:5c:82:25:aa:46:91:
e7:5a:53:63:90:03:fe:7d:6c:bc:25:d9:50:92:a6:48:50:21:
3d:e2:4b:dc:26:e0:57:02:69:1b:92:98:ca:28:3e:57:16:d6:
47:a5:01:e9:93:d8:04:f4:09:bf:1a:f5:cd:9f:dd:f4:5b:53:
da:18:f5:fe:68:80:43:c6:3d:6f:72:9c:2e:b1:1c:89:1b:92:
e1:f4:94:ce:ca:dd:7c:48:0e:90:0a:e7:b5:1b:29:ac:ba:05:
af:21:f7:10:9d:86:76:d9:53:5f:0b:b3:56:7c:5f:bf:da:68:
d9:50:82:37:d7:fc:8d:2a:5c:8f:43:2b:be:69:fb:35:03:23:
3d:22:53:6c:e0:25:3c:20:ac:8e:e7:25:f8:5e:55:39:ed:1b:
1e:1c:79:bc:a5:58:42:e5:91:3b:5f:72:50:bc:e9:a7:ed:66:
26:b0:f6:de:34:f7:48:1c:14:27:f8:f5:73:02:f5:60:46:db:
80:3e:a6:f6:c8:93:d6:86:e7:ae:0a:dd:08:49:6a:36:bd:75:
f3:b3:5b:c5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYQQA9BFpOAeUuKYEExR4S1iyKWEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwODE1MDAwMDAwWhcNMjQwOTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BmZDBlYzNlZGRhMDQxYThkYThhYThjMDNiM2FjNmJmYWFm
NTUyM2UxM2VjNjNmMTFiOTE2OTkwNGEwMzMwNTNjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCDwdX1gdlsxuGb7L6IkYLMTAUmXBJBr9aJQKi/3Bxh7vOD
bU8bdf7z5NAndpKEwQ/45++4BCRr8zWQYZT0CvHvRV5MvaGXIWlRXpf4EB2K6J5G
u4zugFVpLBUy9CmkDXtScY56vl9UD1IxqFOJPqKkrkjZbtb3wCiARyre4T5LsX9x
25mkze5Mcvxq28oSR4LuLkE3SQUvJWAq0TKgqVEpLKFEutVm9zITk00s27KFWTCQ
/eS0P4hCKn+9npxjb/MAkHR7S1IprRaPFoMhM293ZybwGMKiaV7AtTxCltgK7oez
tz/vOm39D5CNpBfRRxh2y2cCotwJ1MZIOts3VMTnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnpmq+hZk+x1eO1DV+/1ciQU0gwkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2JmNzFjYzhjLWQ2YWItNDdjNi1iOWNiLTI0NzRkZTVmMWU0ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGxmKRMUf2mXEJlEZnfdrUYs6HY5
uncfc/J5wD4ODwO9PCJ7BMWgNflV4jXYv0MWqVyCJapGkedaU2OQA/59bLwl2VCS
pkhQIT3iS9wm4FcCaRuSmMooPlcW1kelAemT2AT0Cb8a9c2f3fRbU9oY9f5ogEPG
PW9ynC6xHIkbkuH0lM7K3XxIDpAK57UbKay6Ba8h9xCdhnbZU18Ls1Z8X7/aaNlQ
gjfX/I0qXI9DK75p+zUDIz0iU2zgJTwgrI7nJfheVTntGx4cebylWELlkTtfclC8
6aftZiaw9t4090gcFCf49XMC9WBG24A+pvbIk9aG564K3QhJaja9dfOzW8U=
-----END CERTIFICATE-----
Generated at Tue Feb 18 07:01:27 2025 by rpki-client