Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d3a7de41-3bd7-4e76-8b9b-afc71ebbcf63.roa
File: d3a7de41-3bd7-4e76-8b9b-afc71ebbcf63.roa (raw, json)
Hash identifier: 6VkgBvdF3QhQShT0kXG+oe1vaMdUkYkmCsRjmaBdsC0=
Subject key identifier: 0D:C6:2F:8E:EF:5E:1A:02:38:58:3F:C0:71:FD:57:69:47:9C:7B:E8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5FDC03832B3DBBF258667BA6D753FFE2C91341F5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d3a7de41-3bd7-4e76-8b9b-afc71ebbcf63.roa
Signing time: Sat 25 Nov 2023 00:00:00 +0000
ROA not before: Sat 25 Nov 2023 00:00:00 +0000
ROA not after: Sat 30 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:dc:03:83:2b:3d:bb:f2:58:66:7b:a6:d7:53:ff:e2:c9:13:41:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 25 00:00:00 2023 GMT
Not After : Dec 30 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:11:8e:0d:14:b4:76:30:65:0c:e9:88:9b:7a:
87:61:58:4c:c2:af:50:23:7f:e0:45:76:14:2e:cd:
20:4a:ae:0e:1a:16:f7:6f:e1:64:79:c2:d7:20:b0:
8f:49:8b:c1:58:32:b0:7f:6b:29:67:a9:af:8d:9a:
7f:fb:15:0f:ef:d0:65:46:3b:9d:37:de:51:f9:b1:
ea:7e:d7:67:16:6e:f8:39:24:49:8c:f1:86:7c:8c:
40:ef:18:6d:99:6f:22:28:ea:0c:da:cd:58:7a:29:
8e:d2:7e:a9:2d:d4:f0:a8:72:ad:28:d6:99:1c:01:
b1:31:98:7f:2e:fa:af:a6:d6:79:ef:68:5e:b6:a3:
c9:b7:70:cf:b3:55:ab:af:e8:88:24:7e:2b:e0:94:
18:9f:09:ed:60:f8:59:e8:12:31:9d:71:9f:c2:e5:
18:11:2e:05:a8:15:9d:5a:42:42:10:5b:12:b6:c8:
e9:71:90:ca:eb:bb:17:35:03:99:08:14:27:04:e9:
ff:ad:eb:45:45:97:09:4f:75:08:30:09:09:73:3d:
1f:4d:79:f4:82:8b:e4:ad:a7:a4:0c:ee:9b:e1:da:
bb:09:1f:55:b8:22:cd:89:1f:4a:e9:c5:e2:db:a2:
df:a7:c9:c1:c3:35:fa:1d:7a:e3:ac:bf:21:3c:7f:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C6:2F:8E:EF:5E:1A:02:38:58:3F:C0:71:FD:57:69:47:9C:7B:E8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d3a7de41-3bd7-4e76-8b9b-afc71ebbcf63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:51:18:a9:46:56:21:2e:d2:a7:b2:a1:d3:ec:48:29:f2:77:
a7:51:48:21:28:ba:68:a9:d3:85:4e:11:5b:de:54:b5:b0:5b:
eb:5a:7d:e1:c3:77:a4:8b:fb:08:b5:4f:2f:10:c2:6d:9f:76:
7b:d2:37:07:ce:a5:90:2a:3d:a6:cf:7b:95:d1:e9:98:77:c1:
4d:bf:9c:c9:3d:75:2a:a6:95:4d:16:25:4c:fb:94:d3:0e:45:
b9:b3:13:14:2a:3f:1a:cf:26:f4:26:2e:9b:31:19:20:fb:25:
c7:71:3a:ce:9f:d9:3b:7c:5e:81:26:46:c9:ff:40:cc:58:bd:
41:88:3f:22:43:42:aa:22:83:b4:0d:79:10:d8:b0:64:d7:1a:
6d:92:9c:15:87:ba:ca:d0:b6:19:c4:40:85:60:8d:0e:a3:6d:
c3:4b:ad:e2:1e:62:4a:73:5b:96:e5:78:ce:9a:2a:ae:6b:ff:
4f:94:e3:f5:85:09:17:38:db:e1:eb:5d:43:14:c5:bf:7f:46:
b5:c5:57:fc:b7:a3:1b:bd:fc:5e:73:1e:14:88:fe:85:75:0a:
ba:19:de:1c:46:10:40:34:a4:1b:88:b2:33:a6:e7:b9:b3:4b:
e6:58:16:29:40:03:db:d7:b5:2f:ab:46:a0:46:25:4d:54:31:
ba:42:1b:ac
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUX9wDgys9u/JYZnum11P/4skTQfUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTI1MDAwMDAwWhcNMjMxMjMwMjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZWRmNjM1NzJiZmFiYTNkMDQ2ZjUwNmQ5NGZkYTg5Yjlm
YTdiYWFiNTUxODhkMTcyMTcxM2Q0NmM3MWFjMzVmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCSEY4NFLR2MGUM6YibeodhWEzCr1Ajf+BFdhQuzSBKrg4a
Fvdv4WR5wtcgsI9Ji8FYMrB/aylnqa+Nmn/7FQ/v0GVGO5033lH5sep+12cWbvg5
JEmM8YZ8jEDvGG2ZbyIo6gzazVh6KY7Sfqkt1PCocq0o1pkcAbExmH8u+q+m1nnv
aF62o8m3cM+zVauv6IgkfivglBifCe1g+FnoEjGdcZ/C5RgRLgWoFZ1aQkIQWxK2
yOlxkMrruxc1A5kIFCcE6f+t60VFlwlPdQgwCQlzPR9NefSCi+Stp6QM7pvh2rsJ
H1W4Is2JH0rpxeLbot+nycHDNfodeuOsvyE8fz8dAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDcYvju9eGgI4WD/Acf1XaUece+gwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2QzYTdkZTQxLTNiZDctNGU3Ni04YjliLWFmYzcxZWJiY2Y2My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFtRGKlGViEu0qeyodPsSCnyd6dR
SCEoumip04VOEVveVLWwW+tafeHDd6SL+wi1Ty8Qwm2fdnvSNwfOpZAqPabPe5XR
6Zh3wU2/nMk9dSqmlU0WJUz7lNMORbmzExQqPxrPJvQmLpsxGSD7JcdxOs6f2Tt8
XoEmRsn/QMxYvUGIPyJDQqoig7QNeRDYsGTXGm2SnBWHusrQthnEQIVgjQ6jbcNL
reIeYkpzW5bleM6aKq5r/0+U4/WFCRc42+HrXUMUxb9/RrXFV/y3oxu9/F5zHhSI
/oV1CroZ3hxGEEA0pBuIsjOm57mzS+ZYFilAA9vXtS+rRqBGJU1UMbpCG6w=
-----END CERTIFICATE-----
Generated at Tue Feb 18 07:08:00 2025 by rpki-client