Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/079f2be4-9224-42a0-9134-c48d52ed57a0.roa
File: 079f2be4-9224-42a0-9134-c48d52ed57a0.roa (raw, json)
Hash identifier: 0RZvEkBqlcHzdOfzNmkUn6carcYdi7ZIpCzmlS5sAFI=
Subject key identifier: 23:81:D1:7F:2A:FE:B3:77:BC:15:C8:37:8B:81:2E:2B:13:2A:DF:E5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4E5F5C059C273C25F2D2ED7333F78A9BFADE719A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/079f2be4-9224-42a0-9134-c48d52ed57a0.roa
Signing time: Tue 28 Nov 2023 00:00:00 +0000
ROA not before: Tue 28 Nov 2023 00:00:00 +0000
ROA not after: Tue 02 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:5f:5c:05:9c:27:3c:25:f2:d2:ed:73:33:f7:8a:9b:fa:de:71:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 28 00:00:00 2023 GMT
Not After : Jan 2 23:59:59 2024 GMT
Subject: serialNumber=c41152bc071c5c661d6b3a67980e3194959b8f05f192130a43cc34f49c0a3d7c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:49:94:58:11:89:20:17:44:eb:69:3e:86:6a:
37:2f:f7:93:2a:c6:70:3d:99:04:3c:c4:18:52:8e:
24:76:2a:6c:bc:3b:00:ee:38:a8:b6:34:29:39:28:
aa:df:c0:60:ef:0b:44:c7:26:db:7c:9e:2d:15:d7:
53:08:45:a0:e1:00:f1:c7:44:ed:76:56:77:ad:60:
5b:d6:a7:2c:2e:86:13:c6:e4:74:a2:f3:ba:5c:29:
db:37:df:c8:ea:6e:6f:80:2e:b4:51:8c:73:79:40:
00:58:c3:ee:51:4c:4f:5a:16:1a:54:ff:67:9a:52:
31:5b:19:61:8c:60:a8:f6:d8:6a:44:52:71:95:20:
9b:6e:6d:7d:50:07:52:26:1f:83:2c:68:70:7b:a0:
e9:62:aa:00:0c:c9:ff:23:3a:46:0d:99:48:37:70:
2a:46:6d:32:4e:89:c9:9b:4b:4d:dc:15:35:d3:e5:
aa:51:bd:f3:41:0a:12:77:3c:a3:97:b4:d0:6f:15:
59:cd:c9:fa:f4:57:f9:60:f6:f1:c2:cc:b5:28:cb:
a2:29:56:62:f9:fe:62:39:61:19:b2:9c:35:ab:a0:
a6:0e:f2:fa:25:f7:53:8e:0d:42:32:ed:87:06:33:
59:55:32:76:64:62:1e:25:57:8b:73:ab:9a:97:d3:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:81:D1:7F:2A:FE:B3:77:BC:15:C8:37:8B:81:2E:2B:13:2A:DF:E5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/079f2be4-9224-42a0-9134-c48d52ed57a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
47:61:fc:bc:23:8b:a3:37:a5:a8:b6:88:ee:ee:37:d8:3a:03:
56:ca:14:78:4d:3e:07:b0:64:82:64:b5:d4:1a:be:d8:7c:7c:
ae:3c:fc:ec:20:23:b4:77:68:ef:bf:32:9b:c7:be:89:6e:63:
6f:f5:0c:4c:71:80:a2:36:1e:d4:55:b9:52:b1:76:90:b4:82:
e8:a3:f4:dd:23:57:fe:17:03:5f:c8:04:38:29:ec:c9:68:35:
cf:1d:7a:54:6a:76:3b:77:d1:ec:7a:0c:18:02:5a:95:6f:47:
92:0e:b5:70:7e:09:e6:b0:49:b6:6b:c0:37:c6:96:37:de:30:
36:1d:03:bb:fc:08:2d:c3:3c:42:c4:df:31:dc:9d:30:90:5c:
2a:81:b7:27:f8:f3:84:22:2e:a4:d3:ce:4e:65:36:f9:46:7d:
3f:b4:6f:5a:b3:bb:26:29:00:45:8a:ed:8c:a2:8f:c9:af:87:
6c:cd:7d:29:29:71:bd:b9:f9:ca:b9:1c:79:70:8a:8e:09:83:
a9:42:e4:ef:46:17:7c:b5:a4:91:fa:d1:7d:e5:ee:8b:36:12:
92:39:02:24:b2:63:e8:b5:87:be:bc:17:54:c4:9a:23:b8:95:
a6:2b:30:13:db:e1:2d:1c:42:7e:0b:f1:76:36:1f:7f:68:f1:
3a:fb:58:c4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTl9cBZwnPCXy0u1zM/eKm/recZowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTI4MDAwMDAwWhcNMjQwMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNDExNTJiYzA3MWM1YzY2MWQ2YjNhNjc5ODBlMzE5NDk1
OWI4ZjA1ZjE5MjEzMGE0M2NjMzRmNDljMGEzZDdjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD3SZRYEYkgF0TraT6Gajcv95MqxnA9mQQ8xBhSjiR2Kmy8
OwDuOKi2NCk5KKrfwGDvC0THJtt8ni0V11MIRaDhAPHHRO12VnetYFvWpywuhhPG
5HSi87pcKds338jqbm+ALrRRjHN5QABYw+5RTE9aFhpU/2eaUjFbGWGMYKj22GpE
UnGVIJtubX1QB1ImH4MsaHB7oOliqgAMyf8jOkYNmUg3cCpGbTJOicmbS03cFTXT
5apRvfNBChJ3PKOXtNBvFVnNyfr0V/lg9vHCzLUoy6IpVmL5/mI5YRmynDWroKYO
8vol91OODUIy7YcGM1lVMnZkYh4lV4tzq5qX0yZBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUI4HRfyr+s3e8Fcg3i4EuKxMq3+UwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzA3OWYyYmU0LTkyMjQtNDJhMC05MTM0LWM0OGQ1MmVkNTdhMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEdh/Lwji6M3pai2iO7uN9g6A1bK
FHhNPgewZIJktdQavth8fK48/OwgI7R3aO+/MpvHvoluY2/1DExxgKI2HtRVuVKx
dpC0guij9N0jV/4XA1/IBDgp7MloNc8delRqdjt30ex6DBgCWpVvR5IOtXB+Ceaw
SbZrwDfGljfeMDYdA7v8CC3DPELE3zHcnTCQXCqBtyf484QiLqTTzk5lNvlGfT+0
b1qzuyYpAEWK7Yyij8mvh2zNfSkpcb25+cq5HHlwio4Jg6lC5O9GF3y1pJH60X3l
7os2EpI5AiSyY+i1h768F1TEmiO4laYrMBPb4S0cQn4L8XY2H39o8Tr7WMQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:10 2024 by rpki-client on console-fra.rpki-client.org