Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/11ac18c7-8e79-40bd-ab60-b5f6f5e7aa3b.roa
File: 11ac18c7-8e79-40bd-ab60-b5f6f5e7aa3b.roa (raw, json)
Hash identifier: IATJhjL7go7WIxRDnauM1rHORkRPy9PIwIB6IpDRNyQ=
Subject key identifier: B9:52:0F:C7:D4:76:87:BA:BC:66:DC:13:C3:9D:E4:B3:B8:46:F4:B4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4EF98D709DD3BE962F1DCE78EE50B1864B37C3C7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/11ac18c7-8e79-40bd-ab60-b5f6f5e7aa3b.roa
Signing time: Mon 27 Nov 2023 00:00:00 +0000
ROA not before: Mon 27 Nov 2023 00:00:00 +0000
ROA not after: Mon 01 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:f9:8d:70:9d:d3:be:96:2f:1d:ce:78:ee:50:b1:86:4b:37:c3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 27 00:00:00 2023 GMT
Not After : Jan 1 23:59:59 2024 GMT
Subject: serialNumber=ca68763add3e5f2c0e9f0e0a63071e5833f9c66828cef2a7936d1a03bfe77894, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:94:00:26:71:4b:a8:6c:e4:cc:6f:31:46:
76:5c:b0:22:48:6e:13:d7:9b:b6:e9:47:f8:e6:18:
03:1b:2d:2c:c0:04:36:49:9a:60:1e:2c:05:55:9a:
1e:10:eb:91:96:7c:30:1d:c7:17:62:0e:9f:f5:0c:
20:72:d1:0d:2d:c6:1b:49:4b:73:8c:aa:e6:dd:23:
55:03:1f:73:5a:63:a2:a7:c4:7c:2a:7b:6e:2e:4b:
b2:a9:4e:05:cb:64:de:58:89:4e:16:04:92:eb:33:
2a:9d:3b:da:06:b7:b2:f0:d2:0e:05:59:31:14:bb:
3f:21:d3:9f:52:a2:2b:9a:e7:17:e5:ed:5c:53:0f:
c8:71:0f:5c:83:56:6c:25:4b:e2:3d:ae:96:23:c8:
32:54:80:c1:fb:8f:7a:66:08:62:af:2a:c8:f5:68:
92:22:c6:2d:7d:67:77:0a:51:9f:d2:5b:53:2f:63:
44:f8:e5:b5:63:8a:e8:c1:fd:58:d0:3f:86:65:b2:
d5:71:86:37:b9:ba:11:aa:63:76:b0:ac:c8:38:d7:
cb:7d:71:bb:c0:eb:46:86:c9:66:26:52:2b:e6:17:
c1:5b:bc:1b:5f:18:0a:14:6e:34:e5:e0:e4:de:39:
c2:01:23:c2:c7:6c:46:31:23:2d:32:0a:75:f7:b5:
e8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:52:0F:C7:D4:76:87:BA:BC:66:DC:13:C3:9D:E4:B3:B8:46:F4:B4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/11ac18c7-8e79-40bd-ab60-b5f6f5e7aa3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b1:9c:bb:37:65:d8:47:ef:d3:d3:5c:44:30:02:4d:c3:cc:
fc:f7:04:4d:29:da:50:17:0c:eb:3d:51:60:bf:f6:a9:e7:a9:
24:b3:c0:0d:50:3f:48:fc:6f:ed:a1:a2:5b:94:cf:64:22:b6:
87:35:b5:b4:bd:e3:c2:f2:8d:19:3a:10:31:d6:a6:10:20:62:
03:e0:9b:ee:f4:b4:6a:95:a8:97:ee:ed:ed:9b:eb:58:5f:90:
3a:a3:93:62:a2:e7:f6:87:eb:9e:2a:bc:34:55:5b:b0:d1:42:
86:d8:90:f2:01:e6:1c:ad:fc:e3:e6:c3:90:d5:ad:ad:6d:1f:
60:59:7f:2c:d2:f5:95:95:d7:b9:dc:45:75:17:40:b7:4e:37:
7f:64:c0:56:f3:b7:b4:1f:3e:f1:4c:eb:85:a7:a2:c9:d9:36:
81:39:5b:1c:05:ef:bd:cf:47:f5:bc:40:14:9f:15:6f:90:7d:
eb:ea:b7:c5:15:ed:d9:08:e2:a8:9b:a4:1b:c2:76:80:c4:dd:
51:6f:7f:47:6f:11:ff:bb:f8:26:53:e8:ad:4f:17:41:a6:16:
40:74:f0:ef:25:08:15:62:2b:6e:ad:04:5e:5f:32:3b:e1:92:
59:b1:21:57:45:8c:24:f3:ec:de:83:ec:eb:66:64:b1:43:6b:
55:39:0d:58
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTvmNcJ3TvpYvHc547lCxhks3w8cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTI3MDAwMDAwWhcNMjQwMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BjYTY4NzYzYWRkM2U1ZjJjMGU5ZjBlMGE2MzA3MWU1ODMz
ZjljNjY4MjhjZWYyYTc5MzZkMWEwM2JmZTc3ODk0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvD5QAJnFLqGzkzG8xRnZcsCJIbhPXm7bpR/jmGAMbLSzA
BDZJmmAeLAVVmh4Q65GWfDAdxxdiDp/1DCBy0Q0txhtJS3OMqubdI1UDH3NaY6Kn
xHwqe24uS7KpTgXLZN5YiU4WBJLrMyqdO9oGt7Lw0g4FWTEUuz8h059Soiua5xfl
7VxTD8hxD1yDVmwlS+I9rpYjyDJUgMH7j3pmCGKvKsj1aJIixi19Z3cKUZ/SW1Mv
Y0T45bVjiujB/VjQP4ZlstVxhje5uhGqY3awrMg418t9cbvA60aGyWYmUivmF8Fb
vBtfGAoUbjTl4OTeOcIBI8LHbEYxIy0yCnX3tejTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUuVIPx9R2h7q8ZtwTw53ks7hG9LQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzExYWMxOGM3LThlNzktNDBiZC1hYjYwLWI1ZjZmNWU3YWEzYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAE+xnLs3ZdhH79PTXEQwAk3DzPz3
BE0p2lAXDOs9UWC/9qnnqSSzwA1QP0j8b+2holuUz2Qitoc1tbS948LyjRk6EDHW
phAgYgPgm+70tGqVqJfu7e2b61hfkDqjk2Ki5/aH654qvDRVW7DRQobYkPIB5hyt
/OPmw5DVra1tH2BZfyzS9ZWV17ncRXUXQLdON39kwFbzt7QfPvFM64WnosnZNoE5
WxwF773PR/W8QBSfFW+Qfevqt8UV7dkI4qibpBvCdoDE3VFvf0dvEf+7+CZT6K1P
F0GmFkB08O8lCBViK26tBF5fMjvhklmxIVdFjCTz7N6D7OtmZLFDa1U5DVg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:12 2024 by rpki-client on console-fra.rpki-client.org