Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1566b7fb-2c83-425d-ba1a-d3fc49670dcd.roa
File: 1566b7fb-2c83-425d-ba1a-d3fc49670dcd.roa (raw, json)
Hash identifier: sF5syfmBbUai3JGBh8L49H3WbfDk5Br1w4KCdFWq5Pw=
Subject key identifier: D0:D2:CA:6A:85:7E:CC:7F:FF:96:F8:8E:E2:6B:12:21:FA:0B:5B:D5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1ED544AF53F937B593F39044F5D7397C5C633CAF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1566b7fb-2c83-425d-ba1a-d3fc49670dcd.roa
Signing time: Thu 07 Dec 2023 00:00:00 +0000
ROA not before: Thu 07 Dec 2023 00:00:00 +0000
ROA not after: Thu 11 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d5:44:af:53:f9:37:b5:93:f3:90:44:f5:d7:39:7c:5c:63:3c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 7 00:00:00 2023 GMT
Not After : Jan 11 23:59:59 2024 GMT
Subject: serialNumber=6c3863d1848dbdaa5851383e0354e4f7313ab8e337a9c9e0a42494a8386e150a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:77:64:65:2a:6a:ea:6b:31:62:6a:92:5c:
d8:f7:cc:eb:85:b9:51:1e:80:c4:bf:fd:1f:ca:fb:
74:ce:86:0c:e6:b7:cb:4d:8e:05:4b:65:94:4a:72:
e3:13:0b:4f:d6:aa:4b:1f:c4:80:b3:48:c7:59:99:
0f:56:f9:08:56:d0:08:89:bb:f9:23:51:a9:ee:00:
0a:2f:53:bc:d1:b0:92:f1:09:3d:fc:20:2c:c7:32:
14:13:ea:f1:4a:c1:9f:a4:77:5b:9a:ec:e9:bb:e5:
4a:b1:b4:61:96:f6:b8:20:24:ad:a4:15:1e:7f:cf:
13:d6:c2:68:f2:d8:95:99:78:08:76:47:84:ab:fe:
68:96:64:c6:3c:24:a8:40:8e:f0:f2:a1:61:ec:6f:
7d:31:91:0a:8c:81:e4:71:4e:45:ec:c0:0e:c1:17:
05:7e:ae:fa:c6:13:d4:ce:77:ca:f3:d8:b5:0e:01:
f9:f5:3a:c1:a6:87:39:15:47:12:c3:5c:83:74:ec:
5d:e5:02:84:50:7b:43:0b:2f:8d:8a:25:3a:d9:e5:
a8:4d:62:bd:5d:a6:b6:de:f9:b2:ef:f8:de:fd:bd:
4f:60:0d:93:01:6e:78:aa:6f:b0:f7:ac:fb:27:91:
99:99:94:72:49:8c:87:cd:25:04:60:f1:9a:0f:fb:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D2:CA:6A:85:7E:CC:7F:FF:96:F8:8E:E2:6B:12:21:FA:0B:5B:D5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1566b7fb-2c83-425d-ba1a-d3fc49670dcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
27:4c:63:1c:87:29:80:90:98:7c:41:02:9e:dd:04:54:89:24:
1b:17:01:a0:50:d9:bb:01:59:3e:b5:75:71:63:17:47:11:dd:
95:05:bd:4a:8c:16:25:94:ed:2b:96:22:e4:64:11:47:44:1c:
dc:cd:0e:68:58:17:b8:c5:72:4c:bc:f1:f6:58:0e:3a:0d:d0:
c7:dd:b6:87:ea:23:d5:6d:97:de:c8:f1:3e:9c:b0:49:ec:e1:
cc:17:33:38:33:34:7c:7f:f8:5c:5d:da:04:06:79:85:14:90:
5a:1a:37:3c:34:f3:62:be:b1:52:62:d1:31:8a:9d:2c:f7:8c:
c5:d8:cc:87:7b:2b:a4:d6:9f:d3:6f:f7:ba:77:3f:71:a5:0f:
78:82:fc:cf:47:87:ae:f0:e1:4f:1b:f7:66:ba:de:1c:28:44:
dc:66:bc:c0:af:bf:ff:d4:4f:e7:eb:7d:ae:04:98:de:1c:bd:
46:a8:0f:98:9f:ec:8f:43:b2:4b:1f:33:b5:d1:73:48:16:0a:
0f:fc:91:c5:14:06:2e:cb:7f:10:5b:d9:c7:f5:1d:ab:97:34:
98:4b:6b:27:b1:b9:32:b6:42:f5:58:78:e0:30:4d:b8:b7:87:
11:3a:61:10:7c:55:d0:bf:e8:4b:9c:d0:8d:9b:d9:2d:de:de:
19:bf:d1:b1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHtVEr1P5N7WT85BE9dc5fFxjPK8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjA3MDAwMDAwWhcNMjQwMTExMjM1OTU5
WjB6MUkwRwYDVQQFE0A2YzM4NjNkMTg0OGRiZGFhNTg1MTM4M2UwMzU0ZTRmNzMx
M2FiOGUzMzdhOWM5ZTBhNDI0OTRhODM4NmUxNTBhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCX4ndkZSpq6msxYmqSXNj3zOuFuVEegMS//R/K+3TOhgzm
t8tNjgVLZZRKcuMTC0/WqksfxICzSMdZmQ9W+QhW0AiJu/kjUanuAAovU7zRsJLx
CT38ICzHMhQT6vFKwZ+kd1ua7Om75UqxtGGW9rggJK2kFR5/zxPWwmjy2JWZeAh2
R4Sr/miWZMY8JKhAjvDyoWHsb30xkQqMgeRxTkXswA7BFwV+rvrGE9TOd8rz2LUO
Afn1OsGmhzkVRxLDXIN07F3lAoRQe0MLL42KJTrZ5ahNYr1dprbe+bLv+N79vU9g
DZMBbniqb7D3rPsnkZmZlHJJjIfNJQRg8ZoP+9/vAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0NLKaoV+zH//lviO4msSIfoLW9UwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzE1NjZiN2ZiLTJjODMtNDI1ZC1iYTFhLWQzZmM0OTY3MGRjZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACdMYxyHKYCQmHxBAp7dBFSJJBsX
AaBQ2bsBWT61dXFjF0cR3ZUFvUqMFiWU7SuWIuRkEUdEHNzNDmhYF7jFcky88fZY
DjoN0MfdtofqI9Vtl97I8T6csEns4cwXMzgzNHx/+Fxd2gQGeYUUkFoaNzw082K+
sVJi0TGKnSz3jMXYzId7K6TWn9Nv97p3P3GlD3iC/M9Hh67w4U8b92a63hwoRNxm
vMCvv//UT+frfa4EmN4cvUaoD5if7I9DsksfM7XRc0gWCg/8kcUUBi7LfxBb2cf1
HauXNJhLayexuTK2QvVYeOAwTbi3hxE6YRB8VdC/6Euc0I2b2S3e3hm/0bE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:49 2024 by rpki-client on console-ams.rpki-client.org