Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17389b18-a4ed-44fb-9d9f-12f23baf494b.roa
File: 17389b18-a4ed-44fb-9d9f-12f23baf494b.roa (raw, json)
Hash identifier: 1PQKg3bXjTtQmBha08Nlq6tMSJ+wpvd3kSLHbWos+lI=
Subject key identifier: 12:0D:72:00:B4:CC:EE:09:E4:CC:73:54:89:36:72:11:54:06:18:DF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 028AF90F4C7F9095F45B26F25326014A2B825BF4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17389b18-a4ed-44fb-9d9f-12f23baf494b.roa
Signing time: Sun 31 Mar 2024 00:00:00 +0000
ROA not before: Sun 31 Mar 2024 00:00:00 +0000
ROA not after: Sun 05 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:8a:f9:0f:4c:7f:90:95:f4:5b:26:f2:53:26:01:4a:2b:82:5b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 31 00:00:00 2024 GMT
Not After : May 5 23:59:59 2024 GMT
Subject: serialNumber=9927a3eff34d2d3cff20855c9523245f097a60fefc51386cea4980959b4db979, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:b0:2b:d2:02:af:a1:54:76:0e:52:e9:8c:
6c:16:b9:aa:e1:75:17:5b:43:54:0e:05:b8:8c:79:
a0:a8:be:59:cc:84:18:7a:1c:32:a3:bb:72:b5:1f:
43:02:00:9a:5e:b3:d6:aa:fc:f7:2f:fc:4e:fc:47:
35:a7:f3:8c:ec:12:96:03:8f:9c:2c:04:02:21:68:
38:6e:5e:0d:5f:28:94:2a:7f:e2:aa:2b:3c:6d:5c:
2c:11:94:ae:16:dd:01:64:eb:4d:6a:47:43:75:55:
17:ae:d8:24:2d:f0:2a:6a:a0:bd:d3:fa:29:23:9a:
3b:0a:ba:fc:61:6b:d6:46:4d:1d:19:9d:59:7b:40:
0c:f8:c1:da:53:33:80:36:25:c2:82:ba:6a:da:b9:
40:6a:05:ce:ad:2d:92:ad:9a:27:a3:eb:4c:6e:c0:
56:11:b6:bb:81:50:03:24:d4:69:85:d5:89:5e:3e:
ac:60:4e:23:2c:59:60:d3:3d:21:08:cf:9c:1d:76:
f9:02:e8:e4:8e:43:12:9f:79:4f:cb:b0:ba:a5:36:
b5:7b:ba:ca:55:86:f8:31:1d:df:b9:a4:7e:5b:a9:
39:80:bf:65:1a:1e:0a:b6:02:df:39:80:fe:71:e1:
b3:79:95:04:38:79:7e:88:91:4b:cc:1f:a4:d0:62:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0D:72:00:B4:CC:EE:09:E4:CC:73:54:89:36:72:11:54:06:18:DF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17389b18-a4ed-44fb-9d9f-12f23baf494b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
78:51:95:35:eb:d1:9b:ec:b7:9b:d2:72:4a:b0:2a:6e:7d:02:
5d:43:66:ca:1a:a3:11:01:2c:67:0c:15:eb:1d:a4:2b:b3:cc:
be:94:fe:23:59:05:ff:55:9d:10:cf:a0:6b:0b:ec:c9:cd:57:
bd:26:de:b9:95:a0:0c:47:be:ad:00:26:c5:95:a1:4c:3f:bd:
c2:64:f8:04:a6:0c:9c:da:88:66:62:fa:57:b2:73:db:53:7c:
b7:c8:21:48:6a:46:c1:57:46:cc:04:9f:4a:af:2b:f0:4f:26:
f7:39:41:14:62:2d:3b:33:2a:26:e9:45:f0:34:47:11:01:52:
ea:2f:90:33:fc:bc:1d:dc:20:31:54:ff:e5:a2:b9:9f:8a:ff:
f5:6a:6f:90:a8:6d:fa:d3:73:f3:7e:cc:56:c6:93:33:78:48:
8a:3f:29:ee:74:dc:5c:f7:f4:e4:19:22:06:e8:0e:86:16:b8:
51:3f:30:0e:fd:d7:1b:9d:b0:1d:4f:3b:ff:94:2e:77:e0:ed:
ff:95:70:83:3e:a8:0a:7a:5f:d4:91:1c:34:df:9f:91:ee:75:
1e:61:7d:47:58:b2:34:16:a3:d6:58:8b:67:ff:17:96:4e:1f:
e8:39:73:cb:de:b2:56:34:c3:ce:88:5d:84:4f:12:aa:f5:3d:
ff:3a:c2:d3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAor5D0x/kJX0WybyUyYBSiuCW/QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMzMxMDAwMDAwWhcNMjQwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A5OTI3YTNlZmYzNGQyZDNjZmYyMDg1NWM5NTIzMjQ1ZjA5
N2E2MGZlZmM1MTM4NmNlYTQ5ODA5NTliNGRiOTc5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJbLAr0gKvoVR2DlLpjGwWuarhdRdbQ1QOBbiMeaCovlnM
hBh6HDKju3K1H0MCAJpes9aq/Pcv/E78RzWn84zsEpYDj5wsBAIhaDhuXg1fKJQq
f+KqKzxtXCwRlK4W3QFk601qR0N1VReu2CQt8CpqoL3T+ikjmjsKuvxha9ZGTR0Z
nVl7QAz4wdpTM4A2JcKCumrauUBqBc6tLZKtmiej60xuwFYRtruBUAMk1GmF1Yle
PqxgTiMsWWDTPSEIz5wddvkC6OSOQxKfeU/LsLqlNrV7uspVhvgxHd+5pH5bqTmA
v2UaHgq2At85gP5x4bN5lQQ4eX6IkUvMH6TQYl5xAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUEg1yALTM7gnkzHNUiTZyEVQGGN8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzE3Mzg5YjE4LWE0ZWQtNDRmYi05ZDlmLTEyZjIzYmFmNDk0Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHhRlTXr0Zvst5vSckqwKm59Al1D
ZsoaoxEBLGcMFesdpCuzzL6U/iNZBf9VnRDPoGsL7MnNV70m3rmVoAxHvq0AJsWV
oUw/vcJk+ASmDJzaiGZi+leyc9tTfLfIIUhqRsFXRswEn0qvK/BPJvc5QRRiLTsz
KibpRfA0RxEBUuovkDP8vB3cIDFU/+WiuZ+K//Vqb5CobfrTc/N+zFbGkzN4SIo/
Ke503Fz39OQZIgboDoYWuFE/MA791xudsB1PO/+ULnfg7f+VcIM+qAp6X9SRHDTf
n5HudR5hfUdYsjQWo9ZYi2f/F5ZOH+g5c8veslY0w86IXYRPEqr1Pf86wtM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:49 2024 by rpki-client on console-ams.rpki-client.org