Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17a9050d-acb4-4c1e-83ab-a5d071c8788d.roa
File: 17a9050d-acb4-4c1e-83ab-a5d071c8788d.roa (raw, json)
Hash identifier: 6MbCvj+H5M3l4ikNsZVEUlFHZ3Bw3PLuv3mFJkyO63s=
Subject key identifier: 6F:08:17:13:68:AB:05:13:27:96:B3:AF:58:50:33:E8:6D:06:99:B1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 162036CFFF2E224E6F44F8EEF863297071CC9BE5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17a9050d-acb4-4c1e-83ab-a5d071c8788d.roa
Signing time: Fri 02 Feb 2024 00:00:00 +0000
ROA not before: Fri 02 Feb 2024 00:00:00 +0000
ROA not after: Fri 08 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:20:36:cf:ff:2e:22:4e:6f:44:f8:ee:f8:63:29:70:71:cc:9b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 2 00:00:00 2024 GMT
Not After : Mar 8 23:59:59 2024 GMT
Subject: serialNumber=8e4d8d23b8f51f59480ea407c7511c2c2819c9d80b6c6806c6f69d820a2b39c0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:2e:49:19:4b:23:76:83:13:ec:01:a8:5b:
5f:ac:75:c0:06:16:4b:bc:f7:7f:bb:90:36:02:c7:
d5:01:7d:49:d8:52:55:f8:f1:8b:8f:12:e3:89:82:
82:0b:52:6d:82:44:fb:80:66:15:ca:92:e8:cd:56:
da:41:44:46:74:f8:54:8b:e2:dd:8c:87:3b:90:88:
e1:de:97:44:67:c6:de:74:00:5a:33:2a:a2:34:c0:
2a:42:a3:f2:de:17:39:45:b8:19:49:89:b8:26:95:
e0:4c:46:c4:11:52:84:fe:c2:57:78:86:59:d8:ac:
1e:0e:66:fe:5e:7f:9b:34:fc:45:52:f5:91:ac:91:
5c:83:67:97:09:65:93:24:79:54:c6:61:42:c9:2e:
07:26:d4:cc:c2:2f:75:75:c3:72:bd:be:7f:58:39:
0d:b5:6e:8f:f9:df:06:3e:11:31:88:00:14:90:50:
a3:1d:8b:c5:36:68:a5:7d:2f:71:d0:02:d4:3b:c1:
82:b7:87:af:88:e5:03:fa:b2:24:08:57:92:f0:33:
58:8d:96:b2:e6:f2:89:dc:57:88:9e:1a:55:9e:52:
ad:88:23:34:8f:af:a8:2f:a0:5a:57:a0:b6:68:c4:
23:ae:e7:0d:30:94:97:64:ea:ac:44:16:d1:c2:54:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:08:17:13:68:AB:05:13:27:96:B3:AF:58:50:33:E8:6D:06:99:B1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17a9050d-acb4-4c1e-83ab-a5d071c8788d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e7:6b:fd:75:9e:af:e9:2d:1b:20:e1:25:5c:20:6a:b6:bf:
62:a9:84:0b:7a:bf:bb:4f:00:78:11:23:30:fb:91:1d:7b:f4:
b7:13:44:33:c0:d2:d5:a1:19:76:85:95:a5:7d:08:e1:9e:77:
8b:ab:7c:2e:29:b4:3b:1b:5c:66:81:8e:12:3e:74:84:31:6d:
38:25:c8:ce:fc:b8:d3:d5:ac:97:19:c9:5c:38:d5:90:4d:a6:
4c:22:17:28:8d:b7:1c:02:4d:a6:64:64:98:da:a3:b5:b7:db:
d4:a9:92:da:9f:21:e0:4a:59:f9:f4:af:5e:e4:5b:64:08:2e:
9c:a1:91:9e:37:48:5b:91:02:3d:bb:22:d6:94:3f:6d:83:61:
3c:37:ed:e8:a6:41:75:6c:0a:0a:3a:30:a0:af:9f:14:4b:70:
b7:4e:66:e3:22:f7:a5:b4:d7:16:d7:e1:bf:32:45:46:32:be:
5f:9c:bf:70:8c:7e:71:e9:5d:4c:e0:24:bc:1c:db:0f:17:bf:
b1:9c:73:bf:c8:02:83:fa:aa:a8:23:20:a7:be:e8:6a:56:6e:
3f:d8:ad:f2:13:4e:4a:08:11:4c:42:0b:65:2a:04:46:1e:3f:
3f:c8:9a:13:b3:3b:ef:44:3d:26:08:83:c5:a3:13:bd:5d:86:
8e:b9:e5:c8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFiA2z/8uIk5vRPju+GMpcHHMm+UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMjAyMDAwMDAwWhcNMjQwMzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZTRkOGQyM2I4ZjUxZjU5NDgwZWE0MDdjNzUxMWMyYzI4
MTljOWQ4MGI2YzY4MDZjNmY2OWQ4MjBhMmIzOWMwMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjkC5JGUsjdoMT7AGoW1+sdcAGFku893+7kDYCx9UBfUnY
UlX48YuPEuOJgoILUm2CRPuAZhXKkujNVtpBREZ0+FSL4t2MhzuQiOHel0Rnxt50
AFozKqI0wCpCo/LeFzlFuBlJibgmleBMRsQRUoT+wld4hlnYrB4OZv5ef5s0/EVS
9ZGskVyDZ5cJZZMkeVTGYULJLgcm1MzCL3V1w3K9vn9YOQ21bo/53wY+ETGIABSQ
UKMdi8U2aKV9L3HQAtQ7wYK3h6+I5QP6siQIV5LwM1iNlrLm8oncV4ieGlWeUq2I
IzSPr6gvoFpXoLZoxCOu5w0wlJdk6qxEFtHCVClrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbwgXE2irBRMnlrOvWFAz6G0GmbEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzE3YTkwNTBkLWFjYjQtNGMxZS04M2FiLWE1ZDA3MWM4Nzg4ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKPna/11nq/pLRsg4SVcIGq2v2Kp
hAt6v7tPAHgRIzD7kR179LcTRDPA0tWhGXaFlaV9COGed4urfC4ptDsbXGaBjhI+
dIQxbTglyM78uNPVrJcZyVw41ZBNpkwiFyiNtxwCTaZkZJjao7W329SpktqfIeBK
Wfn0r17kW2QILpyhkZ43SFuRAj27ItaUP22DYTw37eimQXVsCgo6MKCvnxRLcLdO
ZuMi96W01xbX4b8yRUYyvl+cv3CMfnHpXUzgJLwc2w8Xv7Gcc7/IAoP6qqgjIKe+
6GpWbj/YrfITTkoIEUxCC2UqBEYePz/ImhOzO+9EPSYIg8WjE71dho655cg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:50 2024 by rpki-client on console-ams.rpki-client.org