Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2e36d372-5c31-4e3b-99a3-687853dd5914.roa
File: 2e36d372-5c31-4e3b-99a3-687853dd5914.roa (raw, json)
Hash identifier: 7CSEtpN3qztOs4YlwOrGJv7/3516ya/s4IQgHonkFb0=
Subject key identifier: 90:4C:5F:D9:AB:B7:53:04:E9:8E:F5:92:AE:DD:21:ED:5F:7D:5D:87
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0D8ACD37370F6D320479E8499CC78481B1D127FE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2e36d372-5c31-4e3b-99a3-687853dd5914.roa
Signing time: Wed 28 Jun 2023 00:00:00 +0000
ROA not before: Wed 28 Jun 2023 00:00:00 +0000
ROA not after: Wed 02 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:8a:cd:37:37:0f:6d:32:04:79:e8:49:9c:c7:84:81:b1:d1:27:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 28 00:00:00 2023 GMT
Not After : Aug 2 23:59:59 2023 GMT
Subject: serialNumber=6bc20ff844901ee5fc783a25a72ab56d1594f45da5201a74e7eb8ff9c4cf47cd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:43:75:bd:13:aa:82:52:b4:bc:c3:bf:8c:
db:e4:78:d0:03:2f:62:0f:7e:4a:1f:48:d9:c9:90:
0d:f2:25:77:39:97:9c:41:7b:2c:ef:8e:b0:af:f8:
61:c9:31:13:6f:09:85:e2:c3:09:81:19:b1:d9:50:
6d:a6:19:0d:d9:3c:72:41:ba:66:5d:36:60:43:34:
bb:c4:ba:a7:fc:7e:60:ee:1e:2e:27:c9:72:1b:55:
54:45:35:ab:a4:99:f8:ad:15:c8:95:41:3d:58:bf:
02:b4:4d:6b:41:35:7e:1b:5d:e8:44:6c:71:92:5a:
06:d6:d4:4c:ba:77:6e:6e:ed:83:20:7f:ba:4c:51:
fb:62:9c:a0:d1:46:3c:e3:fa:c2:32:3d:1c:e9:61:
2f:6c:a9:99:9f:64:62:9c:df:9d:59:cd:ef:c7:4e:
3d:9b:c5:4f:dc:c9:75:4a:b7:e0:ea:e6:14:08:a5:
75:a3:da:db:d7:56:63:55:59:32:5a:22:90:e4:02:
bd:2c:9c:b8:3c:2e:39:7b:d0:c8:f2:a3:b7:bc:48:
c1:4b:f6:88:a0:67:35:98:73:fc:67:b4:06:29:16:
8e:0a:83:71:c3:e9:98:93:6c:df:10:6d:05:e2:46:
15:dc:f7:fd:ea:64:3e:d4:a5:bf:11:57:6f:87:be:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4C:5F:D9:AB:B7:53:04:E9:8E:F5:92:AE:DD:21:ED:5F:7D:5D:87
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2e36d372-5c31-4e3b-99a3-687853dd5914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
34:3e:76:da:4c:63:01:b9:bd:96:6e:31:f9:cd:58:7b:e4:a0:
b1:e6:53:82:f4:ef:49:f3:80:76:21:ef:35:14:a7:49:3f:fd:
ec:bd:ea:b8:d5:55:77:03:1c:eb:07:a4:de:93:bb:1f:40:47:
da:96:18:65:af:14:99:9b:0b:79:89:50:20:4b:a6:b9:22:67:
68:76:26:5b:ce:42:e8:3f:28:82:7a:be:18:34:c1:e8:89:5d:
85:3c:66:a7:1f:10:93:83:97:8b:87:d3:20:cc:48:12:54:8d:
81:82:be:10:4a:5d:9f:58:08:b0:ec:ff:11:07:c7:1b:ff:d0:
f0:05:72:d3:f8:46:61:a3:ac:88:87:95:9d:37:45:0c:3d:ce:
08:0f:2b:55:23:fb:fc:3f:69:b9:30:b9:9d:c9:bd:66:d2:56:
0a:64:76:40:9e:cd:59:5f:0f:3f:b8:9d:74:8c:85:0b:bd:8d:
80:bf:7a:14:ff:af:a1:91:7e:e6:d7:ac:db:08:4e:02:fe:fc:
d0:6f:47:f8:7f:58:5f:f8:b2:c8:6c:9d:02:29:fe:c3:3e:a7:
41:34:29:ed:73:f7:95:23:f9:85:b5:2b:d1:ed:df:54:66:4d:
f6:3c:cc:7f:f0:5c:fd:e1:8a:b3:0d:53:df:66:e6:42:c6:e9:
3c:fb:84:80
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDYrNNzcPbTIEeehJnMeEgbHRJ/4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjI4MDAwMDAwWhcNMjMwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2YmMyMGZmODQ0OTAxZWU1ZmM3ODNhMjVhNzJhYjU2ZDE1
OTRmNDVkYTUyMDFhNzRlN2ViOGZmOWM0Y2Y0N2NkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdY0N1vROqglK0vMO/jNvkeNADL2IPfkofSNnJkA3yJXc5
l5xBeyzvjrCv+GHJMRNvCYXiwwmBGbHZUG2mGQ3ZPHJBumZdNmBDNLvEuqf8fmDu
Hi4nyXIbVVRFNaukmfitFciVQT1YvwK0TWtBNX4bXehEbHGSWgbW1Ey6d25u7YMg
f7pMUftinKDRRjzj+sIyPRzpYS9sqZmfZGKc351Zze/HTj2bxU/cyXVKt+Dq5hQI
pXWj2tvXVmNVWTJaIpDkAr0snLg8Ljl70Mjyo7e8SMFL9oigZzWYc/xntAYpFo4K
g3HD6ZiTbN8QbQXiRhXc9/3qZD7Upb8RV2+HvtS/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkExf2au3UwTpjvWSrt0h7V99XYcwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzJlMzZkMzcyLTVjMzEtNGUzYi05OWEzLTY4Nzg1M2RkNTkxNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADQ+dtpMYwG5vZZuMfnNWHvkoLHm
U4L070nzgHYh7zUUp0k//ey96rjVVXcDHOsHpN6Tux9AR9qWGGWvFJmbC3mJUCBL
prkiZ2h2JlvOQug/KIJ6vhg0weiJXYU8ZqcfEJODl4uH0yDMSBJUjYGCvhBKXZ9Y
CLDs/xEHxxv/0PAFctP4RmGjrIiHlZ03RQw9zggPK1Uj+/w/abkwuZ3JvWbSVgpk
dkCezVlfDz+4nXSMhQu9jYC/ehT/r6GRfubXrNsITgL+/NBvR/h/WF/4sshsnQIp
/sM+p0E0Ke1z95Uj+YW1K9Ht31RmTfY8zH/wXP3hirMNU99m5kLG6Tz7hIA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:58 2024 by rpki-client on console-ams.rpki-client.org