Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/36871a2c-0137-4b30-a413-ac4057795425.roa
File: 36871a2c-0137-4b30-a413-ac4057795425.roa (raw, json)
Hash identifier: BYsNXB6axwyZcH+eQlmglqtaOzscau4P6tUhiwaU6hw=
Subject key identifier: 47:0A:F8:6F:CD:D2:03:E6:43:5B:22:6E:CB:B3:76:2D:BB:71:04:F1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 614379B539EB9D96F09812515426500D71979661
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/36871a2c-0137-4b30-a413-ac4057795425.roa
Signing time: Sun 27 Aug 2023 00:00:00 +0000
ROA not before: Sun 27 Aug 2023 00:00:00 +0000
ROA not after: Sun 01 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:43:79:b5:39:eb:9d:96:f0:98:12:51:54:26:50:0d:71:97:96:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 27 00:00:00 2023 GMT
Not After : Oct 1 23:59:59 2023 GMT
Subject: serialNumber=828efba5b096997a8d4dd7abd739ef4da70951f93e994fb6d14dacc6b77af775, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:82:04:3f:2d:28:92:7d:f6:3a:74:0e:c6:7a:
6c:bf:19:48:1f:4e:c7:55:6f:7b:e8:03:8c:0e:92:
4d:ef:20:c3:ca:ce:fb:04:0e:6e:2f:f2:b5:94:e6:
d2:0c:a3:06:3b:87:d5:2b:f1:05:54:a1:b4:d8:9c:
46:85:a2:50:8a:59:e3:28:b3:c8:4e:a1:3b:47:28:
a7:6a:9a:fc:9f:9b:08:d2:1d:80:81:22:72:a0:f6:
20:b1:e3:3c:90:63:29:ba:11:d4:d7:26:d8:11:ee:
78:ab:da:38:25:57:32:ba:08:21:24:87:41:a0:be:
f6:19:23:11:63:03:f8:1c:8d:3c:fb:cb:ce:d0:5e:
fd:6c:48:4f:e3:69:26:f4:e0:2d:9b:d1:0a:95:c3:
b5:54:53:34:ce:1f:97:2b:39:96:2e:6f:8f:b1:57:
21:ca:13:c9:37:cc:d4:9a:ee:de:e3:ec:83:fa:5f:
f0:b1:eb:c3:cf:b2:d4:bf:cd:3b:5a:8a:1a:ed:06:
d9:ea:c6:8a:a5:01:89:b6:1e:42:1c:97:2f:33:26:
f0:56:c0:5f:12:48:97:e3:53:75:e5:da:b7:da:06:
02:42:16:df:b6:ac:a8:f0:3e:ef:82:a6:37:12:3c:
76:8f:bb:20:d0:74:6e:53:66:aa:f3:c9:d0:15:9c:
27:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0A:F8:6F:CD:D2:03:E6:43:5B:22:6E:CB:B3:76:2D:BB:71:04:F1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/36871a2c-0137-4b30-a413-ac4057795425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1b:be:9f:39:ab:06:76:c6:92:61:c8:83:cf:2c:06:d8:5a:
59:e2:53:16:21:59:39:b4:bf:f4:3a:f0:da:39:51:6e:16:7e:
b9:fb:10:07:a0:c6:2e:8a:12:6b:b5:02:de:34:e2:af:a7:4d:
a5:3d:cd:e3:3b:71:71:6e:77:dc:9f:12:27:6e:d7:5c:4c:ed:
e0:ea:f7:03:11:55:86:76:65:aa:b0:70:76:7a:14:e8:89:63:
24:f3:28:42:13:51:78:4f:c7:b2:ae:45:f7:44:16:c6:71:36:
47:0d:14:92:4a:ca:0b:43:61:18:bf:04:8b:19:61:80:6c:87:
de:fc:4f:5d:4c:26:8c:61:df:7d:50:e5:32:ae:17:12:eb:93:
88:2f:6a:3f:29:6e:11:10:a9:bd:0a:50:a1:83:15:c7:fe:6a:
5d:70:4a:b2:60:35:7e:9c:94:e5:3c:11:86:1e:22:06:76:47:
12:5c:6d:a0:6d:ba:f6:af:6b:bb:c0:a3:34:b4:0e:a5:a8:00:
b9:27:bd:d6:81:3b:f0:d2:77:f2:da:a0:10:53:0e:b1:6b:8d:
9f:52:b7:a4:8d:75:16:e7:d9:75:68:56:eb:7a:5c:60:f1:a0:
18:41:2f:65:5a:ff:e5:56:0a:fc:10:6b:a0:ec:b5:9a:2e:18:
f2:3d:3a:81
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYUN5tTnrnZbwmBJRVCZQDXGXlmEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODI3MDAwMDAwWhcNMjMxMDAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4MjhlZmJhNWIwOTY5OTdhOGQ0ZGQ3YWJkNzM5ZWY0ZGE3
MDk1MWY5M2U5OTRmYjZkMTRkYWNjNmI3N2FmNzc1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDeggQ/LSiSffY6dA7Gemy/GUgfTsdVb3voA4wOkk3vIMPK
zvsEDm4v8rWU5tIMowY7h9Ur8QVUobTYnEaFolCKWeMos8hOoTtHKKdqmvyfmwjS
HYCBInKg9iCx4zyQYym6EdTXJtgR7nir2jglVzK6CCEkh0GgvvYZIxFjA/gcjTz7
y87QXv1sSE/jaSb04C2b0QqVw7VUUzTOH5crOZYub4+xVyHKE8k3zNSa7t7j7IP6
X/Cx68PPstS/zTtaihrtBtnqxoqlAYm2HkIcly8zJvBWwF8SSJfjU3Xl2rfaBgJC
Ft+2rKjwPu+CpjcSPHaPuyDQdG5TZqrzydAVnCdlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURwr4b83SA+ZDWyJuy7N2LbtxBPEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzM2ODcxYTJjLTAxMzctNGIzMC1hNDEzLWFjNDA1Nzc5NTQyNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEcbvp85qwZ2xpJhyIPPLAbYWlni
UxYhWTm0v/Q68No5UW4Wfrn7EAegxi6KEmu1At404q+nTaU9zeM7cXFud9yfEidu
11xM7eDq9wMRVYZ2ZaqwcHZ6FOiJYyTzKEITUXhPx7KuRfdEFsZxNkcNFJJKygtD
YRi/BIsZYYBsh978T11MJoxh331Q5TKuFxLrk4gvaj8pbhEQqb0KUKGDFcf+al1w
SrJgNX6clOU8EYYeIgZ2RxJcbaBtuvava7vAozS0DqWoALknvdaBO/DSd/LaoBBT
DrFrjZ9St6SNdRbn2XVoVut6XGDxoBhBL2Va/+VWCvwQa6DstZouGPI9OoE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:00 2024 by rpki-client on console-ams.rpki-client.org