Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/497e6713-9db8-4146-9c38-f92917be4a92.roa
File: 497e6713-9db8-4146-9c38-f92917be4a92.roa (raw, json)
Hash identifier: qsY/z6Hs+03nCh4SoSfNcD9DTPoXFipJhFHWHTnq9FE=
Subject key identifier: D7:BA:04:5A:D0:89:EE:86:A2:83:EC:1A:79:C5:BD:B1:C9:54:30:FB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6D159B5AA96A409115353927AB6AF4226CCE0A68
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/497e6713-9db8-4146-9c38-f92917be4a92.roa
Signing time: Sun 30 Jul 2023 00:00:00 +0000
ROA not before: Sun 30 Jul 2023 00:00:00 +0000
ROA not after: Sun 03 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:15:9b:5a:a9:6a:40:91:15:35:39:27:ab:6a:f4:22:6c:ce:0a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 30 00:00:00 2023 GMT
Not After : Sep 3 23:59:59 2023 GMT
Subject: serialNumber=43ebb9ff937d658247db5c74d773fbd2d8937ef42a3272fbd4da97c5937b7569, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:8a:e0:34:4d:07:b9:77:a9:75:a5:f0:a9:
c8:91:2d:a5:2f:b1:f8:96:d8:46:06:52:47:ff:8c:
2f:36:86:a4:7c:60:6d:4d:6f:fe:f8:e8:ff:c1:01:
1c:6b:86:33:78:dd:5b:1d:0a:28:64:2e:85:8a:4a:
4f:e4:5d:13:91:7e:a2:e7:8c:86:3a:3c:0f:2b:51:
47:b2:12:05:12:0a:68:b5:69:40:c1:d5:02:95:5e:
29:37:1c:ba:54:93:42:19:d6:e9:dd:fb:ba:40:1d:
3e:02:32:23:37:6c:4e:23:12:a8:07:7b:e0:75:bc:
30:8c:66:66:ac:a2:f3:ce:6b:e9:57:78:85:a3:81:
ee:cd:29:ca:3f:dd:6d:6d:bc:39:62:be:e5:8a:3b:
7b:30:c1:01:2c:f8:7e:7a:d1:9d:26:4d:d4:d4:fd:
8d:e8:90:67:86:78:49:8e:58:f8:c3:1e:e3:3e:8e:
bf:69:58:bb:85:86:85:e2:f5:69:3f:c4:d0:95:7d:
3e:85:e0:21:c1:cb:13:86:c9:30:95:1c:b9:5e:7d:
ee:a7:82:45:d3:d8:b1:92:bf:4e:19:e7:5e:29:03:
fa:34:ce:0d:e0:81:3b:36:2b:59:09:1d:18:eb:3e:
c6:95:f1:e7:83:81:9b:32:e1:d3:af:bf:dd:a2:45:
83:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BA:04:5A:D0:89:EE:86:A2:83:EC:1A:79:C5:BD:B1:C9:54:30:FB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/497e6713-9db8-4146-9c38-f92917be4a92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:3f:69:46:06:41:65:19:a5:0b:da:fc:41:ac:7d:02:da:71:
97:bb:77:b9:b6:14:62:70:5e:ff:00:53:6c:f1:f6:cc:56:32:
70:e8:a9:f7:4d:ba:0f:49:a2:67:39:c7:fa:43:04:9d:40:8f:
70:16:48:dd:82:48:fe:36:dc:69:5f:1f:33:cf:47:dd:a5:0f:
01:49:24:56:90:f5:e5:9b:a1:31:38:ae:2e:9d:97:97:3d:60:
29:df:16:f9:f7:79:59:ad:f1:b3:ae:60:00:65:1e:70:d7:26:
d0:b1:4f:f6:ae:ae:f4:5d:ed:84:dd:53:ee:ef:f8:78:32:c1:
df:e0:f6:02:4a:ff:ac:b6:6f:2d:ba:c5:e3:c5:4b:76:76:cc:
af:ef:c4:f2:b8:cc:65:01:62:11:56:dc:56:40:0f:5f:76:be:
a7:a4:11:21:53:ac:6b:ed:ce:8b:e2:b9:47:1f:c1:64:5b:e9:
87:0a:9c:30:99:52:80:dc:9e:6f:89:b6:8b:ab:14:34:e7:20:
51:4f:9c:ad:d6:7b:5a:01:ef:6b:be:27:b7:c0:71:dc:9a:cb:
7b:8e:3f:55:74:37:2e:b2:c5:93:47:e7:a5:86:c3:de:c0:ae:
0f:95:33:63:9d:10:af:be:3f:c1:5a:e1:87:a1:14:b9:bd:32:
13:af:fd:02
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbRWbWqlqQJEVNTknq2r0ImzOCmgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzMwMDAwMDAwWhcNMjMwOTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0M2ViYjlmZjkzN2Q2NTgyNDdkYjVjNzRkNzczZmJkMmQ4
OTM3ZWY0MmEzMjcyZmJkNGRhOTdjNTkzN2I3NTY5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBtYrgNE0HuXepdaXwqciRLaUvsfiW2EYGUkf/jC82hqR8
YG1Nb/746P/BARxrhjN43VsdCihkLoWKSk/kXRORfqLnjIY6PA8rUUeyEgUSCmi1
aUDB1QKVXik3HLpUk0IZ1und+7pAHT4CMiM3bE4jEqgHe+B1vDCMZmasovPOa+lX
eIWjge7NKco/3W1tvDlivuWKO3swwQEs+H560Z0mTdTU/Y3okGeGeEmOWPjDHuM+
jr9pWLuFhoXi9Wk/xNCVfT6F4CHByxOGyTCVHLlefe6ngkXT2LGSv04Z514pA/o0
zg3ggTs2K1kJHRjrPsaV8eeDgZsy4dOvv92iRYPlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU17oEWtCJ7oaig+waecW9sclUMPswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzQ5N2U2NzEzLTlkYjgtNDE0Ni05YzM4LWY5MjkxN2JlNGE5Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAH0/aUYGQWUZpQva/EGsfQLacZe7
d7m2FGJwXv8AU2zx9sxWMnDoqfdNug9Jomc5x/pDBJ1Aj3AWSN2CSP423GlfHzPP
R92lDwFJJFaQ9eWboTE4ri6dl5c9YCnfFvn3eVmt8bOuYABlHnDXJtCxT/aurvRd
7YTdU+7v+Hgywd/g9gJK/6y2by26xePFS3Z2zK/vxPK4zGUBYhFW3FZAD192vqek
ESFTrGvtzoviuUcfwWRb6YcKnDCZUoDcnm+JtourFDTnIFFPnK3We1oB72u+J7fA
cdyay3uOP1V0Ny6yxZNH56WGw97Arg+VM2OdEK++P8Fa4YehFLm9MhOv/QI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:08 2024 by rpki-client on console-ams.rpki-client.org