Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/569b28c0-8cf0-4477-8b10-2b65b3efbc2a.roa
File: 569b28c0-8cf0-4477-8b10-2b65b3efbc2a.roa (raw, json)
Hash identifier: hOnebPW1Iz1Oed8Yd7wZR7o7Qb8rOiQHIVlvAB3l5qE=
Subject key identifier: F9:D3:E1:2F:E8:C4:D3:14:F7:13:35:9A:B2:63:BE:02:DE:77:DE:5C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 59974D53EDDF2444D658233580A0E7CAEEE56A9B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/569b28c0-8cf0-4477-8b10-2b65b3efbc2a.roa
Signing time: Sat 07 Oct 2023 00:00:00 +0000
ROA not before: Sat 07 Oct 2023 00:00:00 +0000
ROA not after: Sat 11 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:97:4d:53:ed:df:24:44:d6:58:23:35:80:a0:e7:ca:ee:e5:6a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 7 00:00:00 2023 GMT
Not After : Nov 11 23:59:59 2023 GMT
Subject: serialNumber=37a4a4163c372a829c922d7f7df7e00f5c410925672b1f21e06127525a97e59c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:bf:9b:1d:65:a9:bf:8d:f1:31:46:b9:95:
72:f6:0e:4b:7f:d9:41:1f:7f:bd:42:c9:f7:ee:b9:
8b:cc:48:f8:f8:8f:0c:d4:20:c0:79:a5:f1:c0:18:
92:14:64:2e:6c:f3:c0:e4:d9:d1:7c:c3:e7:89:76:
a1:41:b6:cc:c4:4d:d1:43:74:1c:a0:27:80:49:47:
4a:4f:47:8d:e4:03:d2:a6:7a:69:25:4b:d7:fd:ff:
96:37:bd:21:a4:02:73:b5:ff:5f:7b:2b:cb:0a:9d:
fa:29:d1:76:50:10:77:8b:b5:7d:24:f6:3b:44:77:
5f:3d:63:2a:27:71:71:1e:b7:36:8c:1a:62:57:a2:
10:0e:57:84:8d:29:66:9d:b0:f8:96:cd:a6:09:84:
c9:f7:3c:92:cb:83:bc:b4:f2:1b:7f:59:85:f8:8c:
21:b8:38:23:fc:d1:73:84:ac:5a:e7:61:51:36:67:
23:54:14:14:50:01:54:7e:16:fd:f9:00:b3:e8:f8:
34:46:6a:7d:85:85:52:43:48:ec:55:33:76:3a:cd:
65:10:5e:85:e0:1b:09:0c:5c:87:ef:ee:4b:0c:61:
d1:33:37:64:68:3f:23:b2:53:a8:e3:7d:6f:e7:3c:
65:f7:ca:e5:5d:2f:92:32:8a:d9:89:d6:ad:dc:e1:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D3:E1:2F:E8:C4:D3:14:F7:13:35:9A:B2:63:BE:02:DE:77:DE:5C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/569b28c0-8cf0-4477-8b10-2b65b3efbc2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d3:b8:9c:ef:f6:09:99:f4:7f:27:76:ed:e6:a2:d8:d7:0d:
19:4f:d4:36:0c:a4:35:ea:da:c3:67:77:2c:76:e6:f2:78:80:
c4:07:3b:03:04:5e:14:ed:c8:04:9e:ab:e8:dc:85:fb:0e:f1:
9f:3a:a3:95:55:15:c3:11:f8:db:db:b6:55:ea:fe:ed:2d:fa:
6d:7c:ae:22:72:16:9f:02:ba:e8:91:c6:1d:c1:c4:03:68:3d:
9b:cf:24:03:1f:55:eb:97:24:f3:b5:92:0c:84:3f:db:e0:f1:
8e:6c:48:fb:de:62:0f:4d:ef:b6:8a:21:45:8e:ed:2b:ff:0c:
d3:b2:00:61:8d:6c:d9:c2:e5:e4:b8:0b:7d:88:d5:5c:91:61:
ad:9e:6f:43:7a:35:31:00:60:e8:47:67:a6:29:8f:56:a6:eb:
f5:67:5c:ff:9f:15:1b:25:84:e7:b4:df:62:78:ac:30:4d:50:
c9:f9:0d:fb:14:5e:5b:5e:0c:5f:e5:56:41:64:57:9b:3e:0f:
f1:42:0f:a0:35:c3:c3:1a:26:d9:c2:e5:40:9e:5f:61:2f:84:
83:0a:c8:19:84:fe:0f:2a:ca:b6:0a:9a:eb:e6:44:81:91:e8:
ca:e4:90:25:64:47:79:a4:b2:4c:db:6e:09:7d:71:55:9c:c4:
4b:0a:19:7f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWZdNU+3fJETWWCM1gKDnyu7lapswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDA3MDAwMDAwWhcNMjMxMTExMjM1OTU5
WjB6MUkwRwYDVQQFE0AzN2E0YTQxNjNjMzcyYTgyOWM5MjJkN2Y3ZGY3ZTAwZjVj
NDEwOTI1NjcyYjFmMjFlMDYxMjc1MjVhOTdlNTljMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqYL+bHWWpv43xMUa5lXL2Dkt/2UEff71CyffuuYvMSPj4
jwzUIMB5pfHAGJIUZC5s88Dk2dF8w+eJdqFBtszETdFDdBygJ4BJR0pPR43kA9Km
emklS9f9/5Y3vSGkAnO1/197K8sKnfop0XZQEHeLtX0k9jtEd189YyoncXEetzaM
GmJXohAOV4SNKWadsPiWzaYJhMn3PJLLg7y08ht/WYX4jCG4OCP80XOErFrnYVE2
ZyNUFBRQAVR+Fv35ALPo+DRGan2FhVJDSOxVM3Y6zWUQXoXgGwkMXIfv7ksMYdEz
N2RoPyOyU6jjfW/nPGX3yuVdL5IyitmJ1q3c4ceFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+dPhL+jE0xT3EzWasmO+At533lwwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzU2OWIyOGMwLThjZjAtNDQ3Ny04YjEwLTJiNjViM2VmYmMyYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIXTuJzv9gmZ9H8ndu3motjXDRlP
1DYMpDXq2sNndyx25vJ4gMQHOwMEXhTtyASeq+jchfsO8Z86o5VVFcMR+NvbtlXq
/u0t+m18riJyFp8CuuiRxh3BxANoPZvPJAMfVeuXJPO1kgyEP9vg8Y5sSPveYg9N
77aKIUWO7Sv/DNOyAGGNbNnC5eS4C32I1VyRYa2eb0N6NTEAYOhHZ6Ypj1am6/Vn
XP+fFRslhOe032J4rDBNUMn5DfsUXlteDF/lVkFkV5s+D/FCD6A1w8MaJtnC5UCe
X2EvhIMKyBmE/g8qyrYKmuvmRIGR6MrkkCVkR3mkskzbbgl9cVWcxEsKGX8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:27 2024 by rpki-client on console-fra.rpki-client.org