Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/67903fcf-ae43-45be-838a-c9f8310b8758.roa
File: 67903fcf-ae43-45be-838a-c9f8310b8758.roa (raw, json)
Hash identifier: V8KsKjzoRCBQQPpBBnE7Q1dvxb7xNE0y0dEPNaANTWQ=
Subject key identifier: 65:7C:37:60:3F:2A:37:05:51:2F:6D:DE:C5:E7:18:5D:4E:5C:A4:99
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3CE5B0A8AA0F009F02FB15A5A0AF55EDF42EEEA1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/67903fcf-ae43-45be-838a-c9f8310b8758.roa
Signing time: Fri 28 Jul 2023 00:00:00 +0000
ROA not before: Fri 28 Jul 2023 00:00:00 +0000
ROA not after: Fri 01 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e5:b0:a8:aa:0f:00:9f:02:fb:15:a5:a0:af:55:ed:f4:2e:ee:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 28 00:00:00 2023 GMT
Not After : Sep 1 23:59:59 2023 GMT
Subject: serialNumber=771ea3755a525c12cfd1fae3257b1d0529b82e18d11b465bba5b61ec469dd1d9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:8b:a9:cf:89:cc:9b:46:14:a7:95:65:9a:
f0:5e:74:cc:22:d8:af:a1:45:22:07:55:d3:91:b9:
bb:1a:1a:b5:5a:44:03:ed:2b:e4:a5:69:56:67:39:
e9:fb:38:dc:00:30:98:92:8d:b4:67:12:82:d4:42:
47:31:73:a7:3b:b7:20:2c:3e:ef:1c:04:3e:6d:6a:
0b:59:d0:7d:fe:52:fb:78:83:9d:1f:e2:fa:96:84:
3d:b8:19:66:47:db:a8:8b:32:d1:55:d0:88:d2:c2:
b7:cb:55:0e:6a:3c:24:fa:13:d6:4a:73:ca:95:68:
47:d3:0f:95:17:81:78:04:44:95:d6:b6:dc:fb:77:
5a:54:91:b6:81:b8:f7:7d:e3:81:da:27:36:6b:14:
aa:f5:35:5d:2d:df:e4:f6:c7:a5:da:a6:e9:c6:57:
a0:9c:e3:3e:73:36:ae:4c:82:41:da:09:fb:08:84:
85:ec:20:0d:bd:db:0f:93:fb:dc:d9:2e:24:12:14:
30:19:b4:fe:1e:2c:6e:c3:15:c6:30:02:2a:40:e9:
f0:a3:45:a6:fc:63:4c:c8:10:e3:68:37:32:f9:24:
16:07:f0:c8:be:67:fd:1b:53:70:8a:40:94:66:25:
d0:01:d9:29:f9:01:ed:2d:c7:5c:5f:b3:21:75:a8:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7C:37:60:3F:2A:37:05:51:2F:6D:DE:C5:E7:18:5D:4E:5C:A4:99
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/67903fcf-ae43-45be-838a-c9f8310b8758.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b2:5b:ff:1a:16:74:7a:47:94:23:09:8a:b9:21:fe:2e:75:
f1:27:28:48:9e:94:84:1f:f4:dd:89:9b:1f:d3:39:25:88:5e:
f4:0e:47:3b:96:f5:03:6e:cf:3c:0d:3f:d9:78:3f:56:53:b2:
63:f7:7b:21:22:84:60:c0:9d:d0:b7:da:35:4c:c8:33:7c:c7:
68:bb:f4:7d:d0:40:01:cc:26:83:86:c7:4e:f6:f8:94:d3:2a:
20:e7:e1:ed:4e:41:99:f6:50:32:6f:9a:fc:26:b5:db:d7:14:
ef:e7:7b:48:ad:25:4b:bd:71:88:41:81:0f:de:33:99:6d:b7:
97:3d:f5:7c:fa:29:2d:dc:70:59:50:f5:08:cf:5e:d2:e3:46:
20:94:96:e1:0e:06:14:70:2c:f4:f2:81:1f:11:5e:a8:da:ae:
3a:41:53:85:0d:20:0a:55:0d:fe:34:e3:38:78:98:e8:56:08:
6e:b3:b7:20:16:20:16:3f:89:25:d2:f9:68:d3:d2:cf:e1:16:
a0:92:d7:8e:8c:2a:1f:60:8a:38:12:05:d6:96:87:5d:d5:4e:
06:ef:6f:03:df:c9:52:c0:de:f7:54:1b:12:39:c5:dc:5a:68:
6b:06:f4:6d:45:8e:96:99:fd:6e:14:fc:ac:a2:64:42:f3:6e:
c1:41:d9:e8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPOWwqKoPAJ8C+xWloK9V7fQu7qEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzI4MDAwMDAwWhcNMjMwOTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NzFlYTM3NTVhNTI1YzEyY2ZkMWZhZTMyNTdiMWQwNTI5
YjgyZTE4ZDExYjQ2NWJiYTViNjFlYzQ2OWRkMWQ5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/EIupz4nMm0YUp5VlmvBedMwi2K+hRSIHVdORubsaGrVa
RAPtK+SlaVZnOen7ONwAMJiSjbRnEoLUQkcxc6c7tyAsPu8cBD5tagtZ0H3+Uvt4
g50f4vqWhD24GWZH26iLMtFV0IjSwrfLVQ5qPCT6E9ZKc8qVaEfTD5UXgXgERJXW
ttz7d1pUkbaBuPd944HaJzZrFKr1NV0t3+T2x6XapunGV6Cc4z5zNq5MgkHaCfsI
hIXsIA292w+T+9zZLiQSFDAZtP4eLG7DFcYwAipA6fCjRab8Y0zIEONoNzL5JBYH
8Mi+Z/0bU3CKQJRmJdAB2Sn5Ae0tx1xfsyF1qD1hAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZXw3YD8qNwVRL23execYXU5cpJkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzY3OTAzZmNmLWFlNDMtNDViZS04MzhhLWM5ZjgzMTBiODc1OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJyyW/8aFnR6R5QjCYq5If4udfEn
KEielIQf9N2Jmx/TOSWIXvQORzuW9QNuzzwNP9l4P1ZTsmP3eyEihGDAndC32jVM
yDN8x2i79H3QQAHMJoOGx072+JTTKiDn4e1OQZn2UDJvmvwmtdvXFO/ne0itJUu9
cYhBgQ/eM5ltt5c99Xz6KS3ccFlQ9QjPXtLjRiCUluEOBhRwLPTygR8RXqjarjpB
U4UNIApVDf404zh4mOhWCG6ztyAWIBY/iSXS+WjT0s/hFqCS146MKh9gijgSBdaW
h13VTgbvbwPfyVLA3vdUGxI5xdxaaGsG9G1FjpaZ/W4U/KyiZELzbsFB2eg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:50 2024 by rpki-client on console-ams.rpki-client.org