Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6dd770d5-fec3-426e-b57c-ebb13cda1cd5.roa
File: 6dd770d5-fec3-426e-b57c-ebb13cda1cd5.roa (raw, json)
Hash identifier: 20K93eUednJ+vWBINozjjBH7KJcb0SaFjXavdrBZ+mo=
Subject key identifier: 31:4D:F7:EC:9B:7C:E3:03:E5:AF:84:14:99:BE:57:03:2F:F8:C8:7E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5B97C07AC99572980A02FD421E6804D49CC2E442
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6dd770d5-fec3-426e-b57c-ebb13cda1cd5.roa
Signing time: Sun 29 Oct 2023 00:00:00 +0000
ROA not before: Sun 29 Oct 2023 00:00:00 +0000
ROA not after: Sun 03 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:97:c0:7a:c9:95:72:98:0a:02:fd:42:1e:68:04:d4:9c:c2:e4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 29 00:00:00 2023 GMT
Not After : Dec 3 23:59:59 2023 GMT
Subject: serialNumber=e5c3622b59ca597bb124db1d806c64ea2c5401c8ef4d1c3d8e4a4977e95799ea, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:88:20:81:0d:88:a2:e3:37:f6:d7:41:3d:
ca:bf:cd:47:82:89:ed:4d:3a:ef:e5:63:d2:d7:21:
9d:cc:75:f5:71:a9:35:a1:ca:2c:c5:08:f3:b8:08:
82:9a:7c:5b:e5:76:4a:30:6a:a6:a5:53:94:7d:fa:
62:dd:88:8b:e9:a0:36:82:40:15:b3:96:0e:d2:0b:
68:fd:cb:b3:d6:65:10:76:e8:e8:ba:59:1c:b8:61:
17:58:53:7f:0e:59:03:eb:48:4e:69:eb:45:a7:86:
e3:02:4d:3a:9e:82:fd:90:da:14:56:62:fd:c7:77:
00:84:c6:c5:96:7c:5a:8f:42:2f:ba:e6:7d:2a:80:
97:e7:8e:c5:e6:f7:15:2e:36:0f:5f:6f:4a:20:18:
a1:ea:8c:cd:fe:82:83:c3:b5:bb:b5:35:a2:9a:70:
6c:35:47:8d:a4:4b:7f:fb:c0:b4:16:66:83:83:ac:
18:91:50:c0:a5:74:b6:bd:77:1a:3c:a0:6e:69:60:
14:98:fd:4a:54:eb:d9:b3:45:57:6f:ce:77:ba:ca:
54:88:7c:3e:d7:ca:00:6d:22:14:bd:13:18:90:90:
b1:80:d8:ce:eb:ce:56:aa:3e:0f:a6:14:68:95:3a:
a5:5b:63:83:e2:ea:34:73:15:ef:33:7b:6f:01:06:
d0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4D:F7:EC:9B:7C:E3:03:E5:AF:84:14:99:BE:57:03:2F:F8:C8:7E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6dd770d5-fec3-426e-b57c-ebb13cda1cd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:72:36:fc:95:ab:f3:5c:4e:ae:cc:da:81:9b:fb:45:f7:aa:
a6:c9:4c:ae:7b:dd:9c:29:ae:e0:1f:48:55:27:65:45:02:c6:
4d:54:4d:13:96:eb:f4:30:ec:38:a6:7e:99:11:f5:a1:a7:8b:
bf:2b:6d:16:9e:02:22:8b:c8:eb:c1:c9:29:e9:bf:bd:81:ab:
ce:b4:86:ff:7e:c7:b8:89:80:f1:f4:97:92:fd:43:71:75:20:
19:6e:fd:7a:45:0a:57:d7:e0:b1:08:96:47:09:4b:35:ef:d6:
fd:9f:2b:fa:4e:0b:eb:2a:24:dc:a4:77:e9:d3:cf:fb:a1:2e:
15:07:c4:b9:53:58:bd:11:60:98:1d:04:68:8e:d3:c8:5e:f8:
93:06:cd:2c:04:09:dd:fb:7f:3c:88:ea:70:64:f1:7c:10:df:
49:53:96:a7:b8:dd:31:b6:dd:37:9e:b1:7b:3a:e8:f8:75:b9:
fc:c9:9b:40:06:6d:e4:fd:b6:fe:3c:30:11:87:4a:a0:d3:49:
41:e4:dd:99:39:26:4c:3a:6e:07:44:eb:be:43:4c:b6:89:18:
44:9e:02:a5:a4:47:45:ec:9b:c3:c4:e9:c6:31:01:f9:71:66:
d0:42:6d:62:52:80:76:3b:6e:fb:06:5c:e8:3b:2c:d2:17:c5:
a6:54:4e:2f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUW5fAesmVcpgKAv1CHmgE1JzC5EIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDI5MDAwMDAwWhcNMjMxMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNWMzNjIyYjU5Y2E1OTdiYjEyNGRiMWQ4MDZjNjRlYTJj
NTQwMWM4ZWY0ZDFjM2Q4ZTRhNDk3N2U5NTc5OWVhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6iIgggQ2IouM39tdBPcq/zUeCie1NOu/lY9LXIZ3MdfVx
qTWhyizFCPO4CIKafFvldkowaqalU5R9+mLdiIvpoDaCQBWzlg7SC2j9y7PWZRB2
6Oi6WRy4YRdYU38OWQPrSE5p60WnhuMCTTqegv2Q2hRWYv3HdwCExsWWfFqPQi+6
5n0qgJfnjsXm9xUuNg9fb0ogGKHqjM3+goPDtbu1NaKacGw1R42kS3/7wLQWZoOD
rBiRUMCldLa9dxo8oG5pYBSY/UpU69mzRVdvzne6ylSIfD7XygBtIhS9ExiQkLGA
2M7rzlaqPg+mFGiVOqVbY4Pi6jRzFe8ze28BBtB5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUMU337Jt84wPlr4QUmb5XAy/4yH4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzZkZDc3MGQ1LWZlYzMtNDI2ZS1iNTdjLWViYjEzY2RhMWNkNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACtyNvyVq/NcTq7M2oGb+0X3qqbJ
TK573ZwpruAfSFUnZUUCxk1UTROW6/Qw7DimfpkR9aGni78rbRaeAiKLyOvBySnp
v72Bq860hv9+x7iJgPH0l5L9Q3F1IBlu/XpFClfX4LEIlkcJSzXv1v2fK/pOC+sq
JNykd+nTz/uhLhUHxLlTWL0RYJgdBGiO08he+JMGzSwECd37fzyI6nBk8XwQ30lT
lqe43TG23TeesXs66Ph1ufzJm0AGbeT9tv48MBGHSqDTSUHk3Zk5Jkw6bgdE675D
TLaJGESeAqWkR0Xsm8PE6cYxAflxZtBCbWJSgHY7bvsGXOg7LNIXxaZUTi8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:51 2024 by rpki-client on console-ams.rpki-client.org