Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/72dc6e5f-c9e6-4652-b42b-78d3eb6bd1a0.roa
File: 72dc6e5f-c9e6-4652-b42b-78d3eb6bd1a0.roa (raw, json)
Hash identifier: l/GE7cWKPRPBBWcbtiLBcgUE6x4ss8N1Sk21RUGRWO8=
Subject key identifier: C4:77:A3:DC:01:99:B8:C7:FD:6C:9A:A8:54:B2:A0:EB:84:91:64:50
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 114A8A7B5BAC7E9328F53CE0F9E6A4F5ADE4900E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/72dc6e5f-c9e6-4652-b42b-78d3eb6bd1a0.roa
Signing time: Tue 08 Aug 2023 00:00:00 +0000
ROA not before: Tue 08 Aug 2023 00:00:00 +0000
ROA not after: Tue 12 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:4a:8a:7b:5b:ac:7e:93:28:f5:3c:e0:f9:e6:a4:f5:ad:e4:90:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 8 00:00:00 2023 GMT
Not After : Sep 12 23:59:59 2023 GMT
Subject: serialNumber=1069eb7431eead3bf6ef0cf8c76acd7646fc419bc426bb1444152256450377e9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:67:4a:b5:2e:96:a5:38:a5:e4:c6:21:fb:2c:
ec:ff:cd:4c:05:e0:7f:e9:c5:7d:da:52:dd:b8:f8:
48:76:69:c7:88:09:3b:a3:15:03:82:ce:e5:8c:c7:
c7:1e:b9:39:a8:e1:39:ee:e3:f8:ab:d3:ac:16:47:
5e:6b:97:b1:46:07:0b:e9:6f:24:cb:14:94:c3:84:
92:68:62:30:58:ea:7d:4d:6f:1d:a1:a7:8e:12:21:
44:35:dc:4e:47:c6:f4:f5:30:a2:f0:c0:c4:fd:39:
a0:51:d6:da:09:fa:36:79:0c:fc:b8:b7:bf:7a:5b:
e9:e0:c7:64:bf:f1:4c:ff:97:7e:dd:f6:c3:0c:d0:
af:b6:78:0a:42:49:f4:a9:9b:65:91:4d:55:91:27:
a0:e7:87:10:45:b4:3d:9f:c7:6e:9a:e6:e6:52:52:
60:07:4d:8f:27:88:85:91:c7:14:b0:41:fe:b2:70:
83:e5:70:81:39:31:6e:2c:f1:17:af:97:7a:d7:c9:
d4:01:2d:db:4b:35:e0:36:cb:c9:ec:a1:48:e5:d0:
aa:c5:81:f0:de:1b:c4:19:a0:f9:6b:4a:56:6a:2b:
e4:e4:d2:f8:13:f8:bb:60:e4:54:5e:0d:0a:46:77:
d9:75:53:0c:bc:f8:bd:f8:30:e7:09:0a:03:ea:8f:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:77:A3:DC:01:99:B8:C7:FD:6C:9A:A8:54:B2:A0:EB:84:91:64:50
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/72dc6e5f-c9e6-4652-b42b-78d3eb6bd1a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:bb:bb:61:e7:6b:a3:b1:84:c1:49:99:3c:2e:df:b6:58:a8:
52:94:ac:34:db:0b:93:22:4a:89:18:f2:70:3c:d0:21:47:b8:
55:05:2c:3b:60:2f:bc:1f:41:6f:39:2e:48:0c:43:74:d5:9c:
83:dd:9d:45:7b:2c:6f:fd:1a:96:a2:c1:b9:50:3f:78:c6:d3:
32:93:3c:84:20:3d:67:44:5c:9b:5d:f8:ea:77:d3:97:a4:5e:
60:59:90:ad:56:98:5e:d4:10:5b:6e:7a:10:c8:5d:d7:ca:c2:
87:4f:75:96:40:69:7e:32:01:cc:81:c9:7d:a9:f9:34:bc:e4:
18:52:84:b5:82:9d:d7:d5:5b:0b:23:2b:9b:5b:56:a2:cc:71:
6a:ff:0f:61:99:df:06:ff:94:7a:fc:51:29:d7:2d:f2:f7:4a:
1d:21:e8:38:15:7e:9b:55:e3:3e:76:fa:db:08:d6:d4:f9:43:
ab:f6:3b:bc:72:8e:d7:bf:e4:0d:1a:d7:25:df:56:43:30:f0:
73:be:e0:7c:ca:3d:68:a9:e2:0a:0b:44:11:84:fc:05:99:99:
d3:f3:ba:84:b8:72:1d:28:d2:94:01:2f:bf:e1:b0:bd:c0:89:
02:8e:08:45:2b:1a:18:eb:f1:dd:60:94:a1:88:ef:4d:82:5b:
d5:bf:7c:44
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEUqKe1usfpMo9Tzg+eak9a3kkA4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODA4MDAwMDAwWhcNMjMwOTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMDY5ZWI3NDMxZWVhZDNiZjZlZjBjZjhjNzZhY2Q3NjQ2
ZmM0MTliYzQyNmJiMTQ0NDE1MjI1NjQ1MDM3N2U5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD2Z0q1LpalOKXkxiH7LOz/zUwF4H/pxX3aUt24+Eh2aceI
CTujFQOCzuWMx8ceuTmo4Tnu4/ir06wWR15rl7FGBwvpbyTLFJTDhJJoYjBY6n1N
bx2hp44SIUQ13E5HxvT1MKLwwMT9OaBR1toJ+jZ5DPy4t796W+ngx2S/8Uz/l37d
9sMM0K+2eApCSfSpm2WRTVWRJ6DnhxBFtD2fx26a5uZSUmAHTY8niIWRxxSwQf6y
cIPlcIE5MW4s8Revl3rXydQBLdtLNeA2y8nsoUjl0KrFgfDeG8QZoPlrSlZqK+Tk
0vgT+Ltg5FReDQpGd9l1Uwy8+L34MOcJCgPqjyJlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUxHej3AGZuMf9bJqoVLKg64SRZFAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzcyZGM2ZTVmLWM5ZTYtNDY1Mi1iNDJiLTc4ZDNlYjZiZDFhMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABq7u2Hna6OxhMFJmTwu37ZYqFKU
rDTbC5MiSokY8nA80CFHuFUFLDtgL7wfQW85LkgMQ3TVnIPdnUV7LG/9GpaiwblQ
P3jG0zKTPIQgPWdEXJtd+Op305ekXmBZkK1WmF7UEFtuehDIXdfKwodPdZZAaX4y
AcyByX2p+TS85BhShLWCndfVWwsjK5tbVqLMcWr/D2GZ3wb/lHr8USnXLfL3Sh0h
6DgVfptV4z52+tsI1tT5Q6v2O7xyjte/5A0a1yXfVkMw8HO+4HzKPWip4goLRBGE
/AWZmdPzuoS4ch0o0pQBL7/hsL3AiQKOCEUrGhjr8d1glKGI702CW9W/fEQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:31 2024 by rpki-client on console-fra.rpki-client.org