Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7994153f-ae84-4b88-9c48-66810966eff2.roa
File: 7994153f-ae84-4b88-9c48-66810966eff2.roa (raw, json)
Hash identifier: Hcs0pGPQL9hzFFZ4YwXMZ/3a0UPe3wSDhiJjsom5ikI=
Subject key identifier: 24:B8:45:07:5E:66:3F:7C:1C:91:3A:23:9F:12:13:53:77:4E:E9:04
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4061D498D866A55F0D980E6B69D9750F3C323B3D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7994153f-ae84-4b88-9c48-66810966eff2.roa
Signing time: Sun 03 Sep 2023 00:00:00 +0000
ROA not before: Sun 03 Sep 2023 00:00:00 +0000
ROA not after: Sun 08 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:61:d4:98:d8:66:a5:5f:0d:98:0e:6b:69:d9:75:0f:3c:32:3b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 3 00:00:00 2023 GMT
Not After : Oct 8 23:59:59 2023 GMT
Subject: serialNumber=f9f723e2e6dbac24b8b08adfce328030cbbed937040b2ef1d6f6ff346723eaa5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b7:2a:54:74:be:24:36:eb:31:da:86:74:a5:
2b:90:42:68:af:eb:31:2a:8c:49:ab:80:16:08:e2:
43:48:01:5b:ed:a8:4f:2d:08:4b:62:a2:2f:91:3c:
24:fa:f0:84:f0:61:a1:62:a7:e5:d8:a6:3a:ee:63:
f6:f0:15:92:6b:ba:1e:bb:ae:14:5f:36:7b:47:78:
ed:bc:c2:a6:0d:fc:24:5e:46:60:bc:80:4c:4b:9d:
38:d2:90:4d:37:ba:f1:ca:cc:c8:83:6a:37:42:c8:
94:6d:b8:71:f8:ab:4b:1d:c4:21:3e:9f:8a:e6:35:
86:bb:74:11:48:21:7c:5c:19:2c:50:aa:ba:9f:de:
77:91:56:76:34:5b:ea:f9:e4:07:37:10:33:65:10:
0a:6e:33:65:c3:9b:89:99:02:f3:64:79:3b:0d:fa:
54:a9:45:26:1c:52:40:47:e7:a3:a5:b0:a3:b6:d2:
a2:8c:48:4b:5f:a5:3a:ba:d5:e4:cb:cc:51:fe:4c:
61:e9:9d:15:c5:24:98:df:da:6b:ee:a8:ac:ce:25:
c3:5c:e0:4c:f9:61:f3:90:ff:8c:eb:25:f4:31:34:
b6:63:62:55:6f:c3:87:d4:4c:bb:5f:d0:34:00:d6:
89:e6:f7:9e:6f:35:4f:12:d8:42:d3:c0:17:d3:07:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B8:45:07:5E:66:3F:7C:1C:91:3A:23:9F:12:13:53:77:4E:E9:04
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7994153f-ae84-4b88-9c48-66810966eff2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
81:41:0e:ea:22:6f:16:52:c1:67:26:a2:8a:7f:15:19:d4:7d:
8b:56:d5:52:98:36:f7:bd:3e:7a:a0:60:26:83:39:4b:33:e6:
a7:f0:33:8e:18:79:5b:16:b9:8b:14:4b:ab:a6:9b:a9:76:8a:
26:e1:42:fa:32:28:19:0c:42:8c:87:6a:74:45:d2:7d:e4:ba:
6e:b7:42:bd:a9:56:14:44:2b:b7:35:31:ad:96:c9:57:96:dc:
9b:db:e2:62:ac:c4:4a:a0:4c:26:c3:3f:f5:83:29:86:a4:3d:
cf:96:36:ee:3a:3c:97:48:44:5f:34:b8:2c:0e:eb:2b:fb:a4:
44:fa:a8:b3:c4:2d:54:78:33:ed:07:21:8b:b0:02:5b:07:95:
49:bf:06:4e:0d:70:e3:c3:5c:3d:d2:10:02:a3:0b:fd:11:7b:
2b:65:c6:be:4d:f9:d5:2f:a1:bf:77:d5:73:f5:84:7f:ab:12:
36:32:2f:8f:da:0f:97:d4:22:89:e6:8b:b3:16:18:49:3c:54:
2d:ea:c4:d8:b3:4f:11:4d:6a:e4:59:67:ee:c9:2a:8e:36:cd:
11:41:7f:f7:34:23:9b:84:6d:55:be:f7:d3:99:8d:40:94:86:
47:d4:a0:7c:e7:77:ce:ca:3f:ba:f0:a8:4d:c8:00:5a:14:26:
c9:33:f9:07
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQGHUmNhmpV8NmA5radl1DzwyOz0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTAzMDAwMDAwWhcNMjMxMDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmOWY3MjNlMmU2ZGJhYzI0YjhiMDhhZGZjZTMyODAzMGNi
YmVkOTM3MDQwYjJlZjFkNmY2ZmYzNDY3MjNlYWE1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWtypUdL4kNusx2oZ0pSuQQmiv6zEqjEmrgBYI4kNIAVvt
qE8tCEtioi+RPCT68ITwYaFip+XYpjruY/bwFZJruh67rhRfNntHeO28wqYN/CRe
RmC8gExLnTjSkE03uvHKzMiDajdCyJRtuHH4q0sdxCE+n4rmNYa7dBFIIXxcGSxQ
qrqf3neRVnY0W+r55Ac3EDNlEApuM2XDm4mZAvNkeTsN+lSpRSYcUkBH56OlsKO2
0qKMSEtfpTq61eTLzFH+TGHpnRXFJJjf2mvuqKzOJcNc4Ez5YfOQ/4zrJfQxNLZj
YlVvw4fUTLtf0DQA1onm955vNU8S2ELTwBfTBztbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJLhFB15mP3wckTojnxITU3dO6QQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzc5OTQxNTNmLWFlODQtNGI4OC05YzQ4LTY2ODEwOTY2ZWZmMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIFBDuoibxZSwWcmoop/FRnUfYtW
1VKYNve9PnqgYCaDOUsz5qfwM44YeVsWuYsUS6umm6l2iibhQvoyKBkMQoyHanRF
0n3kum63Qr2pVhREK7c1Ma2WyVeW3Jvb4mKsxEqgTCbDP/WDKYakPc+WNu46PJdI
RF80uCwO6yv7pET6qLPELVR4M+0HIYuwAlsHlUm/Bk4NcOPDXD3SEAKjC/0Reytl
xr5N+dUvob931XP1hH+rEjYyL4/aD5fUIonmi7MWGEk8VC3qxNizTxFNauRZZ+7J
Ko42zRFBf/c0I5uEbVW+99OZjUCUhkfUoHznd87KP7rwqE3IAFoUJskz+Qc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:32 2024 by rpki-client on console-fra.rpki-client.org