Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8bd67534-d6c5-4147-bd1c-7d657201996d.roa
File: 8bd67534-d6c5-4147-bd1c-7d657201996d.roa (raw, json)
Hash identifier: J5zBb0omcFthGmVLaD3oeIA1B8c0KE2FBepOIe8fv8I=
Subject key identifier: 16:B5:89:A6:B7:81:DF:B7:D4:5F:AB:52:7D:CD:35:C8:81:05:36:1E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 08AC75FA11265FC254CB12BA92DD3FB4CCCBA7C5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8bd67534-d6c5-4147-bd1c-7d657201996d.roa
Signing time: Mon 07 Aug 2023 00:00:00 +0000
ROA not before: Mon 07 Aug 2023 00:00:00 +0000
ROA not after: Mon 11 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ac:75:fa:11:26:5f:c2:54:cb:12:ba:92:dd:3f:b4:cc:cb:a7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 7 00:00:00 2023 GMT
Not After : Sep 11 23:59:59 2023 GMT
Subject: serialNumber=f38673a750fe94ea0e4921ab05d0d7e11e51b63169340053165259d1bad247f2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:32:8d:60:d6:09:b6:5c:c5:c9:d3:2d:91:
0b:20:d8:fa:0c:4f:b2:e1:a4:50:aa:cf:bb:f8:11:
60:0b:1a:4b:e5:97:e8:2f:1d:14:91:ab:46:6e:68:
ec:53:ea:f3:8b:0c:ed:d5:70:16:32:87:83:ed:f9:
eb:d4:cb:8b:2d:e7:1d:32:6d:93:53:a5:a7:8b:dd:
e0:3c:7d:f9:68:30:1b:6f:24:69:db:55:23:f8:b5:
ce:1f:6d:ac:24:1e:c1:b0:39:e6:8a:70:62:21:3a:
8a:8d:d4:59:3d:58:dd:8d:62:72:18:e0:31:41:00:
c1:2e:9d:c9:9b:13:76:80:c1:d6:69:9b:c5:da:41:
5f:db:79:ba:aa:08:be:cf:20:72:b0:13:c7:4c:a6:
75:91:ae:14:3a:e3:66:86:01:86:55:a2:3d:39:e0:
66:19:22:72:65:99:3c:e4:6c:b0:1d:fd:fb:4c:23:
84:59:04:02:76:b0:5a:96:93:96:30:7e:93:5e:40:
4a:25:54:53:16:ba:6d:63:c1:f1:f3:8a:d1:df:1a:
45:14:04:2c:66:7f:7d:a5:9b:57:07:71:3a:fe:bc:
08:da:84:61:f2:e5:d2:82:af:58:ed:59:6a:d8:58:
68:7d:e3:29:00:86:f0:84:81:82:02:2b:e1:51:38:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B5:89:A6:B7:81:DF:B7:D4:5F:AB:52:7D:CD:35:C8:81:05:36:1E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8bd67534-d6c5-4147-bd1c-7d657201996d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:cf:14:5a:5b:a5:c5:63:da:ef:86:54:ba:d3:ec:b0:be:36:
5c:01:33:9a:ed:54:74:e6:73:58:33:4b:ee:5b:0f:fd:9e:7e:
e1:9d:a4:22:3c:2f:a0:9e:a8:f3:1f:78:57:0b:55:dc:fa:ce:
1a:dc:50:9d:3c:b1:f5:68:54:58:81:d7:29:d6:bd:b6:8e:6b:
63:a6:c8:96:ca:6b:20:f1:50:32:58:02:6d:67:c2:6c:11:41:
bd:ce:85:60:9a:74:3b:61:f6:81:a2:09:e4:b2:22:55:c4:c0:
49:18:17:d1:47:e5:fd:93:21:5f:c0:2f:9b:49:5f:c7:36:39:
85:0b:aa:73:5a:da:ab:57:ff:1e:29:10:e8:da:7d:a4:e3:1f:
d6:6c:fc:5e:49:f4:17:8c:d9:54:4d:cf:af:59:d3:7a:bd:3e:
73:a3:08:78:99:e7:9d:66:60:18:1d:33:1b:e0:f3:32:3b:6d:
2b:26:c1:2f:68:77:89:f9:44:a1:ea:d0:90:e1:9e:4e:75:f0:
56:1a:24:a4:1f:78:8f:f5:3e:aa:66:13:da:07:df:47:84:71:
61:52:5a:37:c4:17:af:7b:44:c2:c6:5f:dd:07:8b:98:38:c0:
a2:e0:20:ee:68:c4:60:0c:82:86:37:a4:de:07:1f:61:51:72:
0b:72:6c:f0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCKx1+hEmX8JUyxK6kt0/tMzLp8UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODA3MDAwMDAwWhcNMjMwOTExMjM1OTU5
WjB6MUkwRwYDVQQFE0BmMzg2NzNhNzUwZmU5NGVhMGU0OTIxYWIwNWQwZDdlMTFl
NTFiNjMxNjkzNDAwNTMxNjUyNTlkMWJhZDI0N2YyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQtjKNYNYJtlzFydMtkQsg2PoMT7LhpFCqz7v4EWALGkvl
l+gvHRSRq0ZuaOxT6vOLDO3VcBYyh4Pt+evUy4st5x0ybZNTpaeL3eA8ffloMBtv
JGnbVSP4tc4fbawkHsGwOeaKcGIhOoqN1Fk9WN2NYnIY4DFBAMEuncmbE3aAwdZp
m8XaQV/bebqqCL7PIHKwE8dMpnWRrhQ642aGAYZVoj054GYZInJlmTzkbLAd/ftM
I4RZBAJ2sFqWk5YwfpNeQEolVFMWum1jwfHzitHfGkUUBCxmf32lm1cHcTr+vAja
hGHy5dKCr1jtWWrYWGh94ykAhvCEgYICK+FROJ4bAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUFrWJpreB37fUX6tSfc01yIEFNh4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzhiZDY3NTM0LWQ2YzUtNDE0Ny1iZDFjLTdkNjU3MjAxOTk2ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAH7PFFpbpcVj2u+GVLrT7LC+NlwB
M5rtVHTmc1gzS+5bD/2efuGdpCI8L6CeqPMfeFcLVdz6zhrcUJ08sfVoVFiB1ynW
vbaOa2OmyJbKayDxUDJYAm1nwmwRQb3OhWCadDth9oGiCeSyIlXEwEkYF9FH5f2T
IV/AL5tJX8c2OYULqnNa2qtX/x4pEOjafaTjH9Zs/F5J9BeM2VRNz69Z03q9PnOj
CHiZ551mYBgdMxvg8zI7bSsmwS9od4n5RKHq0JDhnk518FYaJKQfeI/1PqpmE9oH
30eEcWFSWjfEF697RMLGX90Hi5g4wKLgIO5oxGAMgoY3pN4HH2FRcgtybPA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-ams.rpki-client.org