Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9120660a-d6f0-4e06-8431-a561fd67de30.roa
File: 9120660a-d6f0-4e06-8431-a561fd67de30.roa (raw, json)
Hash identifier: XpSiaPDh3XfEMVsnazG3eSphVxLH/hTGb9aoC87zwIk=
Subject key identifier: B2:21:07:25:21:BE:CB:F3:9C:33:3C:72:0E:2F:00:48:65:E2:46:EE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 76DEF27EF9571139C598BFCBD874EADD91BA0BD1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9120660a-d6f0-4e06-8431-a561fd67de30.roa
Signing time: Wed 07 Feb 2024 00:00:00 +0000
ROA not before: Wed 07 Feb 2024 00:00:00 +0000
ROA not after: Wed 13 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:de:f2:7e:f9:57:11:39:c5:98:bf:cb:d8:74:ea:dd:91:ba:0b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 7 00:00:00 2024 GMT
Not After : Mar 13 23:59:59 2024 GMT
Subject: serialNumber=2e582f45e6cdce519d165685ad5a063bd0179487c519e05c3e7e8be502876c31, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:6d:a2:ab:92:2c:f3:b8:2c:e0:0d:4d:6b:
46:e1:5b:7d:fd:e8:6c:6d:eb:f5:ad:43:07:1c:1f:
4b:5f:e8:b9:fe:93:c2:be:2d:56:58:8e:f8:38:f1:
ca:09:cd:48:7c:bf:31:46:c4:e0:d1:69:c2:23:f4:
33:a4:c4:30:c6:59:4c:b0:ae:97:3f:83:dd:c0:2e:
39:1c:80:09:82:92:4f:11:70:02:c9:e9:ac:0b:cf:
7c:c7:97:cb:7c:94:41:7e:33:53:f1:52:d7:06:c2:
bf:96:33:3d:f1:bd:32:bd:9d:71:24:66:2a:82:82:
77:24:b9:1e:04:e5:a2:14:ba:e0:06:bd:2d:9f:5c:
f2:5c:df:27:8a:5b:4d:67:20:27:78:cf:df:2f:c5:
ec:8b:00:03:7b:78:d0:bf:60:39:d1:31:1f:ec:d7:
1a:13:6b:7e:e7:0c:64:7b:fb:19:19:9f:1a:3e:a2:
de:26:0e:58:66:07:18:22:e0:7f:2d:55:4c:2b:de:
12:e3:68:a3:d5:f4:a9:90:64:bf:d6:16:34:f5:77:
13:74:a5:61:eb:c1:41:54:f4:a7:ca:cf:f9:f7:af:
2f:45:99:9d:1e:16:6b:84:5d:1a:19:b2:66:da:d2:
8d:05:9c:5d:27:a0:9f:4b:05:f9:1e:dc:7f:3d:b6:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:07:25:21:BE:CB:F3:9C:33:3C:72:0E:2F:00:48:65:E2:46:EE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9120660a-d6f0-4e06-8431-a561fd67de30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:9f:23:df:1d:d1:ba:76:ee:c3:b9:12:18:ae:3a:4a:28:99:
c1:00:8b:57:0f:f7:94:71:22:6a:6f:14:93:55:b4:cf:a9:38:
7d:06:08:62:7d:0c:31:2f:52:f2:29:ce:06:fa:7b:41:89:03:
c4:7d:6e:ca:52:4b:11:8d:f6:3e:36:e8:de:39:27:0f:cd:19:
59:78:03:28:ae:61:b4:f4:9f:56:d7:6e:f9:cd:80:10:f0:b0:
0b:c5:a8:f1:68:7f:da:cf:d6:76:0e:1a:5a:44:4d:69:03:91:
c4:10:cb:37:72:1a:0d:ba:cd:14:51:16:a3:da:ff:86:33:fb:
6e:58:b1:21:8e:ae:79:ed:63:1b:ec:0d:b3:92:77:e6:b9:82:
70:b4:3b:71:60:b7:9d:51:1b:23:d2:ea:1f:77:62:d8:23:84:
9b:e4:c3:7f:1c:41:49:2f:6f:83:e8:5f:53:41:f8:80:ea:e4:
58:79:55:c1:97:02:97:df:66:51:e2:94:54:20:7c:90:db:13:
c6:85:40:02:07:c8:fe:84:e8:b9:99:a6:20:4f:e5:7a:0a:97:
86:a5:94:f9:b2:d5:21:61:78:62:a5:80:3d:b9:fd:c1:95:56:
92:01:94:14:69:20:0a:1b:03:57:c2:85:dc:6a:c7:f6:de:92:
47:08:40:cc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdt7yfvlXETnFmL/L2HTq3ZG6C9EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMjA3MDAwMDAwWhcNMjQwMzEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyZTU4MmY0NWU2Y2RjZTUxOWQxNjU2ODVhZDVhMDYzYmQw
MTc5NDg3YzUxOWUwNWMzZTdlOGJlNTAyODc2YzMxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAbG2iq5Is87gs4A1Na0bhW3396Gxt6/WtQwccH0tf6Ln+
k8K+LVZYjvg48coJzUh8vzFGxODRacIj9DOkxDDGWUywrpc/g93ALjkcgAmCkk8R
cALJ6awLz3zHl8t8lEF+M1PxUtcGwr+WMz3xvTK9nXEkZiqCgnckuR4E5aIUuuAG
vS2fXPJc3yeKW01nICd4z98vxeyLAAN7eNC/YDnRMR/s1xoTa37nDGR7+xkZnxo+
ot4mDlhmBxgi4H8tVUwr3hLjaKPV9KmQZL/WFjT1dxN0pWHrwUFU9KfKz/n3ry9F
mZ0eFmuEXRoZsmba0o0FnF0noJ9LBfke3H89tiZPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUsiEHJSG+y/OcMzxyDi8ASGXiRu4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzkxMjA2NjBhLWQ2ZjAtNGUwNi04NDMxLWE1NjFmZDY3ZGUzMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEyfI98d0bp27sO5EhiuOkoomcEA
i1cP95RxImpvFJNVtM+pOH0GCGJ9DDEvUvIpzgb6e0GJA8R9bspSSxGN9j426N45
Jw/NGVl4AyiuYbT0n1bXbvnNgBDwsAvFqPFof9rP1nYOGlpETWkDkcQQyzdyGg26
zRRRFqPa/4Yz+25YsSGOrnntYxvsDbOSd+a5gnC0O3Fgt51RGyPS6h93YtgjhJvk
w38cQUkvb4PoX1NB+IDq5Fh5VcGXApffZlHilFQgfJDbE8aFQAIHyP6E6LmZpiBP
5XoKl4allPmy1SFheGKlgD25/cGVVpIBlBRpIAobA1fChdxqx/bekkcIQMw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:00 2024 by rpki-client on console-ams.rpki-client.org