Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9747af30-5ff7-4957-8607-3102a73aea2f.roa
File: 9747af30-5ff7-4957-8607-3102a73aea2f.roa (raw, json)
Hash identifier: uws+afva1nVG03tXeWIzg+QaYguinlvK3Drru7e+Vy4=
Subject key identifier: 92:41:B1:89:8D:98:5C:A6:A6:F8:87:08:8E:74:66:D2:A4:81:73:35
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 50E7F67392004FD957302B78F4D2FEA04A45BE3E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9747af30-5ff7-4957-8607-3102a73aea2f.roa
Signing time: Sun 05 Nov 2023 00:00:00 +0000
ROA not before: Sun 05 Nov 2023 00:00:00 +0000
ROA not after: Sun 10 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e7:f6:73:92:00:4f:d9:57:30:2b:78:f4:d2:fe:a0:4a:45:be:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 5 00:00:00 2023 GMT
Not After : Dec 10 23:59:59 2023 GMT
Subject: serialNumber=2680c5ed825f74b6ff944edac245bd6d0eb49c221d8cddff983ff26710b1f0c2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f3:cf:95:34:e3:12:9f:48:ea:b1:76:1e:8a:
b4:b4:ac:bf:62:05:02:73:50:87:3d:8a:09:ee:30:
8a:7f:ba:92:06:c9:dd:c4:6a:84:12:a0:18:57:39:
ac:67:8a:d2:23:a8:9b:27:cc:43:87:ca:54:4d:89:
69:7c:5d:a7:58:04:ed:c3:89:8d:80:1d:18:ee:7d:
8d:07:a8:28:a4:1e:bf:b5:25:13:9a:c8:65:19:dd:
df:ee:c7:58:5d:c5:38:ef:e1:b3:40:9e:35:2d:2c:
18:b2:b8:d1:c6:42:de:04:d6:fe:7f:f2:e2:02:f3:
83:32:49:58:87:95:0f:9f:3e:d2:b1:4d:f0:91:f2:
50:09:e7:23:c9:92:ae:d5:88:cd:33:f6:fb:ce:ac:
ec:ad:3a:dd:a9:7a:7b:bc:d0:5b:b9:f6:76:70:f8:
af:4b:e4:e0:a2:6a:92:ed:c0:1a:cd:7c:6f:28:54:
f7:ea:d9:6e:b9:08:70:87:49:a9:fe:40:4d:aa:43:
e1:6e:01:c6:78:b9:b2:fb:04:f7:db:48:21:87:7c:
3a:e1:d7:15:50:1a:65:bc:4b:8a:14:d7:b2:3a:b2:
81:43:bd:4b:41:b2:59:07:39:e2:65:db:31:d0:a9:
e8:95:27:19:76:25:54:11:32:7e:5f:c1:23:32:34:
1b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:41:B1:89:8D:98:5C:A6:A6:F8:87:08:8E:74:66:D2:A4:81:73:35
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9747af30-5ff7-4957-8607-3102a73aea2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:77:74:ec:e5:11:0f:ed:93:82:16:74:89:b6:86:cc:ed:75:
0a:70:08:c8:97:97:f9:29:67:09:e7:e8:40:48:9d:07:6e:52:
17:58:ff:62:08:2e:1a:85:1a:68:cb:c2:51:dc:46:ca:42:bd:
88:8c:0d:e5:11:56:10:26:45:3d:b8:82:0c:e0:f7:61:fb:37:
7d:c4:9b:d2:d8:9b:58:59:09:1f:cc:7b:f4:f3:ee:d2:87:38:
30:43:2c:31:07:a3:04:d3:7c:a2:3e:91:97:4b:77:4e:89:13:
0b:0c:55:8f:2c:f0:e2:d0:55:4c:ed:73:b1:81:6f:b4:fa:b3:
2a:44:ad:f4:97:48:d0:37:d4:b0:dc:7e:5a:0a:af:22:81:e4:
1e:69:6f:ae:f9:4b:83:f2:d9:9d:03:85:b0:bb:55:22:3d:55:
1e:3d:b6:2a:bb:d6:e6:b0:71:f0:0a:e8:ea:fe:b3:fc:c5:d1:
15:f2:c5:c5:57:f6:1c:07:5e:57:87:03:38:c8:a0:a0:0a:e0:
2d:62:ef:16:5d:b5:b2:91:38:2c:12:e2:18:37:95:2a:56:c6:
20:c0:1e:a8:33:64:64:9a:91:ba:73:62:22:b9:7d:a1:d4:d9:
c9:b2:90:e2:d5:64:bc:a2:77:86:cc:29:59:8d:a8:f0:c8:b5:
c7:16:59:eb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUOf2c5IAT9lXMCt49NL+oEpFvj4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTA1MDAwMDAwWhcNMjMxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNjgwYzVlZDgyNWY3NGI2ZmY5NDRlZGFjMjQ1YmQ2ZDBl
YjQ5YzIyMWQ4Y2RkZmY5ODNmZjI2NzEwYjFmMGMyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD088+VNOMSn0jqsXYeirS0rL9iBQJzUIc9ignuMIp/upIG
yd3EaoQSoBhXOaxnitIjqJsnzEOHylRNiWl8XadYBO3DiY2AHRjufY0HqCikHr+1
JROayGUZ3d/ux1hdxTjv4bNAnjUtLBiyuNHGQt4E1v5/8uIC84MySViHlQ+fPtKx
TfCR8lAJ5yPJkq7ViM0z9vvOrOytOt2penu80Fu59nZw+K9L5OCiapLtwBrNfG8o
VPfq2W65CHCHSan+QE2qQ+FuAcZ4ubL7BPfbSCGHfDrh1xVQGmW8S4oU17I6soFD
vUtBslkHOeJl2zHQqeiVJxl2JVQRMn5fwSMyNBvHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkkGxiY2YXKam+IcIjnRm0qSBczUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzk3NDdhZjMwLTVmZjctNDk1Ny04NjA3LTMxMDJhNzNhZWEyZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFt3dOzlEQ/tk4IWdIm2hsztdQpw
CMiXl/kpZwnn6EBInQduUhdY/2IILhqFGmjLwlHcRspCvYiMDeURVhAmRT24ggzg
92H7N33Em9LYm1hZCR/Me/Tz7tKHODBDLDEHowTTfKI+kZdLd06JEwsMVY8s8OLQ
VUztc7GBb7T6sypErfSXSNA31LDcfloKryKB5B5pb675S4Py2Z0DhbC7VSI9VR49
tiq71uawcfAK6Or+s/zF0RXyxcVX9hwHXleHAzjIoKAK4C1i7xZdtbKROCwS4hg3
lSpWxiDAHqgzZGSakbpzYiK5faHU2cmykOLVZLyid4bMKVmNqPDItccWWes=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:01 2024 by rpki-client on console-ams.rpki-client.org