Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1c9bf0a-0f8b-4052-b4a2-3fb555c0d3e2.roa
File: a1c9bf0a-0f8b-4052-b4a2-3fb555c0d3e2.roa (raw, json)
Hash identifier: E9qfajTswaAQ/6DA9xMnzg2UDDyir3hQKwskePihbC8=
Subject key identifier: F5:39:9C:09:BA:57:C9:D6:1B:D1:F1:A7:35:81:DB:B6:2B:36:C8:8F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 58FE44B9F3F27E0B50880D345BBA093F70C3008F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1c9bf0a-0f8b-4052-b4a2-3fb555c0d3e2.roa
Signing time: Thu 05 Oct 2023 00:00:00 +0000
ROA not before: Thu 05 Oct 2023 00:00:00 +0000
ROA not after: Thu 09 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:fe:44:b9:f3:f2:7e:0b:50:88:0d:34:5b:ba:09:3f:70:c3:00:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 5 00:00:00 2023 GMT
Not After : Nov 9 23:59:59 2023 GMT
Subject: serialNumber=fa751443fc0c0a54ca3b57e468591130b7fe33a1701fe3d33ae8bb0bf7c24b6b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:32:7d:c7:6e:49:4d:5a:22:35:f8:80:97:
de:d9:ab:6a:c6:0d:fc:da:7f:f7:bd:71:d3:ea:e0:
eb:be:ce:0f:cb:d2:cc:b5:ac:a7:55:ae:12:9f:80:
de:d9:0c:3f:cd:5f:07:b8:f8:6e:e6:cb:6f:43:8a:
36:d8:1b:0f:99:4c:89:07:12:b4:26:9e:54:d8:7d:
67:5b:4c:f8:a0:a8:2f:c1:b4:f3:c2:0d:d6:27:04:
80:ee:6b:5d:9c:3f:a6:c9:bc:72:39:37:2f:6b:ec:
a5:17:9c:3c:ba:b7:6b:a2:71:18:8e:71:6e:97:64:
7e:b9:24:af:a6:04:37:80:cc:25:1c:de:d6:a1:bd:
70:a5:02:63:46:84:7d:81:17:90:17:49:0c:e0:ec:
c9:f2:0c:1d:ed:9b:f2:81:43:89:c4:9d:06:7e:6d:
8a:d5:dc:dc:43:87:7a:04:d6:70:86:3a:32:75:77:
ce:6c:14:cb:1d:8d:15:6f:46:be:e0:d5:8e:67:64:
16:f8:7e:20:4c:07:16:fc:0c:2a:38:53:23:15:e6:
6d:57:b7:c0:08:b9:47:39:b3:10:2b:61:df:b8:80:
6c:a8:eb:f4:15:54:3d:54:c2:52:26:e6:5e:10:fa:
42:4b:16:25:e4:43:f5:31:a8:6e:cf:34:ba:f6:db:
e9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:39:9C:09:BA:57:C9:D6:1B:D1:F1:A7:35:81:DB:B6:2B:36:C8:8F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1c9bf0a-0f8b-4052-b4a2-3fb555c0d3e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
67:10:31:a3:e9:89:51:24:39:48:90:2e:cc:77:d0:e3:dd:7f:
ad:9d:83:19:36:90:e1:8c:98:17:5a:68:de:09:f5:a6:d8:c5:
a4:80:e8:08:9e:8a:c2:9d:b8:e6:e0:65:de:77:d4:01:42:2e:
2a:e8:17:13:d5:c1:15:0f:5d:d7:42:89:9d:5a:97:17:6f:ec:
88:ba:46:5d:f4:de:da:0b:89:23:3d:fc:88:78:2b:ba:af:13:
49:76:a4:0a:0f:ca:90:bc:69:cf:00:41:69:4b:60:ed:da:a0:
18:c0:0c:c7:e2:45:69:f9:7f:5e:1b:ba:14:74:c9:6c:76:f8:
c5:57:42:56:82:85:82:f1:fd:33:1c:0c:6f:64:87:25:97:ae:
f3:76:46:b9:b7:a8:bf:36:80:f2:fb:b0:27:21:a0:19:8a:99:
f3:af:de:9d:c3:4d:2b:50:c4:ae:3f:93:25:03:b6:82:bb:25:
73:fa:a8:75:37:d5:6b:f6:d6:aa:cb:8c:20:59:76:84:a3:e3:
2d:db:75:42:54:2b:08:9b:41:aa:b6:53:c7:a2:d2:5d:4d:c7:
ab:27:a3:ca:15:6c:3e:6e:1c:09:84:55:89:3d:0b:dc:02:be:
3d:42:38:fd:47:a6:c6:f0:59:bb:fd:29:26:04:65:af:aa:fc:
93:7a:a6:ba
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWP5EufPyfgtQiA00W7oJP3DDAI8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDA1MDAwMDAwWhcNMjMxMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BmYTc1MTQ0M2ZjMGMwYTU0Y2EzYjU3ZTQ2ODU5MTEzMGI3
ZmUzM2ExNzAxZmUzZDMzYWU4YmIwYmY3YzI0YjZiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDG1zJ9x25JTVoiNfiAl97Zq2rGDfzaf/e9cdPq4Ou+zg/L
0sy1rKdVrhKfgN7ZDD/NXwe4+G7my29DijbYGw+ZTIkHErQmnlTYfWdbTPigqC/B
tPPCDdYnBIDua12cP6bJvHI5Ny9r7KUXnDy6t2uicRiOcW6XZH65JK+mBDeAzCUc
3tahvXClAmNGhH2BF5AXSQzg7MnyDB3tm/KBQ4nEnQZ+bYrV3NxDh3oE1nCGOjJ1
d85sFMsdjRVvRr7g1Y5nZBb4fiBMBxb8DCo4UyMV5m1Xt8AIuUc5sxArYd+4gGyo
6/QVVD1UwlIm5l4Q+kJLFiXkQ/UxqG7PNLr22+n7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU9TmcCbpXydYb0fGnNYHbtis2yI8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2ExYzliZjBhLTBmOGItNDA1Mi1iNGEyLTNmYjU1NWMwZDNlMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGcQMaPpiVEkOUiQLsx30OPdf62d
gxk2kOGMmBdaaN4J9abYxaSA6AieisKduObgZd531AFCLiroFxPVwRUPXddCiZ1a
lxdv7Ii6Rl303toLiSM9/Ih4K7qvE0l2pAoPypC8ac8AQWlLYO3aoBjADMfiRWn5
f14buhR0yWx2+MVXQlaChYLx/TMcDG9khyWXrvN2Rrm3qL82gPL7sCchoBmKmfOv
3p3DTStQxK4/kyUDtoK7JXP6qHU31Wv21qrLjCBZdoSj4y3bdUJUKwibQaq2U8ei
0l1Nx6sno8oVbD5uHAmEVYk9C9wCvj1COP1HpsbwWbv9KSYEZa+q/JN6pro=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:04 2024 by rpki-client on console-ams.rpki-client.org