Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a6f7f50a-362d-460d-af8b-3489e59bc87e.roa
File: a6f7f50a-362d-460d-af8b-3489e59bc87e.roa (raw, json)
Hash identifier: X8q4GqGZ3Niu6cdNVZrpzZehExPEqruHCt9tZoTZoNc=
Subject key identifier: C1:8A:CE:8D:02:4A:77:FC:3A:97:C4:BD:E8:0E:28:3D:5B:80:D3:1B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3CB34A19B6EE17829ADAD80241882059AE894F95
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a6f7f50a-362d-460d-af8b-3489e59bc87e.roa
Signing time: Fri 08 Sep 2023 00:00:00 +0000
ROA not before: Fri 08 Sep 2023 00:00:00 +0000
ROA not after: Fri 13 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:b3:4a:19:b6:ee:17:82:9a:da:d8:02:41:88:20:59:ae:89:4f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 8 00:00:00 2023 GMT
Not After : Oct 13 23:59:59 2023 GMT
Subject: serialNumber=16f0066802b60b1d448f468300bc8dfd69e659df8e45afd1cc921d0bfbd5d166, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:2b:d5:45:79:f9:cd:82:47:69:1e:cc:4d:
be:6d:b5:b1:ea:a1:9a:96:9a:3a:a4:af:9c:bc:ed:
e7:91:ef:48:5b:7f:b9:5b:72:19:7c:39:78:42:5e:
30:7d:ca:02:6c:fd:77:9f:5e:2b:78:a2:03:c6:47:
76:74:84:bb:ba:86:4f:9b:6f:14:eb:20:64:ac:86:
ed:51:75:a0:52:cd:51:cf:91:a1:e1:74:f9:96:99:
6f:e6:b4:40:30:bb:87:4b:24:39:4d:cf:28:95:36:
f7:3f:e6:fa:38:8f:1a:1c:ce:6d:2e:e3:77:69:86:
6d:77:b1:d0:b6:0f:33:17:b2:f6:9a:cb:1a:d0:89:
fc:cf:b5:5e:30:42:fd:9e:de:0f:f3:b6:95:7f:b2:
e8:53:1b:92:a2:f4:5d:69:4e:f5:92:ea:76:bc:e9:
9c:82:5b:93:b3:13:89:23:13:9f:ab:c1:a1:49:8c:
e6:1b:15:7c:dd:a2:83:8c:9c:bc:13:c7:10:08:e5:
c7:13:bf:f4:f4:a2:c1:94:25:91:7b:f8:a7:5c:55:
e4:71:6e:ce:08:54:36:08:af:3b:89:9d:1b:0c:96:
cb:92:e7:02:18:6a:e0:c8:9a:d3:58:85:88:09:60:
a8:b3:91:3b:fb:b1:73:b1:0a:b9:19:52:ee:2b:3a:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8A:CE:8D:02:4A:77:FC:3A:97:C4:BD:E8:0E:28:3D:5B:80:D3:1B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a6f7f50a-362d-460d-af8b-3489e59bc87e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b2:89:4f:f4:2c:55:56:a5:e4:f5:14:69:2f:ca:95:f8:78:
61:8e:3c:42:6f:58:0b:6b:0b:48:79:87:be:41:04:93:f3:f8:
a0:8f:05:df:13:30:3f:d9:67:63:8d:f7:6e:f6:84:52:c1:72:
67:2a:d8:bd:0f:86:a5:33:19:c6:ea:33:9a:e5:c1:2a:76:19:
89:05:bb:f7:cb:75:a1:b4:db:ef:38:ab:c1:da:6f:26:d5:eb:
50:9c:44:3b:0e:2c:81:97:a0:d7:b1:f3:2a:13:9c:e4:59:14:
16:75:ec:8d:24:e0:47:09:fe:5a:2c:21:e0:a9:81:74:1d:a1:
1c:24:56:af:0d:f1:e3:85:a0:fc:65:92:87:ac:6a:b7:a0:11:
e9:d0:1c:12:a0:0c:56:13:37:34:64:54:64:c3:93:59:58:06:
a8:71:95:72:d9:c4:73:12:bf:b7:23:68:47:9f:9a:a7:90:2e:
05:24:f6:91:fa:a1:27:25:6f:8d:b9:52:1f:22:80:e5:dc:08:
10:a6:1b:eb:78:e1:67:07:81:56:df:0d:5b:d0:bd:03:2e:20:
58:8d:ae:f4:32:8b:29:90:8d:35:90:3f:d1:18:e7:99:39:cc:
e5:ea:bf:4a:f3:ad:89:01:1a:4d:b3:d8:7e:24:49:4d:85:c0:
18:73:3e:86
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPLNKGbbuF4Ka2tgCQYggWa6JT5UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTA4MDAwMDAwWhcNMjMxMDEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNmYwMDY2ODAyYjYwYjFkNDQ4ZjQ2ODMwMGJjOGRmZDY5
ZTY1OWRmOGU0NWFmZDFjYzkyMWQwYmZiZDVkMTY2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHtSvVRXn5zYJHaR7MTb5ttbHqoZqWmjqkr5y87eeR70hb
f7lbchl8OXhCXjB9ygJs/XefXit4ogPGR3Z0hLu6hk+bbxTrIGSshu1RdaBSzVHP
kaHhdPmWmW/mtEAwu4dLJDlNzyiVNvc/5vo4jxoczm0u43dphm13sdC2DzMXsvaa
yxrQifzPtV4wQv2e3g/ztpV/suhTG5Ki9F1pTvWS6na86ZyCW5OzE4kjE5+rwaFJ
jOYbFXzdooOMnLwTxxAI5ccTv/T0osGUJZF7+KdcVeRxbs4IVDYIrzuJnRsMlsuS
5wIYauDImtNYhYgJYKizkTv7sXOxCrkZUu4rOhkVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwYrOjQJKd/w6l8S96A4oPVuA0xswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2E2ZjdmNTBhLTM2MmQtNDYwZC1hZjhiLTM0ODllNTliYzg3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJ2yiU/0LFVWpeT1FGkvypX4eGGO
PEJvWAtrC0h5h75BBJPz+KCPBd8TMD/ZZ2ON9272hFLBcmcq2L0PhqUzGcbqM5rl
wSp2GYkFu/fLdaG02+84q8HabybV61CcRDsOLIGXoNex8yoTnORZFBZ17I0k4EcJ
/losIeCpgXQdoRwkVq8N8eOFoPxlkoesaregEenQHBKgDFYTNzRkVGTDk1lYBqhx
lXLZxHMSv7cjaEefmqeQLgUk9pH6oSclb425Uh8igOXcCBCmG+t44WcHgVbfDVvQ
vQMuIFiNrvQyiymQjTWQP9EY55k5zOXqv0rzrYkBGk2z2H4kSU2FwBhzPoY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:05 2024 by rpki-client on console-ams.rpki-client.org