Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7cd14d8-d533-4328-971e-f09ccc7ae3d0.roa
File: a7cd14d8-d533-4328-971e-f09ccc7ae3d0.roa (raw, json)
Hash identifier: 624deBpRU1ZHrkJ5kedsJh+UR7y3R67B1N0guvuN7H4=
Subject key identifier: 9C:DB:FE:77:67:68:00:D4:12:05:AE:71:BC:49:1A:33:D3:39:66:FD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7AEF4C32DA54DA7CF2C3AD954E7994A9CCCAE6CC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7cd14d8-d533-4328-971e-f09ccc7ae3d0.roa
Signing time: Mon 27 Nov 2023 00:00:00 +0000
ROA not before: Mon 27 Nov 2023 00:00:00 +0000
ROA not after: Mon 01 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ef:4c:32:da:54:da:7c:f2:c3:ad:95:4e:79:94:a9:cc:ca:e6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 27 00:00:00 2023 GMT
Not After : Jan 1 23:59:59 2024 GMT
Subject: serialNumber=ebcba78cbb922a511318ff83bc786963931e9797bcb640ae9ef34f067067d8c6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:82:dd:30:35:c8:44:0b:b0:6e:c2:0e:3d:
2e:e7:28:15:d4:66:99:47:6c:e5:f7:c4:d6:73:f6:
95:22:c5:da:f8:31:90:b6:0f:9c:ba:bb:f2:34:4a:
0d:80:1f:5a:c1:5e:b6:58:6f:da:16:9f:a0:e9:e0:
62:ce:62:94:58:be:3f:7f:0b:46:59:04:bc:5d:06:
e2:76:60:04:49:86:6a:74:9f:e0:96:e6:9f:36:a1:
b6:bd:88:12:8b:97:e5:f9:cf:56:85:4c:a3:b7:06:
7f:99:a3:ef:24:b7:2d:9c:71:73:f1:e8:5b:ca:83:
ec:c6:dd:08:70:69:21:05:51:5e:b1:18:0f:61:98:
e2:94:2e:b4:99:d6:06:24:ff:39:73:ed:44:6b:6a:
94:60:f4:fc:f9:1f:d8:c9:37:2f:91:d7:96:56:ee:
f2:58:7b:bf:18:47:a6:2f:de:2e:58:73:27:89:40:
3c:60:e1:bf:de:f7:a8:de:ef:16:9e:65:80:2d:f1:
41:73:ba:8e:7c:ba:62:c7:c5:1f:29:e9:a6:a1:2f:
bd:d6:88:fd:b4:d0:00:99:17:23:a0:f8:5d:c4:11:
27:55:86:d7:3f:18:1b:e7:e6:03:9b:7f:fd:98:9b:
1b:32:4c:55:d3:fd:b7:54:aa:8c:5d:9c:ef:31:67:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DB:FE:77:67:68:00:D4:12:05:AE:71:BC:49:1A:33:D3:39:66:FD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7cd14d8-d533-4328-971e-f09ccc7ae3d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6e:48:07:42:6e:a7:a6:7d:53:d6:85:cc:bc:4f:9c:f9:57:
5c:07:c0:64:4f:d6:c2:1c:ab:cc:5c:f3:8c:18:a6:22:4a:9d:
9b:3b:84:54:74:ce:28:01:dc:b1:49:b3:c9:91:fd:52:32:1c:
42:fe:e9:cc:df:f6:14:74:67:8d:ca:b7:63:37:05:ce:be:4e:
cc:be:21:ad:bc:02:65:4d:59:07:84:8d:a6:3c:c3:67:7f:c0:
42:b8:a5:2a:23:f2:61:f4:0b:59:ea:d2:96:58:fd:38:33:40:
72:4b:c5:9f:32:f4:75:de:96:93:39:ed:cc:fc:e1:71:99:f6:
7c:87:49:ab:a2:0d:92:b9:a6:89:35:41:f1:72:94:7e:79:89:
29:50:5f:fa:fb:af:bd:45:10:21:ec:df:42:91:80:42:03:81:
25:ea:62:2d:38:32:02:07:03:92:1e:12:b7:35:3b:1b:56:0e:
11:39:7c:24:0d:87:90:71:14:19:3c:2e:49:34:fc:53:68:3d:
36:53:5c:fe:00:44:1b:c9:ea:bb:a9:99:c0:70:fc:f9:cf:5a:
c2:e0:75:a4:3e:cb:b6:94:0f:0b:52:07:a8:98:bc:18:49:74:
0a:9d:38:77:5a:5f:b7:0c:c8:22:69:b7:c2:0b:49:42:27:1c:
30:27:0c:ee
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeu9MMtpU2nzyw62VTnmUqczK5swwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTI3MDAwMDAwWhcNMjQwMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYmNiYTc4Y2JiOTIyYTUxMTMxOGZmODNiYzc4Njk2Mzkz
MWU5Nzk3YmNiNjQwYWU5ZWYzNGYwNjcwNjdkOGM2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6Z4LdMDXIRAuwbsIOPS7nKBXUZplHbOX3xNZz9pUixdr4
MZC2D5y6u/I0Sg2AH1rBXrZYb9oWn6Dp4GLOYpRYvj9/C0ZZBLxdBuJ2YARJhmp0
n+CW5p82oba9iBKLl+X5z1aFTKO3Bn+Zo+8kty2ccXPx6FvKg+zG3QhwaSEFUV6x
GA9hmOKULrSZ1gYk/zlz7URrapRg9Pz5H9jJNy+R15ZW7vJYe78YR6Yv3i5YcyeJ
QDxg4b/e96je7xaeZYAt8UFzuo58umLHxR8p6aahL73WiP200ACZFyOg+F3EESdV
htc/GBvn5gObf/2YmxsyTFXT/bdUqoxdnO8xZzzFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnNv+d2doANQSBa5xvEkaM9M5Zv0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2E3Y2QxNGQ4LWQ1MzMtNDMyOC05NzFlLWYwOWNjYzdhZTNkMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAApuSAdCbqemfVPWhcy8T5z5V1wH
wGRP1sIcq8xc84wYpiJKnZs7hFR0zigB3LFJs8mR/VIyHEL+6czf9hR0Z43Kt2M3
Bc6+Tsy+Ia28AmVNWQeEjaY8w2d/wEK4pSoj8mH0C1nq0pZY/TgzQHJLxZ8y9HXe
lpM57cz84XGZ9nyHSauiDZK5pok1QfFylH55iSlQX/r7r71FECHs30KRgEIDgSXq
Yi04MgIHA5IeErc1OxtWDhE5fCQNh5BxFBk8Lkk0/FNoPTZTXP4ARBvJ6rupmcBw
/PnPWsLgdaQ+y7aUDwtSB6iYvBhJdAqdOHdaX7cMyCJpt8ILSUInHDAnDO4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:05 2024 by rpki-client on console-ams.rpki-client.org