Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ad98f1c8-51c3-4d1d-8920-167399d26192.roa
File: ad98f1c8-51c3-4d1d-8920-167399d26192.roa (raw, json)
Hash identifier: wdaigcou+PtFP/XLc2RlLnFOD0vLxn+6UPoDloRsibA=
Subject key identifier: 2A:2D:BA:FA:28:79:01:E2:2D:11:4E:BF:F0:11:49:95:A2:30:9E:4F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4E26CB1D0684BA711AEB43DC25AD14093E88F937
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ad98f1c8-51c3-4d1d-8920-167399d26192.roa
Signing time: Sat 09 Dec 2023 00:00:00 +0000
ROA not before: Sat 09 Dec 2023 00:00:00 +0000
ROA not after: Sat 13 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:26:cb:1d:06:84:ba:71:1a:eb:43:dc:25:ad:14:09:3e:88:f9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 9 00:00:00 2023 GMT
Not After : Jan 13 23:59:59 2024 GMT
Subject: serialNumber=1313e96046348829341b62f9046b561dd28a5fc5da57c758037cff07fe9db427, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:13:b3:cd:37:64:5d:96:6e:5c:10:e1:db:d4:
25:95:00:41:26:b3:77:65:0f:f6:04:ef:28:10:a2:
c0:1b:95:3f:35:b6:08:45:88:24:a7:93:29:b3:e2:
99:fd:12:6b:9d:1c:6c:3d:6b:4b:2d:3f:84:b9:af:
bb:9e:86:5d:27:51:b7:61:c5:70:11:9a:a3:18:c5:
0b:3b:82:15:e6:3b:13:00:d9:be:af:7f:6d:1d:d8:
2a:69:79:5e:f6:0e:b9:f3:71:be:20:e4:ad:69:b2:
f0:b3:84:b6:c4:9a:26:92:5e:09:f7:0a:c1:bc:82:
f3:69:8e:37:4e:a5:31:e3:ad:27:d8:61:50:21:ba:
dc:4f:e0:97:f2:23:a0:16:8b:8e:ff:03:13:94:36:
81:81:64:79:0c:c2:47:73:bc:df:10:e2:94:bd:8e:
5b:0f:30:01:55:61:c7:20:0a:5b:3f:00:1e:86:71:
8a:1a:c4:47:b0:18:8c:cc:88:e6:4e:ad:e8:85:29:
1d:89:55:a6:97:eb:94:91:55:e7:6b:32:9e:5e:64:
18:ac:54:89:df:e3:6a:37:b8:45:f9:64:72:1e:37:
32:5e:4c:65:bd:62:15:2e:c5:a0:66:f8:31:a8:54:
72:4d:1f:3e:46:af:f5:8b:88:44:52:f5:6d:84:18:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2D:BA:FA:28:79:01:E2:2D:11:4E:BF:F0:11:49:95:A2:30:9E:4F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ad98f1c8-51c3-4d1d-8920-167399d26192.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8b:52:ce:04:39:61:c8:ee:3e:2a:fc:31:42:80:70:c9:b3:
37:f0:0a:e6:84:46:f1:2e:b3:48:f8:ae:28:05:8d:06:1f:e3:
d1:2d:70:ed:47:8a:93:82:98:80:4c:25:e7:3f:aa:9d:b0:2a:
39:79:e3:79:d3:9f:a1:59:6f:d6:03:b0:fb:13:5d:ec:1d:aa:
ee:8a:8b:d8:86:66:5b:9c:00:b9:7e:f4:0b:79:fc:0a:a7:9e:
6f:32:fe:6d:e8:c6:9e:32:2f:a5:c8:38:36:d9:6c:d7:de:bd:
79:3d:0e:2f:90:59:fc:d4:87:ce:73:c3:b5:b8:76:19:64:b3:
3c:c8:05:9f:1d:9b:25:65:ef:15:54:63:3f:8d:74:fc:37:15:
80:3b:86:50:f7:1e:06:cb:70:13:52:e4:c8:ae:d1:c8:40:92:
c4:c3:0f:9b:d8:ba:bb:2b:54:3e:76:c0:71:62:17:5e:a6:52:
6c:2b:50:d9:8e:f7:42:f6:d2:29:fd:e7:02:6c:98:da:49:dd:
49:8c:db:ba:b6:2e:c3:52:dd:39:f0:be:fd:17:58:9e:6b:1f:
c3:85:38:f8:dd:d4:77:97:f9:d0:5c:f5:da:8b:f5:c7:fd:f8:
84:ef:e3:36:ee:ea:8f:6c:a4:90:4a:2b:9b:8c:05:fc:15:9a:
84:75:e5:a7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTibLHQaEunEa60PcJa0UCT6I+TcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjA5MDAwMDAwWhcNMjQwMTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMzEzZTk2MDQ2MzQ4ODI5MzQxYjYyZjkwNDZiNTYxZGQy
OGE1ZmM1ZGE1N2M3NTgwMzdjZmYwN2ZlOWRiNDI3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXE7PNN2Rdlm5cEOHb1CWVAEEms3dlD/YE7ygQosAblT81
tghFiCSnkymz4pn9EmudHGw9a0stP4S5r7uehl0nUbdhxXARmqMYxQs7ghXmOxMA
2b6vf20d2CppeV72Drnzcb4g5K1psvCzhLbEmiaSXgn3CsG8gvNpjjdOpTHjrSfY
YVAhutxP4JfyI6AWi47/AxOUNoGBZHkMwkdzvN8Q4pS9jlsPMAFVYccgCls/AB6G
cYoaxEewGIzMiOZOreiFKR2JVaaX65SRVedrMp5eZBisVInf42o3uEX5ZHIeNzJe
TGW9YhUuxaBm+DGoVHJNHz5Gr/WLiERS9W2EGO0jAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKi26+ih5AeItEU6/8BFJlaIwnk8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2FkOThmMWM4LTUxYzMtNGQxZC04OTIwLTE2NzM5OWQyNjE5Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKWLUs4EOWHI7j4q/DFCgHDJszfw
CuaERvEus0j4rigFjQYf49EtcO1HipOCmIBMJec/qp2wKjl543nTn6FZb9YDsPsT
Xewdqu6Ki9iGZlucALl+9At5/Aqnnm8y/m3oxp4yL6XIODbZbNfevXk9Di+QWfzU
h85zw7W4dhlkszzIBZ8dmyVl7xVUYz+NdPw3FYA7hlD3HgbLcBNS5Miu0chAksTD
D5vYursrVD52wHFiF16mUmwrUNmO90L20in95wJsmNpJ3UmM27q2LsNS3Tnwvv0X
WJ5rH8OFOPjd1HeX+dBc9dqL9cf9+ITv4zbu6o9spJBKK5uMBfwVmoR15ac=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:07 2024 by rpki-client on console-ams.rpki-client.org