Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bb202e0c-11da-4af9-bbe6-b46305123cf0.roa
File: bb202e0c-11da-4af9-bbe6-b46305123cf0.roa (raw, json)
Hash identifier: vnY6/b1Z9EhJXHOrMlHFinfNT/oLaZbWtj/0pApOH4Y=
Subject key identifier: E8:AD:A1:19:59:A0:A0:10:B5:A4:38:C5:2B:60:B7:99:C0:C3:ED:FB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 174895CE8D3CD31A2B78919A8BB384215202C097
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bb202e0c-11da-4af9-bbe6-b46305123cf0.roa
Signing time: Sun 28 Apr 2024 00:00:00 +0000
ROA not before: Sun 28 Apr 2024 00:00:00 +0000
ROA not after: Sun 02 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:48:95:ce:8d:3c:d3:1a:2b:78:91:9a:8b:b3:84:21:52:02:c0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 28 00:00:00 2024 GMT
Not After : Jun 2 23:59:59 2024 GMT
Subject: serialNumber=10f5fe3a1044b82b6879b0449ff12d65ee4b2cd158e045acc5025dab11a0d79e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:d6:93:9c:32:91:eb:f6:32:bb:14:08:60:
51:70:ae:bb:2e:0c:42:b2:18:0c:36:2e:28:34:01:
59:d0:82:34:b4:37:0c:68:16:44:19:13:87:81:e4:
3d:70:60:8a:3f:54:15:7f:ad:97:54:29:85:7a:9a:
68:6b:56:a8:47:6b:40:2b:3a:9b:c1:c5:c0:1b:8e:
33:5b:46:ea:9f:46:5b:b6:df:ef:0f:86:a5:45:75:
7a:7d:49:c1:6a:2c:86:fe:e7:2d:19:6b:3b:f4:a7:
55:a1:30:cd:c6:a4:31:0c:02:61:e3:45:59:1b:79:
d6:70:3c:b9:dd:d1:1e:7f:4a:3b:23:fa:8c:83:22:
0f:cf:4f:d7:ca:1f:b1:01:ad:ab:97:98:26:2c:e1:
22:f4:f1:7b:fa:55:9e:3c:53:a6:3f:9a:97:27:3c:
97:af:9f:70:91:6a:9d:c3:55:54:be:ab:e4:92:28:
fe:85:db:18:68:86:a8:b2:92:3d:8d:e8:f1:b6:f3:
a5:2b:1c:c1:2f:68:57:79:36:ee:62:39:55:95:b7:
a5:cd:b0:93:fb:37:a8:2e:d9:97:55:4e:44:a8:8c:
f9:4a:83:d9:38:52:b8:2f:61:d5:50:bb:4c:4e:3c:
56:22:73:3f:e9:c0:97:31:7c:24:5e:e2:09:0c:be:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AD:A1:19:59:A0:A0:10:B5:A4:38:C5:2B:60:B7:99:C0:C3:ED:FB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bb202e0c-11da-4af9-bbe6-b46305123cf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
70:93:00:79:98:b8:14:3b:71:ad:a6:75:e9:b6:28:1f:30:30:
dd:af:56:16:96:91:2b:2e:bb:ce:01:ba:c0:1a:3f:30:13:46:
25:84:6f:cf:d7:55:31:13:ef:9e:83:ee:6e:af:87:48:ae:06:
0f:e6:79:15:9d:9c:4d:ad:d9:5d:29:06:e2:67:5b:91:35:b4:
bb:b8:ab:ed:34:a6:ea:6b:ff:2e:4d:fd:3e:ea:81:e5:19:87:
77:63:b6:94:7f:18:05:28:8f:47:48:bf:46:65:42:f5:ab:49:
6b:8b:4d:15:01:92:51:85:0c:5a:99:d7:32:86:10:42:7c:a5:
71:85:bd:5e:b3:a9:c9:66:d6:02:5f:6b:43:fe:26:fe:6f:5c:
54:6b:4b:a2:c3:c0:cd:96:92:98:c6:30:26:98:69:49:d5:e7:
ed:50:bc:09:bf:09:50:c1:83:4c:d2:44:9c:05:92:c6:7f:e5:
85:0b:39:9d:b6:65:76:1e:c1:62:71:4d:01:3d:2b:87:1b:3b:
c6:85:cb:23:c3:98:8a:00:6e:86:ff:b4:0e:7f:0a:76:c1:f2:
a8:32:c2:36:9a:e3:b5:25:80:e3:35:e7:2e:5b:7b:ba:7d:c9:
d6:75:75:56:99:26:cc:a5:8b:66:27:a3:f8:19:e7:69:02:fa:
23:37:83:06
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUF0iVzo080xoreJGai7OEIVICwJcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNDI4MDAwMDAwWhcNMjQwNjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMGY1ZmUzYTEwNDRiODJiNjg3OWIwNDQ5ZmYxMmQ2NWVl
NGIyY2QxNThlMDQ1YWNjNTAyNWRhYjExYTBkNzllMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzh9aTnDKR6/YyuxQIYFFwrrsuDEKyGAw2Lig0AVnQgjS0
NwxoFkQZE4eB5D1wYIo/VBV/rZdUKYV6mmhrVqhHa0ArOpvBxcAbjjNbRuqfRlu2
3+8PhqVFdXp9ScFqLIb+5y0Zazv0p1WhMM3GpDEMAmHjRVkbedZwPLnd0R5/Sjsj
+oyDIg/PT9fKH7EBrauXmCYs4SL08Xv6VZ48U6Y/mpcnPJevn3CRap3DVVS+q+SS
KP6F2xhohqiykj2N6PG286UrHMEvaFd5Nu5iOVWVt6XNsJP7N6gu2ZdVTkSojPlK
g9k4UrgvYdVQu0xOPFYicz/pwJcxfCRe4gkMvs+DAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6K2hGVmgoBC1pDjFK2C3mcDD7fswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2JiMjAyZTBjLTExZGEtNGFmOS1iYmU2LWI0NjMwNTEyM2NmMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHCTAHmYuBQ7ca2mdem2KB8wMN2v
VhaWkSsuu84BusAaPzATRiWEb8/XVTET756D7m6vh0iuBg/meRWdnE2t2V0pBuJn
W5E1tLu4q+00pupr/y5N/T7qgeUZh3djtpR/GAUoj0dIv0ZlQvWrSWuLTRUBklGF
DFqZ1zKGEEJ8pXGFvV6zqclm1gJfa0P+Jv5vXFRrS6LDwM2WkpjGMCaYaUnV5+1Q
vAm/CVDBg0zSRJwFksZ/5YULOZ22ZXYewWJxTQE9K4cbO8aFyyPDmIoAbob/tA5/
CnbB8qgywjaa47UlgOM15y5be7p9ydZ1dVaZJsyli2Yno/gZ52kC+iM3gwY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:17 2024 by rpki-client on console-ams.rpki-client.org