Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca60cebb-68fa-4a38-893a-aea5f049817f.roa
File: ca60cebb-68fa-4a38-893a-aea5f049817f.roa (raw, json)
Hash identifier: ISdNZelMKYoX2wQtB0SuQfHIrEqRn6BfC3RSW4hhog8=
Subject key identifier: C7:28:AE:AF:35:35:D4:8E:86:5E:A2:45:2B:23:7D:3B:63:70:02:70
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1A9CAE763E4CE45724F010D897C4094024DD94A0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca60cebb-68fa-4a38-893a-aea5f049817f.roa
Signing time: Sat 30 Dec 2023 00:00:00 +0000
ROA not before: Sat 30 Dec 2023 00:00:00 +0000
ROA not after: Sat 03 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:9c:ae:76:3e:4c:e4:57:24:f0:10:d8:97:c4:09:40:24:dd:94:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 30 00:00:00 2023 GMT
Not After : Feb 3 23:59:59 2024 GMT
Subject: serialNumber=5ceb7feb25dd8ed2d6d40663bdbc8d493cc3d231939c6b6ba1fce33b5a2a7f16, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:80:20:92:16:d7:3f:f5:c0:bd:bd:f8:13:
59:2e:26:d7:ee:26:c1:92:81:c5:73:b9:72:79:a6:
20:6f:c1:6c:19:6e:aa:0f:4e:f9:d1:0a:91:a8:b6:
ae:05:cb:ce:44:aa:14:69:68:93:50:0f:96:c5:46:
37:6f:87:87:5f:09:7c:a5:8e:9f:3c:0d:e5:01:c3:
1a:3f:ab:99:b2:e6:46:07:65:69:4d:9f:53:b8:a9:
2c:fe:cb:99:08:43:32:ef:1d:23:62:3a:44:58:27:
b1:49:18:ed:a5:43:4b:e0:1e:ab:24:67:b3:5d:ee:
91:65:b9:e4:19:5c:8b:5e:45:9c:5d:e8:c5:11:75:
ec:99:78:24:0a:32:f3:20:6e:ed:57:3d:50:61:3e:
bf:24:05:bb:31:82:ca:63:b6:47:82:8a:54:92:d3:
bd:7a:ab:ff:06:53:64:07:ca:75:20:f5:74:82:b1:
95:d4:e5:4d:0f:fe:35:7b:f1:bd:c1:a6:72:16:08:
14:bb:00:8f:65:99:4e:41:c8:e0:6a:25:c3:21:cb:
ef:db:89:33:ae:02:0f:01:9a:18:fd:e9:a9:1a:32:
d9:32:28:96:b7:e5:5c:86:56:e0:f8:c1:2d:1e:9e:
d1:7a:0f:a6:08:af:8c:8f:41:b3:cc:18:41:d0:b9:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:28:AE:AF:35:35:D4:8E:86:5E:A2:45:2B:23:7D:3B:63:70:02:70
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca60cebb-68fa-4a38-893a-aea5f049817f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:02:0f:df:32:17:d0:3f:91:e1:7f:d5:0b:dd:58:97:c6:fd:
18:2e:a5:6d:cd:0a:bb:c2:dc:a2:f3:33:ee:4c:e8:2c:63:de:
da:8a:85:6c:88:a8:a2:63:72:85:c8:a6:2b:6c:fd:75:48:7d:
da:5e:e9:50:2a:56:a8:aa:e3:6f:32:cd:a6:98:75:ae:10:ec:
f0:64:65:ce:78:b6:64:99:d7:7d:a3:f4:86:1c:1a:1e:b5:5f:
ad:a0:d9:d8:07:14:2c:6e:4e:30:08:2e:bb:04:c8:44:37:87:
f7:46:24:75:10:d7:10:e7:79:52:3e:72:43:8a:10:7f:df:ed:
b0:a9:79:eb:d4:69:a4:7a:64:a1:7d:de:6b:41:64:40:25:f7:
48:61:4c:da:46:43:87:87:e1:1b:82:7f:41:08:69:cb:00:03:
86:36:f7:9b:e6:11:f0:b6:79:f1:2c:e6:c1:73:c6:f6:60:6c:
cb:5e:c8:fb:eb:04:b8:6a:50:6f:17:4b:35:91:5f:ae:05:f4:
88:de:71:ae:9f:0e:fd:d1:67:8f:6d:b8:29:39:4e:4d:ce:dd:
0f:a5:aa:63:ed:e3:3b:c7:88:f9:3f:25:fd:b9:07:fc:1b:82:
f2:1e:52:8e:15:fa:5b:e1:af:eb:ff:ab:6b:2d:60:ec:99:6e:
a2:73:4c:1e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGpyudj5M5Fck8BDYl8QJQCTdlKAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjMwMDAwMDAwWhcNMjQwMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1Y2ViN2ZlYjI1ZGQ4ZWQyZDZkNDA2NjNiZGJjOGQ0OTNj
YzNkMjMxOTM5YzZiNmJhMWZjZTMzYjVhMmE3ZjE2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCr84AgkhbXP/XAvb34E1kuJtfuJsGSgcVzuXJ5piBvwWwZ
bqoPTvnRCpGotq4Fy85EqhRpaJNQD5bFRjdvh4dfCXyljp88DeUBwxo/q5my5kYH
ZWlNn1O4qSz+y5kIQzLvHSNiOkRYJ7FJGO2lQ0vgHqskZ7Nd7pFlueQZXIteRZxd
6MURdeyZeCQKMvMgbu1XPVBhPr8kBbsxgspjtkeCilSS0716q/8GU2QHynUg9XSC
sZXU5U0P/jV78b3BpnIWCBS7AI9lmU5ByOBqJcMhy+/biTOuAg8Bmhj96akaMtky
KJa35VyGVuD4wS0entF6D6YIr4yPQbPMGEHQub8pAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUxyiurzU11I6GXqJFKyN9O2NwAnAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NhNjBjZWJiLTY4ZmEtNGEzOC04OTNhLWFlYTVmMDQ5ODE3Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAACD98yF9A/keF/1QvdWJfG/Rgu
pW3NCrvC3KLzM+5M6Cxj3tqKhWyIqKJjcoXIpits/XVIfdpe6VAqVqiq428yzaaY
da4Q7PBkZc54tmSZ132j9IYcGh61X62g2dgHFCxuTjAILrsEyEQ3h/dGJHUQ1xDn
eVI+ckOKEH/f7bCpeevUaaR6ZKF93mtBZEAl90hhTNpGQ4eH4RuCf0EIacsAA4Y2
95vmEfC2efEs5sFzxvZgbMteyPvrBLhqUG8XSzWRX64F9Ijeca6fDv3RZ49tuCk5
Tk3O3Q+lqmPt4zvHiPk/Jf25B/wbgvIeUo4V+lvhr+v/q2stYOyZbqJzTB4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:20 2024 by rpki-client on console-ams.rpki-client.org