Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/caff06be-4ac3-43e9-9fb0-9e9c8211c7c7.roa
File: caff06be-4ac3-43e9-9fb0-9e9c8211c7c7.roa (raw, json)
Hash identifier: rXSUqEvsEd95YItIPO6Gozecg4kW7qXKeoHNFBKIrIk=
Subject key identifier: B8:34:C3:D8:3D:05:6B:3C:25:D0:41:39:E8:DE:D7:1A:FE:BB:19:3B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 47B10851AFD77138951E220CF5FEA1B016E4267B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/caff06be-4ac3-43e9-9fb0-9e9c8211c7c7.roa
Signing time: Fri 04 Aug 2023 00:00:00 +0000
ROA not before: Fri 04 Aug 2023 00:00:00 +0000
ROA not after: Fri 08 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b1:08:51:af:d7:71:38:95:1e:22:0c:f5:fe:a1:b0:16:e4:26:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 4 00:00:00 2023 GMT
Not After : Sep 8 23:59:59 2023 GMT
Subject: serialNumber=eada607f253cd99a942d2607dd6e8ce885fa971a5e3357872832aa0f0b5bc7db, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:46:80:54:bc:15:e7:db:f6:fd:cb:21:5f:
eb:00:bb:9d:43:19:1c:72:50:b0:da:c8:29:af:31:
e1:c3:a5:8f:ee:05:13:ad:33:78:92:1b:4f:3a:74:
31:9d:6c:81:d0:b0:be:cf:f3:a4:b4:73:bc:e4:74:
77:f9:ac:62:f4:1d:13:b2:c6:eb:f1:42:6b:65:0d:
ce:7f:21:3b:73:e5:52:14:66:24:2a:19:79:8b:e8:
ab:8c:f7:2e:64:f3:7f:6f:17:79:5c:a0:e3:7d:4c:
37:c1:8e:85:31:48:71:24:83:2c:fb:b8:aa:f0:3d:
d7:27:82:a5:24:77:9e:ee:83:d7:39:04:bd:46:d3:
d0:bb:1b:65:59:5f:9a:6e:0a:1c:b1:e7:0c:b0:51:
61:95:67:05:0d:1f:02:a1:ff:87:eb:49:fd:1b:9c:
1a:12:dd:84:95:d3:ff:83:04:45:3c:97:03:6d:7a:
de:7c:43:7a:8a:fc:12:4b:a4:c4:9f:7e:b9:26:0b:
4c:e8:8a:54:56:69:21:f4:15:1a:92:d4:05:69:71:
c6:0b:b6:8d:d5:41:d3:fe:5d:8c:88:4e:29:da:b7:
a3:f0:2b:9d:35:25:17:cb:e4:c1:43:c6:fd:de:54:
45:c1:6c:c3:4d:84:c5:ac:26:e7:4a:7c:78:cb:34:
8a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:34:C3:D8:3D:05:6B:3C:25:D0:41:39:E8:DE:D7:1A:FE:BB:19:3B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/caff06be-4ac3-43e9-9fb0-9e9c8211c7c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d3:b2:4c:2d:8b:a1:96:25:06:d3:e5:42:5a:22:6d:6a:06:
97:c0:42:2f:50:97:39:b5:a8:72:bf:d0:52:0e:a2:83:88:a0:
12:5e:47:53:62:85:2a:64:b1:85:e9:99:a5:79:ec:5d:7d:45:
22:0e:fc:7f:52:06:8c:98:42:7a:0c:ca:a5:b3:c9:12:7d:77:
c8:c6:aa:4f:49:7f:9d:f7:24:89:b5:1b:9d:2a:54:ac:18:c3:
39:7d:34:1a:ab:50:9b:29:2b:b1:8a:06:35:8f:58:d5:bd:5f:
ec:f4:a2:6b:39:d8:01:b2:bd:67:b5:38:9f:3b:80:4f:15:a7:
26:8d:4d:26:20:b2:ef:4c:ac:e9:0f:90:74:87:92:b4:0c:d4:
b5:4b:c8:73:99:6a:c4:01:cf:c9:22:32:aa:8b:a6:b8:ff:a5:
12:67:02:54:1a:2b:89:df:81:61:09:f0:fa:9b:d7:48:d1:48:
73:45:b9:d6:94:20:34:09:0d:87:ad:27:1d:88:57:dc:7a:88:
86:a2:74:f5:e5:61:7d:2f:92:2e:f7:55:11:4f:88:6f:fe:5c:
28:0e:d6:ab:71:05:fc:1d:bf:99:1a:0a:04:d7:c5:72:54:fc:
0a:2a:e0:42:cd:1f:56:62:ad:81:fd:1b:8c:96:c1:64:95:87:
6d:55:de:e0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUR7EIUa/XcTiVHiIM9f6hsBbkJnswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODA0MDAwMDAwWhcNMjMwOTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYWRhNjA3ZjI1M2NkOTlhOTQyZDI2MDdkZDZlOGNlODg1
ZmE5NzFhNWUzMzU3ODcyODMyYWEwZjBiNWJjN2RiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbNEaAVLwV59v2/cshX+sAu51DGRxyULDayCmvMeHDpY/u
BROtM3iSG086dDGdbIHQsL7P86S0c7zkdHf5rGL0HROyxuvxQmtlDc5/ITtz5VIU
ZiQqGXmL6KuM9y5k839vF3lcoON9TDfBjoUxSHEkgyz7uKrwPdcngqUkd57ug9c5
BL1G09C7G2VZX5puChyx5wywUWGVZwUNHwKh/4frSf0bnBoS3YSV0/+DBEU8lwNt
et58Q3qK/BJLpMSffrkmC0zoilRWaSH0FRqS1AVpccYLto3VQdP+XYyITinat6Pw
K501JRfL5MFDxv3eVEXBbMNNhMWsJudKfHjLNIrNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUuDTD2D0Fazwl0EE56N7XGv67GTswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NhZmYwNmJlLTRhYzMtNDNlOS05ZmIwLTllOWM4MjExYzdjNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHLTskwti6GWJQbT5UJaIm1qBpfA
Qi9Qlzm1qHK/0FIOooOIoBJeR1NihSpksYXpmaV57F19RSIO/H9SBoyYQnoMyqWz
yRJ9d8jGqk9Jf533JIm1G50qVKwYwzl9NBqrUJspK7GKBjWPWNW9X+z0oms52AGy
vWe1OJ87gE8VpyaNTSYgsu9MrOkPkHSHkrQM1LVLyHOZasQBz8kiMqqLprj/pRJn
AlQaK4nfgWEJ8Pqb10jRSHNFudaUIDQJDYetJx2IV9x6iIaidPXlYX0vki73VRFP
iG/+XCgO1qtxBfwdv5kaCgTXxXJU/Aoq4ELNH1ZirYH9G4yWwWSVh21V3uA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:20 2024 by rpki-client on console-ams.rpki-client.org