Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cdceebe4-f7bb-4100-81d7-d56e479c958f.roa
File: cdceebe4-f7bb-4100-81d7-d56e479c958f.roa (raw, json)
Hash identifier: 31Ey8QEyv16BbrCQnMKhlAUmJRcF+iuym1MQLfUhmGE=
Subject key identifier: 40:E8:9B:DB:BF:19:A8:12:8D:72:BD:AC:64:2D:19:36:99:61:F9:47
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 10E9D8CE35DBCA09A5237BDB8E77FA0A72A85B82
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cdceebe4-f7bb-4100-81d7-d56e479c958f.roa
Signing time: Tue 28 Nov 2023 00:00:00 +0000
ROA not before: Tue 28 Nov 2023 00:00:00 +0000
ROA not after: Tue 02 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e9:d8:ce:35:db:ca:09:a5:23:7b:db:8e:77:fa:0a:72:a8:5b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 28 00:00:00 2023 GMT
Not After : Jan 2 23:59:59 2024 GMT
Subject: serialNumber=70e9a9b0fdf36b8c87fae878a04da7c6ba95d96517deaffe4ac142f07f354f8a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ca:4b:40:0a:99:60:07:01:93:6e:d1:8e:4a:
7c:cf:81:59:98:60:55:2d:89:d0:dd:6c:dd:80:83:
9d:8f:db:a8:14:98:50:94:6d:c7:2d:fb:38:6b:c3:
f0:68:ab:c9:b6:92:d2:e6:b8:9c:bf:33:2d:63:f1:
b5:16:d2:42:d6:a5:8c:c8:2d:5b:9c:01:e4:9f:70:
bc:5c:20:07:a7:40:4e:7b:df:04:88:c0:dd:52:ea:
4f:11:5e:b8:92:f8:3c:8e:fa:c2:0e:40:09:08:6d:
5a:3c:c3:78:d8:e7:0f:bf:71:c3:3d:c0:f7:ec:ff:
3e:ce:d3:d5:b2:ba:18:2a:a0:c1:c9:11:13:1f:8b:
87:0e:10:f3:de:92:08:2f:49:63:a7:8d:29:66:62:
37:47:d1:63:6f:90:79:57:dd:c2:3b:b4:e7:a5:db:
2e:08:43:7b:1e:9b:d6:dc:78:f3:58:1a:e6:1d:03:
25:5a:8a:dd:b9:96:7e:ec:5e:42:a8:2c:6c:37:e2:
f0:a4:32:3e:ae:15:8a:f6:19:c3:f5:e9:89:0f:c7:
88:8f:1f:f6:17:17:8e:2a:02:27:c2:62:fe:5b:3f:
d5:2e:51:fd:6a:36:5f:c4:bb:13:f0:2e:76:0c:ec:
14:e5:86:9d:80:7a:77:62:0e:2e:f6:03:a2:4d:66:
ef:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E8:9B:DB:BF:19:A8:12:8D:72:BD:AC:64:2D:19:36:99:61:F9:47
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cdceebe4-f7bb-4100-81d7-d56e479c958f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
67:39:2d:eb:d5:8c:82:59:87:bf:f1:27:68:3a:e0:d4:83:cc:
e0:b1:c9:8a:d0:2e:51:22:c0:96:ec:76:d8:81:db:04:a5:2a:
a2:54:b6:d7:4d:7e:1e:2c:1a:70:12:d4:c4:de:31:52:2a:08:
9b:21:4f:2f:a0:98:8a:cf:79:db:de:55:fe:2a:c3:43:b8:06:
20:42:6e:cf:74:cf:7a:27:89:7c:64:af:b6:46:b8:cf:d6:30:
52:1f:3f:aa:5b:9c:27:1f:23:89:3b:42:21:d2:fd:a8:cc:f7:
19:72:9f:49:83:c6:86:39:bd:0e:c6:c6:3d:ab:6f:b5:0b:25:
5f:03:c8:e4:2d:da:a5:a6:ce:15:4c:f5:6e:e8:0b:76:cd:53:
ac:cf:a9:5f:5a:f7:61:a0:64:67:e2:38:d1:a0:19:d8:d5:b2:
d6:ca:92:c8:74:8e:a9:68:a2:a1:9e:09:14:a0:58:34:43:2f:
fa:99:11:5c:39:31:dc:23:ad:59:88:75:a2:05:ab:b4:83:45:
d0:72:22:5f:6e:6a:cf:b4:da:2f:4b:b8:65:cf:cb:41:f4:c0:
d4:be:40:57:e0:79:10:f8:18:fc:31:38:55:f3:53:75:a0:49:
93:2b:28:38:c2:b9:6e:b2:11:fc:13:3d:85:0a:ed:a5:dd:90:
dc:45:15:f9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEOnYzjXbygmlI3vbjnf6CnKoW4IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTI4MDAwMDAwWhcNMjQwMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3MGU5YTliMGZkZjM2YjhjODdmYWU4NzhhMDRkYTdjNmJh
OTVkOTY1MTdkZWFmZmU0YWMxNDJmMDdmMzU0ZjhhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbyktACplgBwGTbtGOSnzPgVmYYFUtidDdbN2Ag52P26gU
mFCUbcct+zhrw/Boq8m2ktLmuJy/My1j8bUW0kLWpYzILVucAeSfcLxcIAenQE57
3wSIwN1S6k8RXriS+DyO+sIOQAkIbVo8w3jY5w+/ccM9wPfs/z7O09WyuhgqoMHJ
ERMfi4cOEPPekggvSWOnjSlmYjdH0WNvkHlX3cI7tOel2y4IQ3sem9bcePNYGuYd
AyVait25ln7sXkKoLGw34vCkMj6uFYr2GcP16YkPx4iPH/YXF44qAifCYv5bP9Uu
Uf1qNl/EuxPwLnYM7BTlhp2AendiDi72A6JNZu+ZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUQOib278ZqBKNcr2sZC0ZNplh+UcwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NkY2VlYmU0LWY3YmItNDEwMC04MWQ3LWQ1NmU0NzljOTU4Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGc5LevVjIJZh7/xJ2g64NSDzOCx
yYrQLlEiwJbsdtiB2wSlKqJUttdNfh4sGnAS1MTeMVIqCJshTy+gmIrPedveVf4q
w0O4BiBCbs90z3oniXxkr7ZGuM/WMFIfP6pbnCcfI4k7QiHS/ajM9xlyn0mDxoY5
vQ7Gxj2rb7ULJV8DyOQt2qWmzhVM9W7oC3bNU6zPqV9a92GgZGfiONGgGdjVstbK
ksh0jqlooqGeCRSgWDRDL/qZEVw5MdwjrVmIdaIFq7SDRdByIl9uas+02i9LuGXP
y0H0wNS+QFfgeRD4GPwxOFXzU3WgSZMrKDjCuW6yEfwTPYUK7aXdkNxFFfk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:45 2024 by rpki-client on console-fra.rpki-client.org