Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d7f6aad4-6ebc-4ab7-8f5c-d62690301bca.roa
File: d7f6aad4-6ebc-4ab7-8f5c-d62690301bca.roa (raw, json)
Hash identifier: EBN3sVKRaIGe7rg1oif3BHhCvbkGnwT5TRXvn2VLR8A=
Subject key identifier: B1:D3:6C:3A:26:E2:DE:3B:28:85:E9:58:2B:4D:85:5B:88:AA:F1:2D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5E634952767669F2BE9B4AFEB36E47B92C5B3617
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d7f6aad4-6ebc-4ab7-8f5c-d62690301bca.roa
Signing time: Tue 05 Dec 2023 00:00:00 +0000
ROA not before: Tue 05 Dec 2023 00:00:00 +0000
ROA not after: Tue 09 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:63:49:52:76:76:69:f2:be:9b:4a:fe:b3:6e:47:b9:2c:5b:36:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 5 00:00:00 2023 GMT
Not After : Jan 9 23:59:59 2024 GMT
Subject: serialNumber=40335aaf1e2dd24b2fcadcd4601896d545d5cfef9ecce9d0e857a8fbf72f629d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:bd:bb:8c:0a:c4:10:ab:5c:9c:08:84:f0:
94:15:0e:2b:58:6d:9f:ab:71:b9:8d:82:59:66:70:
42:58:56:4e:40:20:0c:26:1a:d0:77:82:a2:0d:1d:
6d:21:02:1c:6d:d7:74:41:f9:45:d3:e2:00:9f:45:
47:14:26:7e:f0:4b:d0:55:51:ea:29:8b:c5:a0:42:
bc:64:1e:b4:78:98:31:d0:e5:b4:e0:35:1a:79:52:
59:1f:d1:4e:b0:b0:86:06:52:3a:cf:25:bf:12:0b:
72:5a:a7:49:08:49:f7:d5:6a:c5:37:c0:c8:3c:61:
4b:10:ec:08:33:e2:f0:17:10:ff:bf:aa:e5:48:a6:
ec:61:1c:9a:74:2d:cb:86:e5:bf:96:e1:65:a7:c3:
19:e0:4c:91:b5:0a:32:65:ae:f7:9a:6c:13:9c:56:
d8:bb:d3:d7:1b:8e:e5:ba:00:03:94:d0:19:fe:36:
bf:5b:6c:16:a2:f6:d1:05:cf:fe:34:ac:1b:70:1c:
11:6e:9b:4f:e4:56:0c:52:03:7c:82:f1:32:51:0a:
77:bf:ab:e3:fd:c7:f8:67:ab:bb:df:45:78:a1:50:
80:bd:f9:4c:e2:2d:f9:18:14:0d:a2:32:1e:b9:fc:
01:ff:25:67:2e:e8:f8:c9:a3:ab:bd:72:c4:7b:f8:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D3:6C:3A:26:E2:DE:3B:28:85:E9:58:2B:4D:85:5B:88:AA:F1:2D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d7f6aad4-6ebc-4ab7-8f5c-d62690301bca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b4:b9:c6:f4:c9:a1:7c:5b:a9:dc:cb:d7:9c:6d:0f:2a:e4:
bf:34:b0:a5:1d:c0:e3:89:d3:26:e7:68:ba:02:80:88:47:e9:
1c:79:44:38:fb:55:e9:10:c9:6e:77:2c:bc:8e:ec:00:e9:cf:
6d:09:82:e4:61:48:e5:d6:1d:e3:63:56:2b:c6:72:62:5e:29:
2e:8b:38:7b:b3:90:ac:36:fa:db:ae:7e:5f:62:5d:d2:5e:a7:
9a:10:26:13:ea:18:49:d5:c8:c9:de:2d:46:5f:d3:17:0e:8a:
dc:9c:29:94:37:f7:45:56:74:47:97:9a:aa:1d:78:1d:b5:9f:
bc:33:ed:9e:94:6b:af:ca:e2:24:e3:04:a7:dc:ad:eb:a6:3f:
03:13:a2:88:7a:6d:73:3d:bc:6e:0c:02:6b:79:c4:1f:b2:12:
79:86:3d:f5:2c:84:e8:c8:0a:52:71:28:f7:82:1f:10:c1:b5:
93:80:b9:e3:b9:3f:0b:4a:b9:43:aa:dd:0d:9d:16:46:e8:f0:
62:80:e7:db:b8:cb:c0:14:76:b9:a4:4d:dd:32:d9:9c:01:3f:
36:6d:57:af:a4:5e:64:fc:ba:79:ec:b9:fb:01:bd:ca:f5:f2:
7c:4b:33:58:5c:22:44:54:4f:b5:a0:81:60:47:e3:9e:c0:4a:
af:1d:e1:41
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXmNJUnZ2afK+m0r+s25HuSxbNhcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjA1MDAwMDAwWhcNMjQwMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MDMzNWFhZjFlMmRkMjRiMmZjYWRjZDQ2MDE4OTZkNTQ1
ZDVjZmVmOWVjY2U5ZDBlODU3YThmYmY3MmY2MjlkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC46L27jArEEKtcnAiE8JQVDitYbZ+rcbmNgllmcEJYVk5A
IAwmGtB3gqINHW0hAhxt13RB+UXT4gCfRUcUJn7wS9BVUeopi8WgQrxkHrR4mDHQ
5bTgNRp5Ulkf0U6wsIYGUjrPJb8SC3Jap0kISffVasU3wMg8YUsQ7Agz4vAXEP+/
quVIpuxhHJp0LcuG5b+W4WWnwxngTJG1CjJlrveabBOcVti709cbjuW6AAOU0Bn+
Nr9bbBai9tEFz/40rBtwHBFum0/kVgxSA3yC8TJRCne/q+P9x/hnq7vfRXihUIC9
+UziLfkYFA2iMh65/AH/JWcu6PjJo6u9csR7+D/bAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUsdNsOibi3jsohelYK02FW4iq8S0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Q3ZjZhYWQ0LTZlYmMtNGFiNy04ZjVjLWQ2MjY5MDMwMWJjYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKy0ucb0yaF8W6ncy9ecbQ8q5L80
sKUdwOOJ0ybnaLoCgIhH6Rx5RDj7VekQyW53LLyO7ADpz20JguRhSOXWHeNjVivG
cmJeKS6LOHuzkKw2+tuufl9iXdJep5oQJhPqGEnVyMneLUZf0xcOitycKZQ390VW
dEeXmqodeB21n7wz7Z6Ua6/K4iTjBKfcreumPwMTooh6bXM9vG4MAmt5xB+yEnmG
PfUshOjIClJxKPeCHxDBtZOAueO5PwtKuUOq3Q2dFkbo8GKA59u4y8AUdrmkTd0y
2ZwBPzZtV6+kXmT8unnsufsBvcr18nxLM1hcIkRUT7WggWBH457ASq8d4UE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:46 2024 by rpki-client on console-fra.rpki-client.org