Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dbc9aa58-f67a-457b-929a-bfc664fbe707.roa
File: dbc9aa58-f67a-457b-929a-bfc664fbe707.roa (raw, json)
Hash identifier: vLrTTZ1Xt69QC6pUdlTsWLqxRKzRIzb1jwc1YFCUuHU=
Subject key identifier: 0D:2B:BE:B7:F7:51:1B:2A:53:42:64:D3:1F:11:4D:E3:DD:1F:44:00
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6F263920ED0A755BFED49A4DFE1450026F301A4A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dbc9aa58-f67a-457b-929a-bfc664fbe707.roa
Signing time: Wed 04 Oct 2023 00:00:00 +0000
ROA not before: Wed 04 Oct 2023 00:00:00 +0000
ROA not after: Wed 08 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:26:39:20:ed:0a:75:5b:fe:d4:9a:4d:fe:14:50:02:6f:30:1a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 4 00:00:00 2023 GMT
Not After : Nov 8 23:59:59 2023 GMT
Subject: serialNumber=3722f2253c6f67a91dee16d60d5babc026957b06b8193d1ae590c829a703307d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:c1:81:f6:82:f4:3c:5e:e7:b3:a6:1c:a4:
ff:50:c6:29:f6:2a:c3:89:4f:93:46:d4:a3:3a:d8:
5c:b9:71:55:27:e4:5c:58:5a:a4:d8:5e:d0:f9:1c:
37:29:5b:a0:f3:aa:83:b8:04:ed:3f:e9:4f:5c:8c:
d2:3f:a5:1e:9a:8f:c1:54:1e:dc:84:32:89:6a:28:
81:43:ed:eb:b6:6b:3d:c1:5b:8c:20:07:4c:a1:dc:
cd:2e:de:ba:63:e8:03:fc:af:88:10:ff:42:72:da:
cd:cd:be:a0:95:77:ee:3e:bf:74:71:d6:b5:4b:fd:
1f:1e:c4:cb:6f:3a:b3:52:92:1a:9b:a9:77:47:c5:
99:bf:5a:f3:8c:c5:e3:18:78:73:d2:2b:a6:6b:2a:
08:77:39:15:18:f9:6e:b5:d4:1f:32:01:e1:12:19:
ef:e9:68:e6:02:07:9e:8c:39:2f:ba:8b:97:7f:7a:
fe:a8:57:97:21:b6:f3:6c:ea:21:70:11:7f:1b:18:
e8:cf:df:ec:58:83:d7:aa:52:4d:35:f1:72:6f:35:
96:b2:2f:e2:12:79:b0:ed:d8:f1:ca:1a:c9:17:41:
7b:37:9d:90:d4:4a:84:48:df:9c:20:06:9b:e9:53:
22:45:93:75:a0:44:df:7a:59:ed:a3:fd:33:12:3c:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2B:BE:B7:F7:51:1B:2A:53:42:64:D3:1F:11:4D:E3:DD:1F:44:00
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dbc9aa58-f67a-457b-929a-bfc664fbe707.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
80:56:e3:34:d2:87:53:46:f4:3b:53:8d:e8:26:64:a7:7a:84:
1c:66:59:bc:06:47:3d:5f:b8:0c:46:b3:8f:23:66:0b:08:78:
0f:b1:de:f4:25:04:80:fc:7a:81:9d:be:8c:09:ae:4d:32:ff:
2a:00:9f:46:a5:df:34:ce:8f:fd:46:e2:d7:85:a6:0f:f0:07:
81:57:af:5d:17:de:7e:de:df:7c:7a:40:11:a7:86:36:5a:be:
6b:ed:f0:a3:36:f5:65:6b:a7:36:1a:bf:54:5d:19:b2:6b:d6:
25:63:f4:c1:2f:19:36:25:7d:37:5b:fe:e7:a7:34:3e:96:41:
d6:ad:8f:33:c0:14:c6:8f:b4:c0:16:37:bb:74:9b:3f:c8:61:
e9:2c:63:cb:1a:f4:e2:39:c1:9e:60:19:1b:af:d6:6e:50:53:
d3:68:ab:83:1c:22:0d:8f:67:56:5a:77:54:47:d7:55:58:e3:
d8:48:67:2a:f0:03:12:36:39:e5:93:cf:3f:91:37:78:87:c3:
f7:0e:99:30:5d:0c:b8:5f:7c:31:d9:07:34:e1:ea:41:3b:65:
3f:d7:e0:1f:2f:aa:1f:03:5b:0b:c7:b8:cb:00:e0:44:d4:28:
60:97:92:4f:bf:83:51:24:77:15:aa:df:a3:35:c3:5c:cb:b0:
2f:17:61:f6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbyY5IO0KdVv+1JpN/hRQAm8wGkowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDA0MDAwMDAwWhcNMjMxMTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0AzNzIyZjIyNTNjNmY2N2E5MWRlZTE2ZDYwZDViYWJjMDI2
OTU3YjA2YjgxOTNkMWFlNTkwYzgyOWE3MDMzMDdkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5N8GB9oL0PF7ns6YcpP9Qxin2KsOJT5NG1KM62Fy5cVUn
5FxYWqTYXtD5HDcpW6DzqoO4BO0/6U9cjNI/pR6aj8FUHtyEMolqKIFD7eu2az3B
W4wgB0yh3M0u3rpj6AP8r4gQ/0Jy2s3NvqCVd+4+v3Rx1rVL/R8exMtvOrNSkhqb
qXdHxZm/WvOMxeMYeHPSK6ZrKgh3ORUY+W611B8yAeESGe/paOYCB56MOS+6i5d/
ev6oV5chtvNs6iFwEX8bGOjP3+xYg9eqUk018XJvNZayL+ISebDt2PHKGskXQXs3
nZDUSoRI35wgBpvpUyJFk3WgRN96We2j/TMSPGWjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDSu+t/dRGypTQmTTHxFN490fRAAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2RiYzlhYTU4LWY2N2EtNDU3Yi05MjlhLWJmYzY2NGZiZTcwNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIBW4zTSh1NG9DtTjegmZKd6hBxm
WbwGRz1fuAxGs48jZgsIeA+x3vQlBID8eoGdvowJrk0y/yoAn0al3zTOj/1G4teF
pg/wB4FXr10X3n7e33x6QBGnhjZavmvt8KM29WVrpzYav1RdGbJr1iVj9MEvGTYl
fTdb/uenND6WQdatjzPAFMaPtMAWN7t0mz/IYeksY8sa9OI5wZ5gGRuv1m5QU9No
q4McIg2PZ1Zad1RH11VY49hIZyrwAxI2OeWTzz+RN3iHw/cOmTBdDLhffDHZBzTh
6kE7ZT/X4B8vqh8DWwvHuMsA4ETUKGCXkk+/g1EkdxWq36M1w1zLsC8XYfY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:29 2024 by rpki-client on console-ams.rpki-client.org