Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f1a5ed15-94c4-495c-af8d-53478dd25fb0.roa
File: f1a5ed15-94c4-495c-af8d-53478dd25fb0.roa (raw, json)
Hash identifier: erLcpU2MBYYTW0CnigSWW7d78OXrZKxwmMS7XxMDSwY=
Subject key identifier: B7:4A:8D:30:61:AE:40:54:2E:FA:B3:38:CB:41:87:04:1E:9F:9F:90
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5665BE14E7EB68F7A9A360EE8349C60B4B52FA63
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f1a5ed15-94c4-495c-af8d-53478dd25fb0.roa
Signing time: Wed 02 Aug 2023 00:00:00 +0000
ROA not before: Wed 02 Aug 2023 00:00:00 +0000
ROA not after: Wed 06 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:65:be:14:e7:eb:68:f7:a9:a3:60:ee:83:49:c6:0b:4b:52:fa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 2 00:00:00 2023 GMT
Not After : Sep 6 23:59:59 2023 GMT
Subject: serialNumber=a800e25e7528fffecd807d989b864efc0f5b3af8f76a67639f7fdd6ed1a9966c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:6c:2e:c4:b6:60:94:ae:f9:0f:a6:68:2b:
da:07:01:f7:92:ce:53:2f:70:12:7f:72:34:47:78:
f1:7b:22:3b:19:44:82:78:17:c2:00:75:2f:98:41:
85:2e:84:41:19:ca:6f:25:0d:e5:26:3f:73:b6:97:
55:81:c8:40:ae:c8:c4:fb:dc:2e:0d:2d:ef:95:b4:
b2:67:7c:8d:5e:82:ff:6c:6e:93:9f:cf:9a:70:a3:
fb:b5:ed:d1:28:bc:e6:dc:44:03:4e:2a:d9:9a:9a:
16:f6:c0:d1:0b:de:c1:84:3b:f6:96:00:31:59:b3:
3c:3a:e0:ec:97:39:d1:b2:62:a1:94:bf:43:d5:b4:
1d:74:17:4a:f6:12:fb:6a:a6:3a:7b:8f:f4:3b:de:
7a:bc:8e:b2:82:6f:91:43:23:3b:b9:a5:48:13:4d:
c8:da:27:e0:9d:1a:4c:ef:b8:58:44:fd:22:9a:b9:
bc:69:54:7e:ab:3a:a4:01:3f:d8:e2:11:0e:c9:11:
ae:f3:0b:74:4d:4b:61:e1:5e:a3:92:e3:74:e9:3a:
f9:ba:4b:de:4e:80:8c:72:50:93:0a:f2:71:f2:31:
b3:be:c5:56:0f:71:d3:ec:e4:26:7b:e0:fe:4b:98:
cb:bd:7d:b7:15:14:7b:5b:c1:cf:a0:7d:d9:72:86:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4A:8D:30:61:AE:40:54:2E:FA:B3:38:CB:41:87:04:1E:9F:9F:90
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f1a5ed15-94c4-495c-af8d-53478dd25fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a1:ac:92:a3:fb:4e:97:76:45:94:04:82:3e:2a:b8:bf:e0:
7b:1b:ee:2e:37:18:5a:a9:63:fe:cd:34:f9:24:63:2b:7a:45:
3b:54:7f:20:51:23:7d:4c:e7:1e:f3:ee:48:eb:c1:a9:65:71:
be:66:cd:12:bd:3f:83:fc:28:cf:15:06:ca:bd:ef:b6:64:76:
89:e1:d4:16:24:8c:24:06:41:b3:a4:7e:11:80:3d:47:76:8d:
17:e8:ab:2d:7c:84:2b:57:f3:f2:45:a7:95:8a:79:68:2b:9c:
a8:10:76:82:f0:84:5e:8b:5c:02:af:b2:c7:6c:9e:26:53:b4:
e8:4f:bd:96:88:b2:f7:d6:d3:df:0d:19:a7:6e:fe:47:0f:42:
f0:c1:94:79:a6:3d:8e:36:5b:90:56:e1:dd:9e:2c:74:ae:a3:
6c:70:58:6e:78:1d:ec:f3:18:2c:5f:e6:10:5d:df:5e:b7:4b:
c5:7b:30:a1:c5:ba:16:e5:38:35:50:88:9d:6b:07:47:c6:6c:
e8:cb:df:42:4d:f3:83:d7:8a:b2:3d:ea:98:8b:1e:61:8c:da:
0a:c8:d7:af:3d:19:f8:fc:e0:b9:52:39:ab:e1:80:c1:29:77:
52:7b:43:78:c9:37:ca:5f:21:c6:d7:2d:28:10:b3:65:26:81:
52:a4:67:28
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVmW+FOfraPepo2Dug0nGC0tS+mMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODAyMDAwMDAwWhcNMjMwOTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0BhODAwZTI1ZTc1MjhmZmZlY2Q4MDdkOTg5Yjg2NGVmYzBm
NWIzYWY4Zjc2YTY3NjM5ZjdmZGQ2ZWQxYTk5NjZjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkYWwuxLZglK75D6ZoK9oHAfeSzlMvcBJ/cjRHePF7IjsZ
RIJ4F8IAdS+YQYUuhEEZym8lDeUmP3O2l1WByECuyMT73C4NLe+VtLJnfI1egv9s
bpOfz5pwo/u17dEovObcRANOKtmamhb2wNEL3sGEO/aWADFZszw64OyXOdGyYqGU
v0PVtB10F0r2Evtqpjp7j/Q73nq8jrKCb5FDIzu5pUgTTcjaJ+CdGkzvuFhE/SKa
ubxpVH6rOqQBP9jiEQ7JEa7zC3RNS2HhXqOS43TpOvm6S95OgIxyUJMK8nHyMbO+
xVYPcdPs5CZ74P5LmMu9fbcVFHtbwc+gfdlyhkG/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUt0qNMGGuQFQu+rM4y0GHBB6fn5AwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2YxYTVlZDE1LTk0YzQtNDk1Yy1hZjhkLTUzNDc4ZGQyNWZiMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADihrJKj+06XdkWUBII+Kri/4Hsb
7i43GFqpY/7NNPkkYyt6RTtUfyBRI31M5x7z7kjrwallcb5mzRK9P4P8KM8VBsq9
77Zkdonh1BYkjCQGQbOkfhGAPUd2jRfoqy18hCtX8/JFp5WKeWgrnKgQdoLwhF6L
XAKvssdsniZTtOhPvZaIsvfW098NGadu/kcPQvDBlHmmPY42W5BW4d2eLHSuo2xw
WG54HezzGCxf5hBd3163S8V7MKHFuhblODVQiJ1rB0fGbOjL30JN84PXirI96piL
HmGM2grI1689Gfj84LlSOavhgMEpd1J7Q3jJN8pfIcbXLSgQs2UmgVKkZyg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:35 2024 by rpki-client on console-ams.rpki-client.org