Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f3a73aa6-e9ab-4945-8d3c-936927b6347a.roa
File: f3a73aa6-e9ab-4945-8d3c-936927b6347a.roa (raw, json)
Hash identifier: +89bPxf5pn6lJWrpjYUyB5/NxwJ39cJAhpHeazPcd5k=
Subject key identifier: EE:03:0F:4F:D8:DB:2A:17:56:19:B3:E1:83:A8:6C:85:99:CF:85:5F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6E2101E10E65F271DBF0C9041250895F7CE701DA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f3a73aa6-e9ab-4945-8d3c-936927b6347a.roa
Signing time: Thu 02 Nov 2023 00:00:00 +0000
ROA not before: Thu 02 Nov 2023 00:00:00 +0000
ROA not after: Thu 07 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:21:01:e1:0e:65:f2:71:db:f0:c9:04:12:50:89:5f:7c:e7:01:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 2 00:00:00 2023 GMT
Not After : Dec 7 23:59:59 2023 GMT
Subject: serialNumber=719d9bededf03b1738fd06e2e973a8f18d59e3a09d569f92e2dd6e1b6f30c9b3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:85:59:40:25:a2:b0:f0:3e:81:6b:44:3c:
22:5f:b7:24:d4:35:7f:53:12:ec:1b:74:e7:8a:0d:
01:cc:ab:3c:e0:e3:1e:f9:b5:d0:fc:fe:6c:4c:01:
f8:27:1b:d3:a3:d7:ac:fb:5c:71:94:90:2b:e2:4c:
61:ad:62:81:25:ed:a9:eb:93:ba:25:b1:21:1a:9e:
2c:20:c7:0a:b2:c6:ca:34:0f:f9:b6:96:2d:fb:41:
33:b3:cc:6a:8d:b6:d0:c9:76:60:34:94:fa:87:5f:
3b:ea:14:cc:16:74:73:f5:e2:64:d1:ff:90:cf:59:
b9:90:f1:b5:b7:90:c7:88:ee:34:2e:64:7d:e8:4e:
d0:52:64:bc:d1:72:25:9b:99:51:96:bc:00:38:40:
e7:a5:f9:a1:8e:23:73:2c:a2:64:20:a9:7d:19:56:
91:2b:cc:54:10:c7:cd:45:b4:aa:43:d9:42:08:44:
0e:4f:aa:bb:2a:e4:72:ef:6f:a0:80:e5:82:42:e1:
72:ce:2a:62:d6:57:a9:d1:5a:fb:20:b8:3c:fa:88:
86:1f:01:8a:5f:f0:05:be:12:b0:94:7c:e3:ea:09:
35:44:09:9e:26:ab:f4:32:ec:b8:b2:79:c6:cf:0f:
db:62:3f:c6:e2:f0:60:23:c6:30:71:4c:64:67:7f:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:03:0F:4F:D8:DB:2A:17:56:19:B3:E1:83:A8:6C:85:99:CF:85:5F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f3a73aa6-e9ab-4945-8d3c-936927b6347a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:12:b9:fc:71:24:0e:15:6b:88:53:07:24:c3:0e:08:11:c7:
25:50:4a:e0:fb:2a:be:08:78:22:af:f1:08:9f:f8:ba:81:ef:
6e:e8:22:72:a2:79:be:4b:ce:8a:c2:d0:a1:6f:f0:c3:d9:3b:
c6:80:ca:9e:59:6f:c9:10:a6:77:06:64:b4:30:7d:89:f1:00:
48:4a:e3:1e:97:bd:50:b0:1a:b6:4b:ad:8f:f8:1a:92:eb:13:
c1:6c:06:57:88:ae:cd:1d:1f:7c:46:49:d6:1d:1b:c0:de:2f:
39:f9:33:24:88:87:b6:7e:b2:e6:c0:d5:d9:51:99:63:ad:dc:
44:55:51:61:bd:d2:79:0f:e1:13:1d:d0:81:5d:df:00:db:aa:
c9:50:db:b7:89:f2:9d:71:c7:9d:0b:da:6c:e0:c9:e3:b9:23:
eb:b9:1d:a5:d4:af:8d:36:15:4b:b7:36:a9:a1:35:22:2d:6d:
39:35:56:a8:cb:d5:64:95:c7:45:9f:af:1d:84:99:f3:16:5b:
f2:21:46:97:29:99:d5:2f:ff:5b:d8:00:c5:fa:94:56:3f:b7:
1e:b9:de:ed:96:7b:6d:4a:13:41:a8:f8:57:0d:d8:97:2d:85:
22:90:27:a3:0f:5c:d9:98:44:f0:7b:1b:4b:74:1c:09:1e:86:
96:3f:d5:0b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbiEB4Q5l8nHb8MkEElCJX3znAdowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTAyMDAwMDAwWhcNMjMxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MTlkOWJlZGVkZjAzYjE3MzhmZDA2ZTJlOTczYThmMThk
NTllM2EwOWQ1NjlmOTJlMmRkNmUxYjZmMzBjOWIzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7hYVZQCWisPA+gWtEPCJftyTUNX9TEuwbdOeKDQHMqzzg
4x75tdD8/mxMAfgnG9Oj16z7XHGUkCviTGGtYoEl7anrk7olsSEaniwgxwqyxso0
D/m2li37QTOzzGqNttDJdmA0lPqHXzvqFMwWdHP14mTR/5DPWbmQ8bW3kMeI7jQu
ZH3oTtBSZLzRciWbmVGWvAA4QOel+aGOI3MsomQgqX0ZVpErzFQQx81FtKpD2UII
RA5Pqrsq5HLvb6CA5YJC4XLOKmLWV6nRWvsguDz6iIYfAYpf8AW+ErCUfOPqCTVE
CZ4mq/Qy7LiyecbPD9tiP8bi8GAjxjBxTGRnfyaHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU7gMPT9jbKhdWGbPhg6hshZnPhV8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2YzYTczYWE2LWU5YWItNDk0NS04ZDNjLTkzNjkyN2I2MzQ3YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAASufxxJA4Va4hTByTDDggRxyVQ
SuD7Kr4IeCKv8Qif+LqB727oInKieb5LzorC0KFv8MPZO8aAyp5Zb8kQpncGZLQw
fYnxAEhK4x6XvVCwGrZLrY/4GpLrE8FsBleIrs0dH3xGSdYdG8DeLzn5MySIh7Z+
subA1dlRmWOt3ERVUWG90nkP4RMd0IFd3wDbqslQ27eJ8p1xx50L2mzgyeO5I+u5
HaXUr402FUu3NqmhNSItbTk1VqjL1WSVx0Wfrx2EmfMWW/IhRpcpmdUv/1vYAMX6
lFY/tx653u2We21KE0Go+FcN2JcthSKQJ6MPXNmYRPB7G0t0HAkehpY/1Qs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:35 2024 by rpki-client on console-ams.rpki-client.org