Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fa244864-fae5-4b83-8b80-e2f79760e166.roa
File: fa244864-fae5-4b83-8b80-e2f79760e166.roa (raw, json)
Hash identifier: 1vIR62cHVe/68UusMQRTap88UhpPBBzIUkVsrO7vRQA=
Subject key identifier: 8C:B3:F4:65:23:F6:6B:3C:E9:B1:8F:2A:94:45:3A:ED:FE:48:16:42
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 457BB70B1B8014E10E4F9802D6812F404BA97D4C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fa244864-fae5-4b83-8b80-e2f79760e166.roa
Signing time: Wed 06 Dec 2023 00:00:00 +0000
ROA not before: Wed 06 Dec 2023 00:00:00 +0000
ROA not after: Wed 10 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:7b:b7:0b:1b:80:14:e1:0e:4f:98:02:d6:81:2f:40:4b:a9:7d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 6 00:00:00 2023 GMT
Not After : Jan 10 23:59:59 2024 GMT
Subject: serialNumber=c55fd5e2a89749f167e1b5a716e63a7a49457539331170dbaeff5349b2738d38, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:7c:2d:9c:01:0f:24:b0:9f:f3:0f:bc:57:
de:21:cc:70:08:cd:78:d5:d6:a4:74:ed:38:63:44:
45:db:d2:95:c3:45:0c:08:f0:57:5d:3b:29:c5:4b:
12:40:bf:28:57:43:bc:f8:68:31:d6:49:5e:dd:1c:
f4:a3:10:18:d5:4c:1e:6b:a6:0e:2d:4c:f2:7f:1a:
4e:4e:15:47:50:c2:45:bd:a3:04:00:7b:60:87:57:
79:fd:02:45:a3:65:a9:24:0b:78:ff:f5:67:7d:69:
a9:ca:b9:bd:88:43:c4:f8:1e:4a:38:0c:74:d5:bd:
b2:c5:1d:78:77:79:b9:42:ae:dd:80:89:35:2e:60:
68:d9:c5:57:f8:00:b7:65:ca:b3:4c:e7:1b:5a:fb:
9f:10:e1:b9:67:ba:f5:94:8e:37:74:3a:e5:9c:ce:
04:c6:32:55:3d:cb:d0:5d:d6:56:1a:91:62:6a:3f:
bf:f7:6d:bf:c0:06:1d:5c:8c:03:ea:ab:1f:a8:ad:
6c:bf:88:b9:95:81:be:08:84:9e:ae:1c:78:c6:14:
49:8f:4c:85:94:cb:4b:64:c9:29:58:99:6d:3d:94:
ac:1a:f9:08:71:ca:45:88:48:0a:29:26:85:a1:c1:
4b:fa:05:5d:08:64:0b:4c:50:94:8e:e0:fd:d8:57:
89:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B3:F4:65:23:F6:6B:3C:E9:B1:8F:2A:94:45:3A:ED:FE:48:16:42
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fa244864-fae5-4b83-8b80-e2f79760e166.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f3:9b:3a:57:14:f6:22:c7:66:76:41:a9:0e:f8:62:3b:a4:
46:9a:d0:54:6d:5a:24:6a:11:92:c2:c1:5a:17:fa:fd:82:0c:
f5:6b:18:1c:7c:e7:6a:28:74:8f:6c:9f:fd:e5:d7:42:89:79:
69:64:e3:e5:52:69:46:d5:69:f5:78:6b:aa:4f:9f:48:cd:c9:
78:09:7f:2c:3f:05:6c:17:90:c9:62:6a:53:cc:51:91:09:dd:
5d:7c:e7:ac:f2:b8:75:e6:8f:83:90:ef:1d:f5:ba:65:eb:a0:
4d:c8:ed:54:a6:46:00:f9:04:09:f5:15:c8:5a:c7:e3:07:21:
44:3a:52:87:70:aa:ea:67:fe:ab:ab:5d:da:af:a5:cb:25:1a:
29:c9:18:7c:f8:1c:46:d0:31:6e:b3:b3:b4:e3:d7:c7:a2:ac:
9b:55:cc:96:07:f8:91:ff:94:d8:8a:0c:95:50:ba:72:3d:78:
3b:86:1c:f3:c0:04:94:8f:03:91:d0:06:0b:bc:e2:14:91:79:
95:1a:8d:f3:8f:88:45:39:88:5b:b0:30:1c:03:61:f6:6a:7e:
15:54:90:40:33:68:5b:8c:4a:62:9a:cd:e9:d1:71:b3:cd:cb:
61:8e:4e:13:9e:55:7e:d7:d9:c1:b0:e6:3e:86:a9:7f:14:2d:
af:4b:84:be
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURXu3CxuAFOEOT5gC1oEvQEupfUwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjA2MDAwMDAwWhcNMjQwMTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNTVmZDVlMmE4OTc0OWYxNjdlMWI1YTcxNmU2M2E3YTQ5
NDU3NTM5MzMxMTcwZGJhZWZmNTM0OWIyNzM4ZDM4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5/HwtnAEPJLCf8w+8V94hzHAIzXjV1qR07ThjREXb0pXD
RQwI8FddOynFSxJAvyhXQ7z4aDHWSV7dHPSjEBjVTB5rpg4tTPJ/Gk5OFUdQwkW9
owQAe2CHV3n9AkWjZakkC3j/9Wd9aanKub2IQ8T4Hko4DHTVvbLFHXh3eblCrt2A
iTUuYGjZxVf4ALdlyrNM5xta+58Q4blnuvWUjjd0OuWczgTGMlU9y9Bd1lYakWJq
P7/3bb/ABh1cjAPqqx+orWy/iLmVgb4IhJ6uHHjGFEmPTIWUy0tkySlYmW09lKwa
+QhxykWISAopJoWhwUv6BV0IZAtMUJSO4P3YV4lfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjLP0ZSP2azzpsY8qlEU67f5IFkIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2ZhMjQ0ODY0LWZhZTUtNGI4My04YjgwLWUyZjc5NzYwZTE2Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHrzmzpXFPYix2Z2QakO+GI7pEaa
0FRtWiRqEZLCwVoX+v2CDPVrGBx852oodI9sn/3l10KJeWlk4+VSaUbVafV4a6pP
n0jNyXgJfyw/BWwXkMlialPMUZEJ3V1856zyuHXmj4OQ7x31umXroE3I7VSmRgD5
BAn1Fchax+MHIUQ6Uodwqupn/qurXdqvpcslGinJGHz4HEbQMW6zs7Tj18eirJtV
zJYH+JH/lNiKDJVQunI9eDuGHPPABJSPA5HQBgu84hSReZUajfOPiEU5iFuwMBwD
YfZqfhVUkEAzaFuMSmKazenRcbPNy2GOThOeVX7X2cGw5j6GqX8ULa9LhL4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:36 2024 by rpki-client on console-ams.rpki-client.org