Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01665ed3-b01f-4631-9431-745656499f1c.roa
File: 01665ed3-b01f-4631-9431-745656499f1c.roa (raw, json)
Hash identifier: KNW84+3Gblf3miGswGGYyIeudKCUwnOc1O+fFhuTbVE=
Subject key identifier: D2:10:71:FE:6B:3F:6C:4C:C0:62:53:A4:CD:BE:D7:FD:C3:79:0D:AE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 708AF7B57DEEDD28645DC42F4AD0283D8CB2B877
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01665ed3-b01f-4631-9431-745656499f1c.roa
Signing time: Sat 29 Jul 2023 00:00:00 +0000
ROA not before: Sat 29 Jul 2023 00:00:00 +0000
ROA not after: Sat 02 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:8a:f7:b5:7d:ee:dd:28:64:5d:c4:2f:4a:d0:28:3d:8c:b2:b8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 29 00:00:00 2023 GMT
Not After : Sep 2 23:59:59 2023 GMT
Subject: serialNumber=efcf555023ab192ecf21def9b1dd48e184f0c35d468884fa4d412747957d201a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:7c:69:f8:e4:09:e8:dd:72:50:4c:0e:42:
9f:43:63:4f:44:3b:c2:11:a4:f2:fc:4b:fa:7a:d4:
0d:0e:ad:ca:67:29:8a:73:13:0e:c9:cd:de:65:0d:
90:6a:63:e5:46:af:64:55:d1:e3:3a:8d:15:e2:aa:
ab:a3:cf:e4:b9:a6:27:85:7e:51:ff:74:e0:42:47:
07:32:d6:05:95:52:90:1d:67:76:8c:90:90:d2:45:
6e:c3:a8:ee:e6:2c:51:50:51:5e:9a:19:4c:a5:a0:
25:b1:52:98:d8:e8:13:e5:13:cb:69:d0:29:c7:17:
89:14:6b:6d:c7:79:20:87:33:5b:3a:89:c3:7b:59:
51:b3:81:b4:80:d3:6e:e3:51:2b:10:a8:62:f3:77:
b0:4b:41:66:fe:c5:86:75:22:60:db:93:15:a2:f3:
df:a4:72:7e:0e:d9:43:79:b8:70:63:33:63:40:7a:
c7:a2:73:0f:4e:c9:4b:9f:36:9c:ee:32:43:d0:fc:
b1:f9:64:6f:09:57:95:0c:28:4b:22:50:37:f5:d7:
75:1e:47:af:b8:4d:de:fe:94:cf:2c:e9:2e:32:1e:
a3:59:29:26:bb:d4:e6:33:9e:43:c1:0d:3f:0e:66:
05:3d:f2:46:06:ac:1f:59:57:9f:1e:a9:5f:2d:ef:
0c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:10:71:FE:6B:3F:6C:4C:C0:62:53:A4:CD:BE:D7:FD:C3:79:0D:AE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01665ed3-b01f-4631-9431-745656499f1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
11:07:37:f3:b8:1e:45:8b:2e:8c:ce:3b:a9:c3:1d:ca:67:0e:
8e:3c:8c:86:8e:66:2a:94:67:ee:7a:da:38:14:2e:9a:e0:c4:
11:bf:c0:15:0b:b0:ca:82:7c:71:03:ea:8e:01:3b:e4:29:93:
3a:dd:67:49:c5:21:3c:99:68:d4:45:14:53:b3:12:d9:fc:e6:
e6:81:e3:3b:61:12:c5:5f:49:24:5d:73:ec:a5:74:87:e5:e1:
4b:cb:ae:c8:cf:e9:52:9e:82:57:b3:b1:5a:a1:0c:c2:38:4b:
b6:5d:2d:53:ec:dc:c2:a0:c9:e0:74:8a:81:83:50:e2:f7:24:
7a:57:01:85:80:e4:66:c9:29:67:c4:e2:ed:40:43:8e:f2:53:
c2:be:8a:f7:62:d7:bf:12:04:a9:f0:5a:3f:0c:e2:55:de:e0:
56:26:76:99:c6:9b:6c:51:20:70:b6:7a:ce:3d:1a:2d:b7:c4:
dc:f8:50:9e:fc:99:86:18:b4:c7:58:b8:0e:be:42:17:34:00:
11:b5:08:e4:eb:6b:1f:43:02:15:36:38:d9:f3:1e:95:79:39:
16:c0:ad:37:02:47:be:44:1b:00:72:61:ae:ee:3e:fb:33:b8:
30:f4:cd:47:3b:4a:d3:a4:b8:4d:04:1f:5e:92:2f:b3:13:9b:
62:43:27:42
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcIr3tX3u3ShkXcQvStAoPYyyuHcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzI5MDAwMDAwWhcNMjMwOTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZmNmNTU1MDIzYWIxOTJlY2YyMWRlZjliMWRkNDhlMTg0
ZjBjMzVkNDY4ODg0ZmE0ZDQxMjc0Nzk1N2QyMDFhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3TXxp+OQJ6N1yUEwOQp9DY09EO8IRpPL8S/p61A0Orcpn
KYpzEw7Jzd5lDZBqY+VGr2RV0eM6jRXiqqujz+S5pieFflH/dOBCRwcy1gWVUpAd
Z3aMkJDSRW7DqO7mLFFQUV6aGUyloCWxUpjY6BPlE8tp0CnHF4kUa23HeSCHM1s6
icN7WVGzgbSA027jUSsQqGLzd7BLQWb+xYZ1ImDbkxWi89+kcn4O2UN5uHBjM2NA
eseicw9OyUufNpzuMkPQ/LH5ZG8JV5UMKEsiUDf113UeR6+4Td7+lM8s6S4yHqNZ
KSa71OYznkPBDT8OZgU98kYGrB9ZV58eqV8t7wxnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0hBx/ms/bEzAYlOkzb7X/cN5Da4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzAxNjY1ZWQzLWIwMWYtNDYzMS05NDMxLTc0NTY1NjQ5OWYxYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABEHN/O4HkWLLozOO6nDHcpnDo48
jIaOZiqUZ+562jgULprgxBG/wBULsMqCfHED6o4BO+QpkzrdZ0nFITyZaNRFFFOz
Etn85uaB4zthEsVfSSRdc+yldIfl4UvLrsjP6VKeglezsVqhDMI4S7ZdLVPs3MKg
yeB0ioGDUOL3JHpXAYWA5GbJKWfE4u1AQ47yU8K+ivdi178SBKnwWj8M4lXe4FYm
dpnGm2xRIHC2es49Gi23xNz4UJ78mYYYtMdYuA6+Qhc0ABG1COTrax9DAhU2ONnz
HpV5ORbArTcCR75EGwByYa7uPvszuDD0zUc7StOkuE0EH16SL7MTm2JDJ0I=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:04 2023 by rpki-client on console.sobornost.net