Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18fe18c3-79ea-4b87-80a2-4a730235335e.roa
File: 18fe18c3-79ea-4b87-80a2-4a730235335e.roa (raw, json)
Hash identifier: CMSz0DlKP9sET+fvXeXFLs3T4YzTYaLWRvJUFvexP1w=
Subject key identifier: 04:69:6D:23:FF:3B:C0:5A:E9:47:1F:41:88:69:98:87:13:D0:95:FC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0FB6D33FCC7D480F45B260A1612A39160A2E9F03
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18fe18c3-79ea-4b87-80a2-4a730235335e.roa
Signing time: Sat 14 Oct 2023 00:00:00 +0000
ROA not before: Sat 14 Oct 2023 00:00:00 +0000
ROA not after: Sat 18 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b6:d3:3f:cc:7d:48:0f:45:b2:60:a1:61:2a:39:16:0a:2e:9f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 14 00:00:00 2023 GMT
Not After : Nov 18 23:59:59 2023 GMT
Subject: serialNumber=9f04a91800700ae1face06e0fc8b804750cba3843a0d03411d1547fc6f6f29ec, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:a7:e0:aa:ba:5b:1e:d3:cc:28:42:1e:eb:
5e:b2:bd:dd:ec:23:e7:90:49:be:b1:41:42:bd:ee:
50:8b:c5:54:8e:98:f6:a7:0a:c3:7b:ac:fb:b1:ff:
5e:16:5d:9d:33:10:06:0a:14:0c:ea:2f:9f:5c:2e:
f7:30:36:0a:68:9e:59:c8:07:1d:ee:5c:3f:95:4d:
a2:12:ef:d7:1c:48:e1:fa:0b:50:55:47:74:6a:80:
39:ae:d8:88:cd:e4:07:42:39:f0:51:ad:fd:11:1b:
0c:29:d0:13:fa:76:01:08:60:9e:d2:15:bf:da:54:
82:98:26:17:73:de:5e:1c:57:0e:4e:dc:a8:87:3c:
d3:9f:aa:88:c9:56:61:c3:44:6b:8d:fb:e6:1e:6e:
53:5e:db:76:bb:91:a0:56:4e:ef:ba:ec:32:a0:46:
09:74:d3:5d:d1:c0:10:84:3a:6b:bf:13:e3:7b:da:
1b:a0:d9:63:c4:e6:b6:24:93:a5:ca:94:be:9c:44:
9a:88:6b:06:6c:4f:51:2b:84:02:a5:f7:74:be:b2:
e7:6e:66:0f:86:94:28:0e:b1:34:7f:92:71:45:ce:
b3:8c:bc:3a:7c:4b:13:f4:86:6c:7f:23:fd:c0:96:
2f:d1:dc:55:65:6c:0d:1c:7f:c5:29:de:e7:3c:df:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:69:6D:23:FF:3B:C0:5A:E9:47:1F:41:88:69:98:87:13:D0:95:FC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18fe18c3-79ea-4b87-80a2-4a730235335e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:29:91:d6:85:43:37:7f:6e:db:b9:38:3e:46:bb:21:03:67:
58:5b:b7:84:c1:e8:a2:f2:06:a0:1a:fe:03:3b:c7:c0:7f:c2:
c5:ac:f2:fc:1f:b0:fe:0c:46:e7:87:04:7d:01:8e:b9:c5:ab:
47:5a:48:1d:d2:d0:9f:a4:c2:e0:d7:1e:6f:e8:48:ba:b9:21:
36:bd:78:e6:f7:94:74:83:59:19:ea:2a:f1:cf:3a:3d:e2:b9:
7e:a6:35:28:fd:cb:09:84:06:51:4e:3c:3b:e9:9a:27:fd:ee:
57:37:c4:82:35:b1:b6:a1:86:b1:e8:f5:52:26:5d:d3:43:fc:
bf:2c:3f:20:e7:46:58:ba:10:ee:8f:15:9b:c1:1a:60:f7:5c:
09:10:84:db:76:b2:ec:02:45:ff:60:89:c9:d0:c4:f8:ab:71:
7f:96:78:f6:fd:b7:c4:7e:00:6e:c5:ab:a7:6e:b0:06:92:91:
35:18:a1:80:bb:61:ba:79:05:c8:3e:c2:03:7b:fa:ba:fd:1a:
69:b7:d5:a6:bb:b5:95:7f:40:08:f8:dc:01:46:75:a8:e5:73:
db:cc:d8:b9:22:f8:6f:8b:be:05:e9:8d:5d:14:15:d9:59:aa:
22:a4:49:54:1d:2b:e4:6a:83:55:01:a6:8f:d4:bf:65:ad:80:
5c:9d:83:91
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUD7bTP8x9SA9FsmChYSo5FgounwMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDE0MDAwMDAwWhcNMjMxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZjA0YTkxODAwNzAwYWUxZmFjZTA2ZTBmYzhiODA0NzUw
Y2JhMzg0M2EwZDAzNDExZDE1NDdmYzZmNmYyOWVjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQc6fgqrpbHtPMKEIe616yvd3sI+eQSb6xQUK97lCLxVSO
mPanCsN7rPux/14WXZ0zEAYKFAzqL59cLvcwNgponlnIBx3uXD+VTaIS79ccSOH6
C1BVR3RqgDmu2IjN5AdCOfBRrf0RGwwp0BP6dgEIYJ7SFb/aVIKYJhdz3l4cVw5O
3KiHPNOfqojJVmHDRGuN++YeblNe23a7kaBWTu+67DKgRgl0013RwBCEOmu/E+N7
2hug2WPE5rYkk6XKlL6cRJqIawZsT1ErhAKl93S+suduZg+GlCgOsTR/knFFzrOM
vDp8SxP0hmx/I/3Ali/R3FVlbA0cf8Up3uc839mbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUBGltI/87wFrpRx9BiGmYhxPQlfwwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzE4ZmUxOGMzLTc5ZWEtNGI4Ny04MGEyLTRhNzMwMjM1MzM1ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAH8pkdaFQzd/btu5OD5GuyEDZ1hb
t4TB6KLyBqAa/gM7x8B/wsWs8vwfsP4MRueHBH0BjrnFq0daSB3S0J+kwuDXHm/o
SLq5ITa9eOb3lHSDWRnqKvHPOj3iuX6mNSj9ywmEBlFOPDvpmif97lc3xII1sbah
hrHo9VImXdND/L8sPyDnRli6EO6PFZvBGmD3XAkQhNt2suwCRf9gicnQxPircX+W
ePb9t8R+AG7Fq6dusAaSkTUYoYC7Ybp5Bcg+wgN7+rr9Gmm31aa7tZV/QAj43AFG
dajlc9vM2Lki+G+LvgXpjV0UFdlZqiKkSVQdK+Rqg1UBpo/Uv2WtgFydg5E=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net