Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1a42d4b1-5b34-42ac-96de-0f2b3779006c.roa
File: 1a42d4b1-5b34-42ac-96de-0f2b3779006c.roa (raw, json)
Hash identifier: pemU6SqIE1xzx+3PrV7VAd30SMXlOt29F5QY352uyxE=
Subject key identifier: 19:DD:B5:55:F0:B9:8F:7A:BB:76:DD:D1:15:50:E4:1E:0F:A3:A9:B2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2B8AD1134D09D565C23286F2C0BB3AE4FB4A6351
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1a42d4b1-5b34-42ac-96de-0f2b3779006c.roa
Signing time: Thu 09 Nov 2023 00:00:00 +0000
ROA not before: Thu 09 Nov 2023 00:00:00 +0000
ROA not after: Thu 14 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:8a:d1:13:4d:09:d5:65:c2:32:86:f2:c0:bb:3a:e4:fb:4a:63:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 9 00:00:00 2023 GMT
Not After : Dec 14 23:59:59 2023 GMT
Subject: serialNumber=ea1a8f05cc18b1db6e9e84713ab026652b98ac6dea697992308eaa56d38eb984, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:0c:ee:06:3f:34:3c:5b:d5:4c:bf:e6:8d:
df:48:be:94:85:24:e7:ae:86:8a:5e:0a:62:72:fb:
bb:3a:9f:c3:c8:71:e9:0e:b6:bb:8c:ca:7e:17:db:
02:9a:24:85:29:ae:3b:00:48:9e:47:94:3b:20:1b:
7e:df:dd:89:3c:30:f2:9c:73:3d:94:12:9d:a0:27:
6e:11:e5:73:1f:1a:93:3b:b3:83:33:1a:9b:60:0e:
f2:c1:58:45:fc:e9:a8:ea:05:3a:40:71:9f:6c:c8:
ed:77:b9:7b:fd:4c:b9:5b:26:f9:02:53:4f:fb:b3:
38:d6:e6:63:94:13:0c:91:d2:0b:57:18:91:6e:a1:
44:2f:f9:2f:c6:31:b4:0d:fb:5c:56:96:71:83:e1:
fe:f6:bc:b9:07:85:5d:f0:af:dc:1d:00:1c:f3:fb:
fc:73:9b:f2:94:10:ad:56:21:ca:28:5e:6f:7d:a8:
6b:75:70:ce:29:83:f8:02:2e:30:7c:de:97:60:1b:
13:ee:6b:da:ec:05:85:25:e9:4e:0e:79:1e:5d:2d:
6d:74:fe:82:b5:d4:af:3a:0f:f3:50:d6:1f:b5:db:
6e:72:98:fb:0d:6c:38:da:d4:02:64:99:e3:14:5f:
a1:9f:23:de:98:64:17:38:ba:48:d1:2b:ed:ba:10:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DD:B5:55:F0:B9:8F:7A:BB:76:DD:D1:15:50:E4:1E:0F:A3:A9:B2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1a42d4b1-5b34-42ac-96de-0f2b3779006c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
20:bd:6b:13:08:2e:e1:a6:c4:c4:7f:02:63:91:78:e8:2b:dd:
f5:5f:0b:fb:55:cc:34:d7:52:b0:1c:a8:a1:fa:da:47:5b:34:
65:22:6d:3f:6f:b6:fe:16:90:4f:0b:94:89:27:ff:78:1a:70:
77:fa:bf:22:d9:b0:30:10:84:9c:58:79:1e:0e:d7:4d:a8:c4:
2f:8a:c7:b0:25:f6:68:6a:45:e3:cb:cc:30:19:32:23:6c:83:
af:cc:ee:ef:be:10:f6:f6:ca:2c:b2:91:7e:ce:42:73:0d:4c:
e1:d3:d6:8a:35:6e:a0:38:34:f3:fc:df:e7:06:a1:f7:7f:00:
75:32:35:8c:7e:8d:da:6d:21:9c:7e:25:2c:c5:d1:92:0e:65:
89:d0:1a:52:5c:24:9f:3c:ed:e2:7e:bd:3d:94:71:5d:9f:db:
47:5a:2d:d0:51:66:5d:6d:d0:10:c0:e7:e9:36:48:45:f1:c4:
56:18:e5:06:d3:23:c9:dc:d9:22:2d:52:ce:d9:a7:0d:87:9f:
7d:52:40:84:be:62:85:dd:3d:97:da:99:68:7b:c2:58:6e:6b:
b0:97:bf:3a:9f:cb:c9:b7:2e:14:44:82:14:3c:a2:e0:6d:01:
8b:f3:17:83:26:99:41:73:cb:b0:a2:74:d9:71:41:e1:bd:00:
c5:3f:d8:2a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUK4rRE00J1WXCMobywLs65PtKY1EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTA5MDAwMDAwWhcNMjMxMjE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYTFhOGYwNWNjMThiMWRiNmU5ZTg0NzEzYWIwMjY2NTJi
OThhYzZkZWE2OTc5OTIzMDhlYWE1NmQzOGViOTg0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwAAzuBj80PFvVTL/mjd9IvpSFJOeuhopeCmJy+7s6n8PI
cekOtruMyn4X2wKaJIUprjsASJ5HlDsgG37f3Yk8MPKccz2UEp2gJ24R5XMfGpM7
s4MzGptgDvLBWEX86ajqBTpAcZ9syO13uXv9TLlbJvkCU0/7szjW5mOUEwyR0gtX
GJFuoUQv+S/GMbQN+1xWlnGD4f72vLkHhV3wr9wdABzz+/xzm/KUEK1WIcooXm99
qGt1cM4pg/gCLjB83pdgGxPua9rsBYUl6U4OeR5dLW10/oK11K86D/NQ1h+1225y
mPsNbDja1AJkmeMUX6GfI96YZBc4ukjRK+26EAPDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGd21VfC5j3q7dt3RFVDkHg+jqbIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzFhNDJkNGIxLTViMzQtNDJhYy05NmRlLTBmMmIzNzc5MDA2Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACC9axMILuGmxMR/AmOReOgr3fVf
C/tVzDTXUrAcqKH62kdbNGUibT9vtv4WkE8LlIkn/3gacHf6vyLZsDAQhJxYeR4O
102oxC+Kx7Al9mhqRePLzDAZMiNsg6/M7u++EPb2yiyykX7OQnMNTOHT1oo1bqA4
NPP83+cGofd/AHUyNYx+jdptIZx+JSzF0ZIOZYnQGlJcJJ887eJ+vT2UcV2f20da
LdBRZl1t0BDA5+k2SEXxxFYY5QbTI8nc2SItUs7Zpw2Hn31SQIS+YoXdPZfamWh7
wlhua7CXvzqfy8m3LhREghQ8ouBtAYvzF4MmmUFzy7CidNlxQeG9AMU/2Co=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net