Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1a93ac3f-a907-45b3-b358-4a433a958861.roa
File: 1a93ac3f-a907-45b3-b358-4a433a958861.roa (raw, json)
Hash identifier: V/LNbr1iMmEYmg8XhXFyuLMBNWTFs+ocfE1n2aFp3Kk=
Subject key identifier: 1B:43:38:C8:5F:B2:38:8A:DF:06:57:C1:A7:8C:EC:46:72:94:A1:DA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 15EDAC3A41D397F6DED536043F3378EF548FC009
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1a93ac3f-a907-45b3-b358-4a433a958861.roa
Signing time: Wed 11 Oct 2023 00:00:00 +0000
ROA not before: Wed 11 Oct 2023 00:00:00 +0000
ROA not after: Wed 15 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ed:ac:3a:41:d3:97:f6:de:d5:36:04:3f:33:78:ef:54:8f:c0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 11 00:00:00 2023 GMT
Not After : Nov 15 23:59:59 2023 GMT
Subject: serialNumber=4b19bd7e01b6c8858acf8905e600fbc24046565266612834ea4eab7c52af3995, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d9:b9:02:76:7f:3c:f6:e5:25:cb:17:40:38:
6b:0a:41:98:e4:cc:52:6a:3a:57:15:c4:c0:6f:56:
ba:0f:1f:b8:b6:9d:34:45:70:64:02:6c:29:a3:73:
2f:30:a9:25:39:55:84:1a:9c:04:f4:47:7a:50:4a:
91:02:70:00:23:24:92:ad:89:5c:fb:af:d9:cf:a0:
cd:9f:ad:68:3e:09:c3:cc:42:fc:5b:ed:e9:3c:96:
86:2f:47:a5:e7:ab:3c:41:d5:1a:d6:ed:56:2e:08:
77:a6:e3:40:f2:6e:4a:8a:40:a0:7f:f0:18:bf:c6:
2a:20:53:3f:fe:01:89:e3:d3:a9:e0:cc:10:29:1e:
6a:c2:9c:40:4c:45:a8:b7:7d:ec:3b:74:93:9c:41:
98:a3:cd:52:7e:3d:32:6d:0c:bc:72:a5:a6:e5:e7:
e4:09:be:ad:df:5a:da:b0:31:a6:99:3d:fb:56:8a:
d4:a1:6a:b8:ed:0f:2a:c1:61:7d:db:3b:91:71:21:
51:ca:4c:77:46:f2:2f:1e:8a:90:3e:a9:15:5b:af:
c3:b4:7f:d8:24:56:ba:d5:01:d1:46:cc:33:7c:d4:
6e:83:a9:0b:91:b5:27:b4:fb:65:d3:59:82:ac:19:
c7:96:a5:4e:f4:16:92:55:09:77:b6:45:24:1a:10:
a4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:43:38:C8:5F:B2:38:8A:DF:06:57:C1:A7:8C:EC:46:72:94:A1:DA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1a93ac3f-a907-45b3-b358-4a433a958861.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4b:ab:89:b3:c5:13:1b:74:f8:59:a9:25:a9:2f:dd:55:02:
5c:2d:de:d2:e4:77:7c:d7:a4:13:7f:c5:0d:86:fd:73:78:1d:
87:d3:3b:bd:a6:b4:49:86:41:b1:d7:92:b4:fd:af:94:ba:9a:
5d:18:a1:e8:7a:45:cf:23:e4:21:ae:65:53:24:46:6e:65:26:
ac:2d:25:94:3c:1e:54:7d:31:40:1b:bd:bc:1e:41:d4:ed:63:
96:99:50:c6:14:fe:5a:fc:3b:1e:f5:fa:28:44:a0:2b:be:52:
14:37:d6:3f:0f:1c:8d:31:44:43:d7:03:09:f7:63:92:2e:ea:
0c:8b:d6:2e:d1:e6:d0:44:2d:34:6c:ec:88:8d:6c:53:88:62:
3d:28:d1:4d:9a:6c:87:99:91:dc:e6:65:1d:6f:85:e0:0f:db:
c4:98:71:8b:9b:9e:c1:23:6b:7c:c9:e3:e8:a9:32:12:75:75:
52:da:41:30:21:f9:f8:5b:36:bc:05:2e:5c:15:eb:1c:23:1e:
6d:b9:85:cd:8a:5d:67:49:60:dc:9c:05:c1:ea:ce:60:85:0c:
f6:52:88:9e:75:0f:c4:d9:2e:a1:c2:d5:e3:3d:ec:62:3d:28:
36:f2:c7:29:2e:e1:67:1b:07:05:1f:f0:c5:7d:43:42:7d:c7:
0b:0d:bc:9b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFe2sOkHTl/be1TYEPzN471SPwAkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDExMDAwMDAwWhcNMjMxMTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YjE5YmQ3ZTAxYjZjODg1OGFjZjg5MDVlNjAwZmJjMjQw
NDY1NjUyNjY2MTI4MzRlYTRlYWI3YzUyYWYzOTk1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDb2bkCdn889uUlyxdAOGsKQZjkzFJqOlcVxMBvVroPH7i2
nTRFcGQCbCmjcy8wqSU5VYQanAT0R3pQSpECcAAjJJKtiVz7r9nPoM2frWg+CcPM
Qvxb7ek8loYvR6XnqzxB1RrW7VYuCHem40DybkqKQKB/8Bi/xiogUz/+AYnj06ng
zBApHmrCnEBMRai3few7dJOcQZijzVJ+PTJtDLxypabl5+QJvq3fWtqwMaaZPftW
itSharjtDyrBYX3bO5FxIVHKTHdG8i8eipA+qRVbr8O0f9gkVrrVAdFGzDN81G6D
qQuRtSe0+2XTWYKsGceWpU70FpJVCXe2RSQaEKRFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUG0M4yF+yOIrfBlfBp4zsRnKUodowHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzFhOTNhYzNmLWE5MDctNDViMy1iMzU4LTRhNDMzYTk1ODg2MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADZLq4mzxRMbdPhZqSWpL91VAlwt
3tLkd3zXpBN/xQ2G/XN4HYfTO72mtEmGQbHXkrT9r5S6ml0Yoeh6Rc8j5CGuZVMk
Rm5lJqwtJZQ8HlR9MUAbvbweQdTtY5aZUMYU/lr8Ox71+ihEoCu+UhQ31j8PHI0x
REPXAwn3Y5Iu6gyL1i7R5tBELTRs7IiNbFOIYj0o0U2abIeZkdzmZR1vheAP28SY
cYubnsEja3zJ4+ipMhJ1dVLaQTAh+fhbNrwFLlwV6xwjHm25hc2KXWdJYNycBcHq
zmCFDPZSiJ51D8TZLqHC1eM97GI9KDbyxyku4WcbBwUf8MV9Q0J9xwsNvJs=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net