Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1e4ead12-6429-4635-9fd2-8ceb4cdc6e95.roa
File: 1e4ead12-6429-4635-9fd2-8ceb4cdc6e95.roa (raw, json)
Hash identifier: TJ/vo21kO+1i6qQxUlA3bCWMDk6m5jvjzHthOFd82d4=
Subject key identifier: 46:75:E3:98:13:38:A4:4C:07:35:07:EF:70:31:60:9E:37:DF:06:24
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 42AE89668F0C877904B74ED107A61845587A94B2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1e4ead12-6429-4635-9fd2-8ceb4cdc6e95.roa
Signing time: Fri 15 Sep 2023 00:00:00 +0000
ROA not before: Fri 15 Sep 2023 00:00:00 +0000
ROA not after: Fri 20 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ae:89:66:8f:0c:87:79:04:b7:4e:d1:07:a6:18:45:58:7a:94:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 15 00:00:00 2023 GMT
Not After : Oct 20 23:59:59 2023 GMT
Subject: serialNumber=36a8047981c7be935617998b78503b945b4b384544b6f484d5aed65d1e4d0fdf, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:84:c0:26:11:13:b5:1b:d7:c3:72:bb:f5:
7f:8a:54:0e:0a:61:9e:af:c3:62:3c:47:25:68:6a:
2c:20:79:64:0a:82:50:da:29:3a:45:99:50:f5:74:
4a:12:2a:f8:69:41:81:04:2b:8a:5a:8e:2d:c2:a9:
3c:a4:db:b3:6a:b7:be:b9:c0:bf:13:ad:21:83:a2:
37:2a:5f:3d:af:e5:e8:e0:57:cc:f8:1b:65:52:c5:
12:c1:0b:76:2a:4c:fa:99:4c:bd:3d:5f:4a:d9:a0:
39:2d:f1:2b:ad:f1:ea:32:9b:ad:18:36:49:79:09:
79:75:31:8f:94:0d:15:07:fb:ac:ad:35:64:8a:5f:
e8:ae:a5:e8:ec:e6:4f:69:48:b3:60:ec:69:f2:60:
7b:a0:02:e6:18:10:c4:14:a9:c0:a0:5b:9f:1a:72:
47:13:15:b2:e8:07:e7:0e:a9:5b:02:5e:d3:0a:94:
da:4a:2f:21:d7:e0:f9:7e:54:d3:f0:8c:b9:77:7e:
d1:fe:69:88:e6:e6:de:fd:7d:6e:06:87:68:44:15:
da:66:13:08:40:04:d5:82:ca:37:a6:ea:04:e6:4a:
f1:5a:d1:bc:69:ef:ed:e8:1e:2a:ae:77:d4:83:3a:
71:64:e7:ca:82:d0:c5:3b:e0:ab:d9:98:3c:d2:4d:
5c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:75:E3:98:13:38:A4:4C:07:35:07:EF:70:31:60:9E:37:DF:06:24
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1e4ead12-6429-4635-9fd2-8ceb4cdc6e95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
17:83:95:0e:38:9e:ce:1e:98:81:49:ca:21:92:c1:bd:ab:e5:
e8:dc:7b:dd:19:6e:0a:e3:0f:db:16:ff:32:18:50:e6:6c:69:
a5:cd:59:70:6e:46:12:eb:3b:4b:2d:5c:ce:90:bc:ff:2c:9c:
4f:7a:7d:b0:7e:b5:47:ab:b7:2b:5e:05:03:af:94:7f:ed:6a:
64:bd:1f:03:3b:aa:c3:60:58:95:fd:f5:a2:9f:5f:f5:36:22:
50:f4:1f:70:6c:bf:9a:e6:ec:c4:98:20:e4:fa:1c:dd:5b:7f:
ec:14:06:c6:b6:fd:92:f2:4e:d7:d6:b5:40:9c:28:89:91:ae:
88:dd:8d:bc:ae:25:80:8b:61:d0:f0:f0:7d:48:6c:26:50:b5:
67:eb:ed:fb:ee:4f:8a:de:94:f2:3d:bb:e7:c7:24:3f:90:18:
0e:dc:74:44:56:e0:5b:84:af:10:a2:08:f8:5d:17:08:e5:b8:
ea:95:61:bc:15:43:55:6a:c4:55:d0:66:61:58:0b:9f:fa:68:
62:a9:35:42:0b:d4:ba:fe:f8:21:18:7c:c2:e6:b2:e0:bc:5e:
db:46:ec:77:db:da:3e:16:94:f0:52:e9:3f:0c:0f:83:a4:75:
47:d7:1e:22:be:e1:61:d4:7a:e4:ba:96:d3:c7:5e:85:1d:ad:
eb:d2:7e:f5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQq6JZo8Mh3kEt07RB6YYRVh6lLIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTE1MDAwMDAwWhcNMjMxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNmE4MDQ3OTgxYzdiZTkzNTYxNzk5OGI3ODUwM2I5NDVi
NGIzODQ1NDRiNmY0ODRkNWFlZDY1ZDFlNGQwZmRmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQiYTAJhETtRvXw3K79X+KVA4KYZ6vw2I8RyVoaiwgeWQK
glDaKTpFmVD1dEoSKvhpQYEEK4paji3CqTyk27Nqt765wL8TrSGDojcqXz2v5ejg
V8z4G2VSxRLBC3YqTPqZTL09X0rZoDkt8Sut8eoym60YNkl5CXl1MY+UDRUH+6yt
NWSKX+iupejs5k9pSLNg7GnyYHugAuYYEMQUqcCgW58ackcTFbLoB+cOqVsCXtMK
lNpKLyHX4Pl+VNPwjLl3ftH+aYjm5t79fW4Gh2hEFdpmEwhABNWCyjem6gTmSvFa
0bxp7+3oHiqud9SDOnFk58qC0MU74KvZmDzSTVzdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURnXjmBM4pEwHNQfvcDFgnjffBiQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzFlNGVhZDEyLTY0MjktNDYzNS05ZmQyLThjZWI0Y2RjNmU5NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABeDlQ44ns4emIFJyiGSwb2r5ejc
e90ZbgrjD9sW/zIYUOZsaaXNWXBuRhLrO0stXM6QvP8snE96fbB+tUertyteBQOv
lH/tamS9HwM7qsNgWJX99aKfX/U2IlD0H3Bsv5rm7MSYIOT6HN1bf+wUBsa2/ZLy
TtfWtUCcKImRrojdjbyuJYCLYdDw8H1IbCZQtWfr7fvuT4relPI9u+fHJD+QGA7c
dERW4FuErxCiCPhdFwjluOqVYbwVQ1VqxFXQZmFYC5/6aGKpNUIL1Lr++CEYfMLm
suC8XttG7Hfb2j4WlPBS6T8MD4OkdUfXHiK+4WHUeuS6ltPHXoUdrevSfvU=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:11 2023 by rpki-client on console.sobornost.net