Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d173623-d693-40bb-8f8d-b3f74973dbf9.roa
File: 3d173623-d693-40bb-8f8d-b3f74973dbf9.roa (raw, json)
Hash identifier: r3Une1Z1BbQB6RuE+Q//vm7FNIzMC+Y6dNMCkNuQ8Xw=
Subject key identifier: 4D:63:51:73:49:B8:1B:BE:91:B8:8D:5D:C4:2B:B8:9A:3D:29:78:19
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 410C877AF8C381FD81889B3038F67BA47BC4B218
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d173623-d693-40bb-8f8d-b3f74973dbf9.roa
Signing time: Thu 17 Aug 2023 00:00:00 +0000
ROA not before: Thu 17 Aug 2023 00:00:00 +0000
ROA not after: Thu 21 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:0c:87:7a:f8:c3:81:fd:81:88:9b:30:38:f6:7b:a4:7b:c4:b2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 17 00:00:00 2023 GMT
Not After : Sep 21 23:59:59 2023 GMT
Subject: serialNumber=6f7e806495331cf4c6cc2306ff9d2c6a02efaddaabe1945796d4788239ecb3a3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:65:83:11:80:ea:8c:fa:7d:46:4a:d1:58:
d0:81:72:88:94:66:72:03:f7:db:a1:d7:a6:07:47:
ff:5d:c9:68:bb:3c:dd:22:20:8c:d2:4b:ce:a2:a1:
78:b4:9a:55:b1:f0:58:3d:f0:4f:af:c8:fa:47:cc:
f4:aa:72:fc:52:b0:8b:04:7e:89:cf:53:60:31:fb:
49:23:14:05:44:d9:0a:55:f0:32:33:0a:d3:de:d3:
9a:7e:8d:0f:1f:07:7c:66:f1:52:85:67:fc:c0:91:
16:78:6d:16:b3:04:04:df:d5:2f:ed:ad:0c:bc:81:
f6:c9:5f:30:63:22:d0:fd:84:f2:19:ec:c6:16:89:
07:78:32:8c:2b:64:74:a5:22:77:a1:b0:fb:59:09:
3f:6e:71:17:ec:19:be:fa:3b:2b:c6:e5:01:2f:87:
80:b9:8c:cf:48:9e:96:2d:08:a9:44:da:61:8c:bf:
a5:cd:2c:3f:5a:72:3d:96:f3:90:40:71:6b:62:ae:
97:51:65:b6:69:cc:9d:a6:65:b6:e2:49:c8:36:63:
e7:3a:a7:67:5b:ce:ed:ba:e6:6a:6d:f9:75:b3:c8:
cc:e0:49:03:b7:49:17:b6:0c:82:0b:41:5e:97:d9:
e1:3b:0a:66:05:9e:94:23:ce:fa:dd:2c:5f:08:d4:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:63:51:73:49:B8:1B:BE:91:B8:8D:5D:C4:2B:B8:9A:3D:29:78:19
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d173623-d693-40bb-8f8d-b3f74973dbf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
03:68:60:2c:71:66:cd:5e:45:27:0c:40:5f:62:3c:d9:68:44:
a7:04:e2:f2:d8:17:8b:fb:a5:23:9b:73:d4:70:41:6a:9f:41:
a5:e7:24:ae:d8:6e:0c:42:ee:e2:69:46:e0:1c:29:7c:19:e7:
6d:e6:72:86:c4:9a:51:5a:e0:d9:8f:79:24:ac:c3:2f:30:8f:
59:1d:65:46:3b:c4:bc:e7:df:27:cb:a0:42:94:16:bf:1e:7f:
ce:8e:10:4b:59:af:bb:67:ce:4f:c8:b2:2e:fc:a2:45:89:6d:
79:a7:92:8c:15:57:1f:d7:ef:3b:4b:51:a6:14:f3:44:5a:e8:
f6:ae:ea:69:3d:dc:60:0d:2e:2d:d4:da:74:4e:fa:5d:cf:3d:
42:32:cd:e7:22:2d:d2:79:c1:c8:ab:8a:97:cd:51:6b:04:36:
43:cc:0e:2c:a9:0d:da:fa:3c:64:f2:a7:ea:13:a5:76:07:29:
85:fd:5e:a7:c9:5f:ef:ff:7c:45:31:41:3e:35:2f:6e:72:a4:
1d:6e:83:26:8e:11:5c:a6:b6:c2:2c:b9:b8:d2:af:cf:71:11:
83:38:a6:a0:5c:fa:51:95:7f:f8:70:c4:bc:2e:3c:99:13:38:
2d:66:c3:ef:14:68:4a:49:5f:a0:a4:3a:b8:dd:4e:4f:ce:f6:
d6:ac:41:7c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQQyHevjDgf2BiJswOPZ7pHvEshgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODE3MDAwMDAwWhcNMjMwOTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZjdlODA2NDk1MzMxY2Y0YzZjYzIzMDZmZjlkMmM2YTAy
ZWZhZGRhYWJlMTk0NTc5NmQ0Nzg4MjM5ZWNiM2EzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcSWWDEYDqjPp9RkrRWNCBcoiUZnID99uh16YHR/9dyWi7
PN0iIIzSS86ioXi0mlWx8Fg98E+vyPpHzPSqcvxSsIsEfonPU2Ax+0kjFAVE2QpV
8DIzCtPe05p+jQ8fB3xm8VKFZ/zAkRZ4bRazBATf1S/trQy8gfbJXzBjItD9hPIZ
7MYWiQd4MowrZHSlInehsPtZCT9ucRfsGb76OyvG5QEvh4C5jM9InpYtCKlE2mGM
v6XNLD9acj2W85BAcWtirpdRZbZpzJ2mZbbiScg2Y+c6p2dbzu265mpt+XWzyMzg
SQO3SRe2DIILQV6X2eE7CmYFnpQjzvrdLF8I1AHpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUTWNRc0m4G76RuI1dxCu4mj0peBkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzNkMTczNjIzLWQ2OTMtNDBiYi04ZjhkLWIzZjc0OTczZGJmOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAANoYCxxZs1eRScMQF9iPNloRKcE
4vLYF4v7pSObc9RwQWqfQaXnJK7YbgxC7uJpRuAcKXwZ523mcobEmlFa4NmPeSSs
wy8wj1kdZUY7xLzn3yfLoEKUFr8ef86OEEtZr7tnzk/Isi78okWJbXmnkowVVx/X
7ztLUaYU80Ra6Pau6mk93GANLi3U2nRO+l3PPUIyzeciLdJ5wciripfNUWsENkPM
DiypDdr6PGTyp+oTpXYHKYX9XqfJX+//fEUxQT41L25ypB1ugyaOEVymtsIsubjS
r89xEYM4pqBc+lGVf/hwxLwuPJkTOC1mw+8UaEpJX6CkOrjdTk/O9tasQXw=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:14 2023 by rpki-client on console.sobornost.net