Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/41d39e60-22a5-48c3-b8a3-c44fc757d762.roa
File: 41d39e60-22a5-48c3-b8a3-c44fc757d762.roa (raw, json)
Hash identifier: vKGMLAgj9S+sPeNRdtGlyw8EawISvxxknzK+VarIszU=
Subject key identifier: 89:48:88:27:D5:99:CB:DE:E5:95:82:3D:FA:3C:DD:C5:8F:B8:A6:C2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2EBF75B4A2E5241123E2266D7C1D3B6A28D78614
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/41d39e60-22a5-48c3-b8a3-c44fc757d762.roa
Signing time: Tue 11 Jul 2023 00:00:00 +0000
ROA not before: Tue 11 Jul 2023 00:00:00 +0000
ROA not after: Tue 15 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:bf:75:b4:a2:e5:24:11:23:e2:26:6d:7c:1d:3b:6a:28:d7:86:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 11 00:00:00 2023 GMT
Not After : Aug 15 23:59:59 2023 GMT
Subject: serialNumber=5369b108492c2e4a2960a02f44aeff78207bbaaa55eb4eeedfd48c92787cd64e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:2d:df:18:18:f8:ce:b3:7a:df:c7:bb:30:
18:49:b1:ad:e1:67:f7:f7:b2:23:34:76:91:cb:99:
6b:d5:d3:54:61:4c:48:8e:1f:71:f6:6e:80:47:5d:
12:19:02:63:b7:c8:f6:4d:f0:bf:67:c8:39:8a:96:
ef:87:be:18:c9:e4:3c:cf:ba:9f:42:d3:1a:de:d5:
e6:69:a9:47:25:6a:5a:46:5b:ad:d6:10:b8:40:1c:
9b:af:72:dd:93:6b:69:fe:90:ef:5a:59:43:4f:52:
8b:cb:ff:f6:f8:51:33:6f:72:d5:d0:4d:94:88:2a:
73:ef:1c:ab:bb:0f:7a:8c:10:4f:d8:9b:19:d6:57:
ff:df:90:a7:7e:18:89:06:2d:c9:b4:80:76:91:56:
3e:9b:e2:bf:10:9c:c7:16:af:c1:70:ba:a7:6e:9b:
9e:38:fe:6c:c8:57:b6:db:31:c8:bb:06:fb:14:7c:
38:79:11:92:de:bf:59:3d:c2:b8:75:5b:27:68:16:
07:4e:30:54:bf:99:81:43:9d:94:16:87:ef:42:73:
a7:e2:a7:55:f9:2d:60:7d:62:d6:e0:00:f5:bc:44:
8a:18:5b:74:08:0e:45:05:2d:ac:34:c7:c5:30:35:
ba:92:aa:ec:88:b9:43:87:4c:d1:b5:47:6d:14:4b:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:48:88:27:D5:99:CB:DE:E5:95:82:3D:FA:3C:DD:C5:8F:B8:A6:C2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/41d39e60-22a5-48c3-b8a3-c44fc757d762.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
19:81:fd:6b:5e:a9:dd:1e:7b:29:35:3a:2e:29:d3:e3:3d:84:
ad:43:5c:40:e4:fd:13:86:a3:9c:d6:0b:89:2c:94:46:16:2e:
d4:9d:72:6a:64:54:0e:90:79:cf:b2:c9:17:e4:fe:a4:b5:fe:
59:cb:90:4b:e9:ce:19:30:e0:04:a6:14:40:88:9e:25:f5:74:
4b:bc:c6:42:c1:56:1e:c6:bc:50:59:34:f1:77:35:ab:7d:07:
38:98:dc:ba:43:0b:65:52:6f:8d:a7:ce:72:12:8a:1b:7a:ab:
3f:48:8c:52:0e:dd:a2:e5:7e:4b:d2:5b:e2:cb:a2:72:b6:8c:
17:7d:b4:80:7c:ed:6b:c0:41:92:94:29:7f:57:44:3c:e9:25:
e3:7a:c1:8a:ee:d4:b7:4e:cf:72:e0:59:65:21:84:a9:0e:fc:
f5:59:e5:10:1f:46:58:11:8b:07:e4:05:0f:b2:30:1c:d4:eb:
87:02:13:9e:73:a5:8e:4b:76:b7:0f:50:70:2a:05:be:9f:5c:
8d:68:bb:b0:fa:e0:62:c0:4d:1c:5c:ab:3b:73:e8:cd:83:75:
98:2c:0d:30:77:a6:ae:ef:14:56:1a:87:5e:09:77:37:7a:09:
72:ff:e8:cd:74:41:5e:a8:8b:42:18:c7:ba:f1:64:a3:9e:1f:
14:af:21:e0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULr91tKLlJBEj4iZtfB07aijXhhQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzExMDAwMDAwWhcNMjMwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MzY5YjEwODQ5MmMyZTRhMjk2MGEwMmY0NGFlZmY3ODIw
N2JiYWFhNTVlYjRlZWVkZmQ0OGM5Mjc4N2NkNjRlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCc7i3fGBj4zrN638e7MBhJsa3hZ/f3siM0dpHLmWvV01Rh
TEiOH3H2boBHXRIZAmO3yPZN8L9nyDmKlu+HvhjJ5DzPup9C0xre1eZpqUclalpG
W63WELhAHJuvct2Ta2n+kO9aWUNPUovL//b4UTNvctXQTZSIKnPvHKu7D3qMEE/Y
mxnWV//fkKd+GIkGLcm0gHaRVj6b4r8QnMcWr8Fwuqdum544/mzIV7bbMci7BvsU
fDh5EZLev1k9wrh1WydoFgdOMFS/mYFDnZQWh+9Cc6fip1X5LWB9YtbgAPW8RIoY
W3QIDkUFLaw0x8UwNbqSquyIuUOHTNG1R20USxFLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUiUiIJ9WZy97llYI9+jzdxY+4psIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzQxZDM5ZTYwLTIyYTUtNDhjMy1iOGEzLWM0NGZjNzU3ZDc2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABmB/Wteqd0eeyk1Oi4p0+M9hK1D
XEDk/ROGo5zWC4kslEYWLtSdcmpkVA6Qec+yyRfk/qS1/lnLkEvpzhkw4ASmFECI
niX1dEu8xkLBVh7GvFBZNPF3Nat9BziY3LpDC2VSb42nznISiht6qz9IjFIO3aLl
fkvSW+LLonK2jBd9tIB87WvAQZKUKX9XRDzpJeN6wYru1LdOz3LgWWUhhKkO/PVZ
5RAfRlgRiwfkBQ+yMBzU64cCE55zpY5LdrcPUHAqBb6fXI1ou7D64GLATRxcqztz
6M2DdZgsDTB3pq7vFFYah14Jdzd6CXL/6M10QV6oi0IYx7rxZKOeHxSvIeA=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:14 2023 by rpki-client on console.sobornost.net