Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/41ffa96e-4188-4af6-a235-84e6131a2d74.roa
File: 41ffa96e-4188-4af6-a235-84e6131a2d74.roa (raw, json)
Hash identifier: ssGZa6Re9U4PzzvZiw6mTU6/HTh8koeAAT6c4Y8TNPU=
Subject key identifier: 45:34:25:43:7A:04:BB:73:3B:EE:B4:54:CF:84:40:6C:C2:7C:93:33
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7EA9A24E09601CE87D349D6926C63865473460DA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/41ffa96e-4188-4af6-a235-84e6131a2d74.roa
Signing time: Thu 31 Aug 2023 00:00:00 +0000
ROA not before: Thu 31 Aug 2023 00:00:00 +0000
ROA not after: Thu 05 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a9:a2:4e:09:60:1c:e8:7d:34:9d:69:26:c6:38:65:47:34:60:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 31 00:00:00 2023 GMT
Not After : Oct 5 23:59:59 2023 GMT
Subject: serialNumber=9f1fc7990b6a174b74b4a51defcc2a87beb2f909b709c97fff465ca043be0115, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:0b:fd:c8:0b:f8:10:29:37:b0:4b:43:24:
fe:d8:20:e6:36:d3:04:09:d9:fa:ca:b6:12:b2:0a:
19:ad:53:ad:c9:30:31:d9:20:29:24:49:c5:77:93:
24:e4:e1:9f:ef:06:04:53:0b:eb:bf:ce:03:a0:2f:
2b:ed:31:a4:f1:fa:11:fc:12:51:58:04:ad:c8:36:
38:ac:7d:2d:2f:fb:94:fd:d0:e0:19:6a:c8:9e:ca:
d2:26:51:cc:5f:5a:db:38:d2:f8:e9:ab:d8:9c:10:
db:0a:f1:07:14:65:92:ec:59:01:ce:8d:ce:50:68:
7e:b4:a3:51:e8:ce:f3:f3:d3:4d:10:9c:c3:ec:6e:
f2:e4:6a:dd:4d:e2:3a:82:62:b3:80:fb:14:84:40:
1a:bc:35:1e:84:fc:a0:98:e7:de:76:fe:31:b1:c8:
1d:c1:fc:07:71:91:57:2f:d4:bb:c5:43:3d:a2:03:
b6:1c:be:bf:ff:1f:29:d8:18:c7:7f:10:79:0c:fd:
33:f1:89:de:36:71:0f:98:3b:2a:bb:a2:5c:4d:97:
a1:eb:d6:2d:79:f7:8f:fb:4f:42:4e:ae:f8:cc:3d:
69:ac:3a:9f:31:dd:39:d6:ec:9e:75:a0:d5:18:4e:
e9:55:69:d5:b6:06:00:fe:3c:bb:d2:27:68:f5:4e:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:34:25:43:7A:04:BB:73:3B:EE:B4:54:CF:84:40:6C:C2:7C:93:33
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/41ffa96e-4188-4af6-a235-84e6131a2d74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:6f:4b:ca:46:50:26:40:34:20:1d:15:65:34:a8:dc:15:df:
c4:4a:3a:c5:c8:e5:15:ca:32:65:47:9b:ae:6f:30:df:63:dd:
4b:4f:a8:45:fb:c8:e1:24:5c:a1:f1:6c:1e:8c:ce:d8:48:16:
70:09:c9:02:b8:0a:81:fe:39:39:1d:c2:a0:34:8d:66:dd:cb:
8e:a5:fd:bb:0a:fa:84:42:c7:33:39:65:df:1b:d5:f1:8f:bc:
d1:a3:fd:9a:bc:ca:65:3a:f1:7b:05:37:06:2e:57:9c:36:b9:
67:fd:14:a9:d1:00:ed:13:a0:a3:e0:74:34:a3:35:73:3e:78:
58:34:43:b8:31:de:c5:c2:6d:e2:67:06:2b:ea:5f:90:c2:4a:
aa:7b:94:26:e2:da:95:41:32:a9:59:38:6c:aa:0d:a9:e3:97:
aa:27:6a:fd:aa:70:8f:b3:cd:ba:ef:65:a8:59:35:c1:19:de:
c7:d6:7e:ea:40:9a:f4:a9:7f:30:67:9e:1a:00:4d:57:ea:19:
b5:3f:b6:26:de:53:22:64:b6:71:13:94:df:86:a6:94:b7:88:
b7:9d:54:e2:44:c5:01:27:a8:a7:a2:cb:ff:16:98:0c:3c:11:
65:ed:c6:1c:1e:ab:12:c5:18:3a:44:22:7d:fd:3b:3c:bd:e9:
0d:ed:23:98
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfqmiTglgHOh9NJ1pJsY4ZUc0YNowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODMxMDAwMDAwWhcNMjMxMDA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZjFmYzc5OTBiNmExNzRiNzRiNGE1MWRlZmNjMmE4N2Jl
YjJmOTA5YjcwOWM5N2ZmZjQ2NWNhMDQzYmUwMTE1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9tgv9yAv4ECk3sEtDJP7YIOY20wQJ2frKthKyChmtU63J
MDHZICkkScV3kyTk4Z/vBgRTC+u/zgOgLyvtMaTx+hH8ElFYBK3INjisfS0v+5T9
0OAZasieytImUcxfWts40vjpq9icENsK8QcUZZLsWQHOjc5QaH60o1HozvPz000Q
nMPsbvLkat1N4jqCYrOA+xSEQBq8NR6E/KCY5952/jGxyB3B/AdxkVcv1LvFQz2i
A7Ycvr//HynYGMd/EHkM/TPxid42cQ+YOyq7olxNl6Hr1i1594/7T0JOrvjMPWms
Op8x3TnW7J51oNUYTulVadW2BgD+PLvSJ2j1TkbnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURTQlQ3oEu3M77rRUz4RAbMJ8kzMwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzQxZmZhOTZlLTQxODgtNGFmNi1hMjM1LTg0ZTYxMzFhMmQ3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJ9vS8pGUCZANCAdFWU0qNwV38RK
OsXI5RXKMmVHm65vMN9j3UtPqEX7yOEkXKHxbB6MzthIFnAJyQK4CoH+OTkdwqA0
jWbdy46l/bsK+oRCxzM5Zd8b1fGPvNGj/Zq8ymU68XsFNwYuV5w2uWf9FKnRAO0T
oKPgdDSjNXM+eFg0Q7gx3sXCbeJnBivqX5DCSqp7lCbi2pVBMqlZOGyqDanjl6on
av2qcI+zzbrvZahZNcEZ3sfWfupAmvSpfzBnnhoATVfqGbU/tibeUyJktnETlN+G
ppS3iLedVOJExQEnqKeiy/8WmAw8EWXtxhweqxLFGDpEIn39Ozy96Q3tI5g=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:14 2023 by rpki-client on console.sobornost.net