Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/730f7db2-5fdd-472d-84f0-840569ca5bff.roa
File: 730f7db2-5fdd-472d-84f0-840569ca5bff.roa (raw, json)
Hash identifier: /BO9je1IOqzoy1WpaDP14EJ4waTQh+HmAPFCx88KSVs=
Subject key identifier: 6F:5D:E8:87:45:BC:A7:E3:21:5F:09:4E:F6:A3:76:DF:B5:8D:AC:D0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1996D43AEDDFCDBF85EB535F3FCA756ECEA65871
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/730f7db2-5fdd-472d-84f0-840569ca5bff.roa
Signing time: Thu 31 Aug 2023 00:00:00 +0000
ROA not before: Thu 31 Aug 2023 00:00:00 +0000
ROA not after: Thu 05 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:96:d4:3a:ed:df:cd:bf:85:eb:53:5f:3f:ca:75:6e:ce:a6:58:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 31 00:00:00 2023 GMT
Not After : Oct 5 23:59:59 2023 GMT
Subject: serialNumber=f1f64589c10c5e9bf32e82b9639af62024afd70915b3b9d49012d396832a49eb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a3:50:a3:ac:87:e9:45:d6:f6:1f:00:db:37:
75:8f:e4:71:ba:a0:ed:ae:d4:4f:ea:4f:9e:37:3a:
5c:28:de:fc:32:57:89:3f:3a:74:84:bb:95:97:d1:
6c:e4:49:9d:62:b1:88:38:5a:f4:43:f0:c9:b5:db:
c1:91:fe:05:20:01:0a:19:7c:ca:ec:ff:28:4b:0b:
20:1b:0f:83:3a:e8:77:7b:eb:0e:9a:88:49:a9:3f:
c4:13:10:d3:e6:37:17:9e:b6:76:5f:21:7c:22:52:
79:02:0e:e6:e8:be:63:6a:0e:0b:51:0c:8b:05:68:
70:dd:4d:d2:c5:50:66:c8:94:ca:88:55:52:a8:8e:
e2:82:3a:0f:3e:f0:b6:99:86:37:45:ed:3d:eb:8b:
00:2a:8b:2a:9d:44:d2:15:4e:22:dd:45:26:f9:64:
63:b6:86:56:ad:4b:ac:50:43:ea:a0:51:cc:d2:27:
60:67:2c:87:b7:fd:b5:06:67:f1:b4:dd:aa:c0:50:
06:b9:4c:95:db:43:a9:7c:47:0c:3a:2e:10:7f:38:
da:e9:57:b5:d8:49:52:67:48:d8:de:e3:d5:f9:54:
1f:ff:f9:f1:c6:32:41:99:c5:1d:da:2c:de:62:08:
2a:75:0c:15:12:d8:a9:63:97:64:3b:fd:02:c4:3f:
db:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5D:E8:87:45:BC:A7:E3:21:5F:09:4E:F6:A3:76:DF:B5:8D:AC:D0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/730f7db2-5fdd-472d-84f0-840569ca5bff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
18:8b:aa:49:12:98:26:77:9e:02:f4:73:d7:fa:78:a7:78:ea:
25:ad:c7:e0:38:79:98:c7:19:cd:4a:f1:8d:25:2e:c8:e4:03:
94:9f:ec:ba:75:cd:c1:83:b0:45:04:fe:98:86:50:79:15:c8:
8a:b5:91:39:eb:5f:62:5c:ad:f7:1b:9a:27:95:f5:92:b0:98:
72:7b:69:4d:ef:7d:da:d1:a2:fb:0f:16:3e:7a:b8:7d:90:6d:
54:6d:91:ba:66:98:af:37:ad:77:4b:7b:54:db:d7:d6:33:a4:
a9:0a:42:0c:5c:df:ec:b2:88:04:b9:5a:5f:ca:0d:38:e0:83:
04:ff:2d:43:5c:81:ac:6d:70:ec:b6:7f:29:df:86:3f:e6:3e:
84:59:a2:21:cf:c4:e4:a7:be:5d:b6:5a:77:fd:18:6b:b2:d4:
99:ac:61:d9:e1:81:4c:31:14:c2:de:76:2e:9f:6a:25:b3:69:
d5:0f:55:91:59:bb:2c:f1:82:2d:56:f0:fc:55:ff:72:a2:65:
5f:7f:c9:5a:0f:a8:c9:14:82:06:5f:66:1c:b7:b8:73:18:4c:
fe:8e:18:3b:e7:f9:2b:fe:48:3a:00:dd:54:bd:67:f2:7b:c0:
66:bc:64:af:77:48:57:a8:03:86:31:e0:d4:77:ce:91:a6:15:
d1:9e:b9:93
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGZbUOu3fzb+F61NfP8p1bs6mWHEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODMxMDAwMDAwWhcNMjMxMDA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMWY2NDU4OWMxMGM1ZTliZjMyZTgyYjk2MzlhZjYyMDI0
YWZkNzA5MTViM2I5ZDQ5MDEyZDM5NjgzMmE0OWViMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCFo1CjrIfpRdb2HwDbN3WP5HG6oO2u1E/qT543Olwo3vwy
V4k/OnSEu5WX0WzkSZ1isYg4WvRD8Mm128GR/gUgAQoZfMrs/yhLCyAbD4M66Hd7
6w6aiEmpP8QTENPmNxeetnZfIXwiUnkCDubovmNqDgtRDIsFaHDdTdLFUGbIlMqI
VVKojuKCOg8+8LaZhjdF7T3riwAqiyqdRNIVTiLdRSb5ZGO2hlatS6xQQ+qgUczS
J2BnLIe3/bUGZ/G03arAUAa5TJXbQ6l8Rww6LhB/ONrpV7XYSVJnSNje49X5VB//
+fHGMkGZxR3aLN5iCCp1DBUS2Kljl2Q7/QLEP9uLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUb13oh0W8p+MhXwlO9qN237WNrNAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzczMGY3ZGIyLTVmZGQtNDcyZC04NGYwLTg0MDU2OWNhNWJmZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABiLqkkSmCZ3ngL0c9f6eKd46iWt
x+A4eZjHGc1K8Y0lLsjkA5Sf7Lp1zcGDsEUE/piGUHkVyIq1kTnrX2JcrfcbmieV
9ZKwmHJ7aU3vfdrRovsPFj56uH2QbVRtkbpmmK83rXdLe1Tb19YzpKkKQgxc3+yy
iAS5Wl/KDTjggwT/LUNcgaxtcOy2fynfhj/mPoRZoiHPxOSnvl22Wnf9GGuy1Jms
YdnhgUwxFMLedi6faiWzadUPVZFZuyzxgi1W8PxV/3KiZV9/yVoPqMkUggZfZhy3
uHMYTP6OGDvn+Sv+SDoA3VS9Z/J7wGa8ZK93SFeoA4Yx4NR3zpGmFdGeuZM=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:54 2023 by rpki-client on console.sobornost.net