Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f1d8326-deb7-4008-a5fd-50e37870c2a0.roa
File: 7f1d8326-deb7-4008-a5fd-50e37870c2a0.roa (raw, json)
Hash identifier: qM+atAAZbFImGAYVWK5RSyXsXCfEoZ2mniUN1hNHiaU=
Subject key identifier: 9E:D6:23:7F:C1:EB:EB:2F:72:97:9F:1A:CA:A5:B0:3A:C2:20:AE:6C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4577FFB6B0354DC11FB52324E8A15D828B9683D8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f1d8326-deb7-4008-a5fd-50e37870c2a0.roa
Signing time: Tue 26 Sep 2023 00:00:00 +0000
ROA not before: Tue 26 Sep 2023 00:00:00 +0000
ROA not after: Tue 31 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:77:ff:b6:b0:35:4d:c1:1f:b5:23:24:e8:a1:5d:82:8b:96:83:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 26 00:00:00 2023 GMT
Not After : Oct 31 23:59:59 2023 GMT
Subject: serialNumber=dd5c0026541511394c22b2a940ed2667f7cc5c696a2e3abb9ae666f06b83ae87, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:cf:61:aa:7a:8f:bf:60:6f:73:e8:39:95:
3c:5f:75:28:a2:d6:25:cd:08:dd:ef:27:ca:44:4a:
59:41:b5:ba:12:ce:ad:2b:0e:60:30:d8:58:ec:69:
63:dd:7a:2c:de:9f:c0:be:94:03:ee:d4:f5:7b:03:
15:68:2f:6a:79:20:39:53:c1:a5:45:1c:d5:d7:57:
84:e5:51:4c:53:44:53:fd:70:79:ce:22:56:cb:52:
4d:ec:a3:bc:60:46:ef:4a:fd:3e:2c:e4:2c:6d:13:
6b:cb:d7:51:8e:22:7c:26:4d:f1:d0:d5:20:0f:56:
b5:9d:20:dd:c5:82:39:33:6d:f4:40:3e:0a:fc:05:
14:b8:94:42:e0:04:df:0b:da:9e:20:87:22:ec:4f:
10:0e:66:b9:f3:42:b5:67:4c:80:8c:12:78:2c:0f:
4d:2c:52:74:12:e1:d8:de:86:50:51:82:a2:b1:ce:
e9:08:b5:ad:d0:da:8c:31:a0:81:b9:2c:f3:be:4e:
c7:cd:59:2c:e1:65:d6:26:61:91:a9:23:2a:da:97:
f9:d4:c1:5c:65:f4:0f:91:50:fe:14:58:89:74:3a:
9d:b7:91:a3:29:90:ee:c9:a5:3a:a0:79:2f:14:99:
5a:68:09:22:16:cd:31:50:ea:57:17:e6:6e:64:32:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D6:23:7F:C1:EB:EB:2F:72:97:9F:1A:CA:A5:B0:3A:C2:20:AE:6C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f1d8326-deb7-4008-a5fd-50e37870c2a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
20:11:9c:95:df:cd:dc:c3:f3:8d:76:18:6b:36:f6:11:0b:3f:
2e:50:3d:5a:df:6a:03:b8:5b:12:70:71:f0:37:ef:b1:27:0f:
a2:26:d1:96:b7:43:69:34:60:13:f7:7e:5f:73:e2:7b:a0:2d:
7f:86:c6:eb:d6:2d:1a:73:65:03:ad:1a:87:3d:43:11:90:5a:
4d:0a:8e:ad:22:ff:57:48:9d:e2:ab:af:8d:c5:00:8e:c4:d4:
ee:02:aa:7e:bd:28:de:b6:76:ab:5d:ba:04:e5:b2:6b:c0:07:
0c:ba:5a:59:8e:35:6f:9b:4c:18:bb:e5:86:ed:6b:36:b8:20:
e3:95:5a:2a:b3:8e:6a:35:6e:86:9c:1b:78:36:82:d6:9a:d5:
da:d6:cb:d9:10:ee:05:b2:9c:ab:f8:ed:cc:15:e2:fe:56:72:
9d:1e:1f:0c:90:4f:35:d3:d5:a4:cd:ad:11:0a:02:21:83:63:
08:2e:60:24:b6:b9:b7:74:f7:d3:04:8d:2d:3a:f8:79:5f:8e:
7b:23:f8:e2:51:00:83:fc:88:d3:aa:7f:30:c4:b3:a0:1a:b0:
9d:1e:5e:06:64:7f:a6:b7:cc:e5:55:7f:90:cd:4d:d1:d8:cf:
ad:a8:fc:91:be:fd:cd:e3:5d:84:09:2d:0c:27:21:29:06:20:
4c:22:24:f9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURXf/trA1TcEftSMk6KFdgouWg9gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTI2MDAwMDAwWhcNMjMxMDMxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkZDVjMDAyNjU0MTUxMTM5NGMyMmIyYTk0MGVkMjY2N2Y3
Y2M1YzY5NmEyZTNhYmI5YWU2NjZmMDZiODNhZTg3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/C89hqnqPv2Bvc+g5lTxfdSii1iXNCN3vJ8pESllBtboS
zq0rDmAw2FjsaWPdeizen8C+lAPu1PV7AxVoL2p5IDlTwaVFHNXXV4TlUUxTRFP9
cHnOIlbLUk3so7xgRu9K/T4s5CxtE2vL11GOInwmTfHQ1SAPVrWdIN3FgjkzbfRA
Pgr8BRS4lELgBN8L2p4ghyLsTxAOZrnzQrVnTICMEngsD00sUnQS4djehlBRgqKx
zukIta3Q2owxoIG5LPO+TsfNWSzhZdYmYZGpIyral/nUwVxl9A+RUP4UWIl0Op23
kaMpkO7JpTqgeS8UmVpoCSIWzTFQ6lcX5m5kMi4vAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUntYjf8Hr6y9yl58ayqWwOsIgrmwwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzdmMWQ4MzI2LWRlYjctNDAwOC1hNWZkLTUwZTM3ODcwYzJhMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACARnJXfzdzD8412GGs29hELPy5Q
PVrfagO4WxJwcfA377EnD6Im0Za3Q2k0YBP3fl9z4nugLX+GxuvWLRpzZQOtGoc9
QxGQWk0Kjq0i/1dIneKrr43FAI7E1O4Cqn69KN62dqtdugTlsmvABwy6WlmONW+b
TBi75Ybtaza4IOOVWiqzjmo1boacG3g2gtaa1drWy9kQ7gWynKv47cwV4v5Wcp0e
HwyQTzXT1aTNrREKAiGDYwguYCS2ubd099MEjS06+Hlfjnsj+OJRAIP8iNOqfzDE
s6AasJ0eXgZkf6a3zOVVf5DNTdHYz62o/JG+/c3jXYQJLQwnISkGIEwiJPk=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:58 2023 by rpki-client on console.sobornost.net