Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8d776b56-3958-426d-ada5-e3c6f866ebce.roa
File: 8d776b56-3958-426d-ada5-e3c6f866ebce.roa (raw, json)
Hash identifier: JqIjAMHGftibzOknenNQHV7124zMvGetDkjaaH9KP6k=
Subject key identifier: 68:55:6B:85:5E:B3:C3:05:F4:B5:17:BB:F6:8B:C2:D5:84:BC:6B:79
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3E284D6075CCFFA1971F2E1AA1B2D40EC6CD8273
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8d776b56-3958-426d-ada5-e3c6f866ebce.roa
Signing time: Sat 28 Oct 2023 00:00:00 +0000
ROA not before: Sat 28 Oct 2023 00:00:00 +0000
ROA not after: Sat 02 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:28:4d:60:75:cc:ff:a1:97:1f:2e:1a:a1:b2:d4:0e:c6:cd:82:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 28 00:00:00 2023 GMT
Not After : Dec 2 23:59:59 2023 GMT
Subject: serialNumber=b4637cda7667e38a089d2eaa8f7acd8620bf1c0804fc6384bcec058e01f6d90b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:64:78:23:b0:56:af:1d:05:bc:98:0f:80:
fe:37:65:34:dc:35:cf:e1:97:16:4b:49:06:bd:ce:
80:89:a8:e8:57:23:6d:16:56:99:d6:62:96:29:5f:
5b:c8:31:b8:ab:a8:03:6f:70:f5:27:69:5d:8c:f5:
cd:3f:42:04:84:c2:4f:c9:b5:e4:1d:99:1c:dd:76:
1f:3b:74:a0:0a:03:ea:c3:44:d8:2e:d0:64:18:0d:
6a:23:17:b3:5f:19:5c:c0:18:8a:d4:bd:59:35:ea:
bf:f3:08:80:97:5e:70:bd:16:b5:79:1c:0a:30:13:
20:0b:26:d0:a2:7c:75:6a:d9:9a:63:27:89:d2:08:
a8:4f:ee:50:07:b8:c2:ee:a6:1e:bf:4a:0e:68:a0:
60:91:fe:ef:0c:70:2c:68:e7:db:f2:53:9e:3a:5c:
41:7f:db:43:92:09:5d:a7:ca:58:6e:cd:da:7c:30:
73:34:f9:23:42:2d:2f:5e:1b:3e:82:55:66:01:27:
63:b2:1d:36:48:9c:ee:10:70:90:1b:2a:b1:b7:d3:
ea:f5:6c:ca:c3:59:78:1c:65:39:ab:4c:41:22:80:
d1:48:3b:7b:55:41:df:53:fd:65:47:c5:12:5d:14:
77:62:a8:69:b8:f4:86:89:e0:ab:19:45:4e:d9:fc:
0c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:55:6B:85:5E:B3:C3:05:F4:B5:17:BB:F6:8B:C2:D5:84:BC:6B:79
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8d776b56-3958-426d-ada5-e3c6f866ebce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:07:0e:0b:50:5f:4e:7a:cd:40:df:a6:50:3f:19:6a:3f:06:
63:27:55:06:bc:9c:d3:54:94:35:f7:e2:27:87:1a:9a:52:ec:
48:f4:62:ac:0b:0f:96:ce:49:2c:40:fd:ac:c1:8e:cc:6a:69:
51:d1:31:89:c3:ed:84:ae:aa:ee:ef:ce:3f:8e:db:b4:d1:e0:
d6:0a:84:1b:55:3f:ef:b1:be:fd:2d:22:9f:a4:b1:b2:6d:b1:
bb:9e:6c:a7:8d:17:23:19:47:e4:f2:b6:12:3e:22:12:0a:1c:
f2:73:6c:44:d9:32:d2:31:af:54:eb:e9:db:34:7c:02:16:2b:
6c:bb:50:77:96:47:46:06:8e:9c:eb:aa:80:0a:b1:0c:b7:fb:
d3:60:5f:99:dc:99:a5:0c:5e:59:4d:c0:f1:5a:a1:4f:88:d4:
38:ed:73:a9:b0:bd:0c:6b:60:1b:7a:d9:80:06:20:22:ee:51:
33:cb:99:57:c1:56:bd:7f:a7:aa:72:c8:08:18:46:54:3f:fd:
bb:a0:bf:f0:ff:e9:60:9e:20:fd:da:ce:d8:2e:ef:a8:d7:0f:
94:29:98:63:57:2d:fa:55:e6:bb:cd:34:ba:b1:05:c5:5b:f2:
a9:29:5f:21:41:49:07:65:e3:b7:f2:d2:be:20:80:2d:88:60:
fb:34:68:07
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPihNYHXM/6GXHy4aobLUDsbNgnMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDI4MDAwMDAwWhcNMjMxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNDYzN2NkYTc2NjdlMzhhMDg5ZDJlYWE4ZjdhY2Q4NjIw
YmYxYzA4MDRmYzYzODRiY2VjMDU4ZTAxZjZkOTBiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3XmR4I7BWrx0FvJgPgP43ZTTcNc/hlxZLSQa9zoCJqOhX
I20WVpnWYpYpX1vIMbirqANvcPUnaV2M9c0/QgSEwk/JteQdmRzddh87dKAKA+rD
RNgu0GQYDWojF7NfGVzAGIrUvVk16r/zCICXXnC9FrV5HAowEyALJtCifHVq2Zpj
J4nSCKhP7lAHuMLuph6/Sg5ooGCR/u8McCxo59vyU546XEF/20OSCV2nylhuzdp8
MHM0+SNCLS9eGz6CVWYBJ2OyHTZInO4QcJAbKrG30+r1bMrDWXgcZTmrTEEigNFI
O3tVQd9T/WVHxRJdFHdiqGm49IaJ4KsZRU7Z/Ax/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUaFVrhV6zwwX0tRe79ovC1YS8a3kwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzhkNzc2YjU2LTM5NTgtNDI2ZC1hZGE1LWUzYzZmODY2ZWJjZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAA8HDgtQX056zUDfplA/GWo/BmMn
VQa8nNNUlDX34ieHGppS7Ej0YqwLD5bOSSxA/azBjsxqaVHRMYnD7YSuqu7vzj+O
27TR4NYKhBtVP++xvv0tIp+ksbJtsbuebKeNFyMZR+TythI+IhIKHPJzbETZMtIx
r1Tr6ds0fAIWK2y7UHeWR0YGjpzrqoAKsQy3+9NgX5ncmaUMXllNwPFaoU+I1Djt
c6mwvQxrYBt62YAGICLuUTPLmVfBVr1/p6pyyAgYRlQ//bugv/D/6WCeIP3aztgu
76jXD5QpmGNXLfpV5rvNNLqxBcVb8qkpXyFBSQdl47fy0r4ggC2IYPs0aAc=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:02 2023 by rpki-client on console.sobornost.net