Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a360ae80-9f07-4146-8fb9-02ae4b6c7374.roa
File: a360ae80-9f07-4146-8fb9-02ae4b6c7374.roa (raw, json)
Hash identifier: PPuOI17EsBJQki48++afZw6h8Yfxaj/NAvzKqyQj1to=
Subject key identifier: 85:29:E6:16:FC:5F:B5:8F:38:87:28:1A:1F:C3:25:0B:5C:B9:35:AB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1476E6EAEAABDC9B02B1D45AFAB3048C16B350B5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a360ae80-9f07-4146-8fb9-02ae4b6c7374.roa
Signing time: Sun 20 Aug 2023 00:00:00 +0000
ROA not before: Sun 20 Aug 2023 00:00:00 +0000
ROA not after: Sun 24 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:76:e6:ea:ea:ab:dc:9b:02:b1:d4:5a:fa:b3:04:8c:16:b3:50:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 20 00:00:00 2023 GMT
Not After : Sep 24 23:59:59 2023 GMT
Subject: serialNumber=6799050ded0ed1c4441a39aa21679cd7d2902d60fc9355b812c9e6670469123d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:1e:ac:43:06:b7:56:a6:37:1d:76:b2:58:
34:12:01:73:db:64:8f:98:e1:0f:7a:05:9b:55:23:
b6:8f:f0:78:8f:77:67:00:ba:7f:10:bc:9e:e7:c6:
18:b0:c9:57:17:60:70:bc:13:9d:ac:13:f8:3d:08:
db:b2:fe:8c:52:0e:20:16:af:04:f4:c1:7b:4e:4b:
32:48:df:9a:e5:2a:f4:a1:7f:fc:fb:2c:21:13:3b:
f5:59:a9:cf:d1:61:6d:15:42:e2:41:bd:63:a5:0a:
65:74:bc:f6:ec:4c:ff:b8:d4:e9:68:a1:67:d2:95:
f4:0f:fa:31:06:50:22:32:2f:9c:fc:17:67:0d:1a:
3e:82:c0:df:6c:ad:62:dd:0c:33:65:63:b8:63:c8:
92:0f:c2:90:b4:df:ce:9d:a4:54:8c:2a:3e:fd:5c:
8d:5f:ec:76:ed:ca:93:94:16:c1:28:15:2d:b2:70:
fe:e7:50:e6:31:cf:d9:b4:91:2a:a0:35:47:84:99:
22:d8:dd:93:1a:ea:f9:5b:65:d1:03:dc:f5:d5:f6:
cb:79:f1:e2:b8:22:06:7c:d5:b4:dd:f6:40:1b:e3:
4a:24:8f:ad:21:14:ea:62:ed:98:cd:d7:17:f0:3b:
50:aa:c7:3e:1b:ec:5a:b9:e4:51:e0:e8:d8:07:44:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:29:E6:16:FC:5F:B5:8F:38:87:28:1A:1F:C3:25:0B:5C:B9:35:AB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a360ae80-9f07-4146-8fb9-02ae4b6c7374.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:e6:d8:3b:be:95:03:e0:9d:69:57:6a:79:73:07:0d:a4:52:
56:5d:56:2c:d7:52:cd:29:b3:ef:b7:62:6b:59:2c:75:64:a8:
f5:42:c2:6b:c3:31:42:49:82:5c:54:94:fe:34:2b:ef:94:a4:
b6:95:41:e7:16:16:c3:27:03:a8:2a:50:2e:10:2f:66:b4:11:
26:c9:5c:24:2b:4c:6f:1e:8b:cb:13:0e:ce:3b:6b:a9:70:88:
67:8f:3c:62:d9:af:ce:27:92:c7:3c:e3:2f:72:02:3f:ca:95:
38:61:65:a5:af:47:6c:84:92:87:14:cf:03:2c:eb:6a:7d:d5:
6d:47:9d:a1:3b:86:e0:29:d0:20:4f:fd:e1:1d:d8:66:57:f9:
7b:5f:69:9e:c9:9e:ed:4d:a5:11:00:e1:db:a4:42:b0:8c:ab:
ca:d3:1d:05:30:cc:66:b9:84:70:a6:2c:09:c0:4d:b2:02:3c:
81:0e:8d:f4:da:c1:14:3b:e5:b6:3e:e3:42:55:17:8a:2a:ac:
8d:03:48:4b:bc:d5:a9:66:35:bb:a8:a3:bc:ed:10:4b:d2:87:
41:31:0c:5f:93:e7:a9:84:c6:63:5e:49:b4:bd:9b:ee:15:09:
4a:45:c9:89:95:36:8f:9b:57:0a:57:2e:a5:d3:c8:f9:60:b0:
49:76:40:03
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFHbm6uqr3JsCsdRa+rMEjBazULUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODIwMDAwMDAwWhcNMjMwOTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A2Nzk5MDUwZGVkMGVkMWM0NDQxYTM5YWEyMTY3OWNkN2Qy
OTAyZDYwZmM5MzU1YjgxMmM5ZTY2NzA0NjkxMjNkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCk4h6sQwa3VqY3HXayWDQSAXPbZI+Y4Q96BZtVI7aP8HiP
d2cAun8QvJ7nxhiwyVcXYHC8E52sE/g9CNuy/oxSDiAWrwT0wXtOSzJI35rlKvSh
f/z7LCETO/VZqc/RYW0VQuJBvWOlCmV0vPbsTP+41OlooWfSlfQP+jEGUCIyL5z8
F2cNGj6CwN9srWLdDDNlY7hjyJIPwpC0386dpFSMKj79XI1f7HbtypOUFsEoFS2y
cP7nUOYxz9m0kSqgNUeEmSLY3ZMa6vlbZdED3PXV9st58eK4IgZ81bTd9kAb40ok
j60hFOpi7ZjN1xfwO1Cqxz4b7Fq55FHg6NgHRGITAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhSnmFvxftY84hygaH8MlC1y5NaswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2EzNjBhZTgwLTlmMDctNDE0Ni04ZmI5LTAyYWU0YjZjNzM3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKXm2Du+lQPgnWlXanlzBw2kUlZd
VizXUs0ps++3YmtZLHVkqPVCwmvDMUJJglxUlP40K++UpLaVQecWFsMnA6gqUC4Q
L2a0ESbJXCQrTG8ei8sTDs47a6lwiGePPGLZr84nksc84y9yAj/KlThhZaWvR2yE
kocUzwMs62p91W1HnaE7huAp0CBP/eEd2GZX+XtfaZ7Jnu1NpREA4dukQrCMq8rT
HQUwzGa5hHCmLAnATbICPIEOjfTawRQ75bY+40JVF4oqrI0DSEu81almNbuoo7zt
EEvSh0ExDF+T56mExmNeSbS9m+4VCUpFyYmVNo+bVwpXLqXTyPlgsEl2QAM=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:07 2023 by rpki-client on console.sobornost.net