Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/afb00b97-49aa-49e2-bc33-de2e4f1e6863.roa
File: afb00b97-49aa-49e2-bc33-de2e4f1e6863.roa (raw, json)
Hash identifier: vnSk2TGCB+5R4i9gZY4chl6XNCumFjgEffje7uq+ZMY=
Subject key identifier: 9D:C6:88:75:2E:19:E3:AD:C5:80:48:0F:F8:A6:26:8E:76:47:86:3A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 047375A683D1B027E5DE49B237B67C1D0FE32191
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/afb00b97-49aa-49e2-bc33-de2e4f1e6863.roa
Signing time: Thu 09 Nov 2023 00:00:00 +0000
ROA not before: Thu 09 Nov 2023 00:00:00 +0000
ROA not after: Thu 14 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:73:75:a6:83:d1:b0:27:e5:de:49:b2:37:b6:7c:1d:0f:e3:21:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 9 00:00:00 2023 GMT
Not After : Dec 14 23:59:59 2023 GMT
Subject: serialNumber=a696cae94bec96ba328bd42d53e4aa2aac891308365f5020e7ef3379e36057b3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:3c:84:d4:14:8a:73:8f:28:c2:3f:09:71:
eb:2e:3a:11:45:63:1e:fd:23:98:ac:d5:59:c7:e1:
08:86:96:9e:88:cf:b5:18:0f:b5:4b:0f:63:06:c4:
bd:10:6e:d5:6c:b7:b1:5f:95:55:3d:f1:f4:03:f4:
a9:1c:38:f4:77:f5:86:00:ed:a1:7e:0a:86:a3:55:
71:38:d2:9a:85:17:6b:53:70:6f:0f:b5:8b:26:2a:
22:c5:b5:e1:2f:ce:e3:bb:1f:9a:c8:62:37:ba:a1:
c2:41:eb:5a:ea:f1:a9:fd:2b:ed:ac:2c:78:b6:5d:
3c:f1:19:4c:8c:42:73:1a:8a:fa:66:54:68:d0:d0:
03:65:6a:d5:73:9f:9b:e4:c4:2d:d0:08:b2:bb:e3:
65:df:5f:b9:f8:83:1c:94:b9:99:08:9d:be:71:7a:
fe:03:e3:00:2a:d9:4f:34:b6:bc:dc:91:d4:a3:71:
52:84:1f:fb:39:c4:3e:6d:70:28:fa:7d:eb:f2:38:
b0:21:bd:71:be:c2:d6:5e:df:36:72:02:9b:ce:ad:
f5:e4:b2:f3:b3:2c:f3:a4:4d:81:0d:09:8c:be:ab:
75:ea:6c:14:a9:9b:2a:49:10:00:d5:75:e5:a7:58:
07:a1:9d:7c:2d:ab:6d:3e:d3:6c:cf:71:2a:bc:d6:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C6:88:75:2E:19:E3:AD:C5:80:48:0F:F8:A6:26:8E:76:47:86:3A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/afb00b97-49aa-49e2-bc33-de2e4f1e6863.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7f:c0:da:81:4a:0b:c9:e6:95:50:70:69:86:c3:36:b8:a8:
be:7a:98:8a:61:b3:e8:32:d5:47:05:b8:80:c5:68:14:61:53:
88:a2:6c:50:7e:21:eb:14:41:02:84:78:9c:c6:98:4b:2d:95:
2b:ca:6d:2e:93:8c:b7:9d:f7:d1:7d:b3:37:02:60:83:48:a7:
45:c5:89:1b:0e:ba:c1:06:e4:59:40:e4:97:a7:0e:db:ea:99:
04:3c:94:80:c5:4a:9d:d8:d6:b4:86:b5:57:e3:d5:02:46:a5:
76:b8:29:c0:be:8a:0a:46:2a:a2:b0:fd:2f:33:c4:02:57:4f:
ab:4c:16:84:5e:87:89:1a:dc:cc:25:64:f8:c9:7b:a5:29:3f:
6f:48:b6:12:a3:89:63:18:ee:09:75:87:70:53:c1:59:e6:ec:
84:24:91:17:2b:a7:cd:a8:8a:3b:80:83:af:88:c6:65:4d:32:
a1:5b:a7:be:dc:b0:31:65:6d:df:af:78:10:76:ab:ac:55:f9:
31:7b:70:1b:07:60:99:b0:dd:37:1d:77:db:e7:98:c6:b9:8e:
9e:b2:91:04:4c:01:3e:cb:49:22:fc:d1:0e:0f:7f:d1:fc:20:
cf:2e:ef:93:a4:a0:5a:68:3b:b4:d2:ff:1c:65:95:67:04:9a:
91:65:ba:d0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBHN1poPRsCfl3kmyN7Z8HQ/jIZEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTA5MDAwMDAwWhcNMjMxMjE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNjk2Y2FlOTRiZWM5NmJhMzI4YmQ0MmQ1M2U0YWEyYWFj
ODkxMzA4MzY1ZjUwMjBlN2VmMzM3OWUzNjA1N2IzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAXDyE1BSKc48owj8JcesuOhFFYx79I5is1VnH4QiGlp6I
z7UYD7VLD2MGxL0QbtVst7FflVU98fQD9KkcOPR39YYA7aF+CoajVXE40pqFF2tT
cG8PtYsmKiLFteEvzuO7H5rIYje6ocJB61rq8an9K+2sLHi2XTzxGUyMQnMaivpm
VGjQ0ANlatVzn5vkxC3QCLK742XfX7n4gxyUuZkInb5xev4D4wAq2U80trzckdSj
cVKEH/s5xD5tcCj6fevyOLAhvXG+wtZe3zZyApvOrfXksvOzLPOkTYENCYy+q3Xq
bBSpmypJEADVdeWnWAehnXwtq20+02zPcSq81p4bAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUncaIdS4Z463FgEgP+KYmjnZHhjowHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2FmYjAwYjk3LTQ5YWEtNDllMi1iYzMzLWRlMmU0ZjFlNjg2My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAH9/wNqBSgvJ5pVQcGmGwza4qL56
mIphs+gy1UcFuIDFaBRhU4iibFB+IesUQQKEeJzGmEstlSvKbS6TjLed99F9szcC
YINIp0XFiRsOusEG5FlA5JenDtvqmQQ8lIDFSp3Y1rSGtVfj1QJGpXa4KcC+igpG
KqKw/S8zxAJXT6tMFoReh4ka3MwlZPjJe6UpP29IthKjiWMY7gl1h3BTwVnm7IQk
kRcrp82oijuAg6+IxmVNMqFbp77csDFlbd+veBB2q6xV+TF7cBsHYJmw3Tcdd9vn
mMa5jp6ykQRMAT7LSSL80Q4Pf9H8IM8u75OkoFpoO7TS/xxllWcEmpFlutA=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:09 2023 by rpki-client on console.sobornost.net