Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b17ee1ad-335f-4391-9da4-c7c307e4ff99.roa
File: b17ee1ad-335f-4391-9da4-c7c307e4ff99.roa (raw, json)
Hash identifier: Sz2foIbiCBp4R+knnVDxilseWm6eZkl3FKBI51ATANo=
Subject key identifier: 0E:EA:B4:E9:28:F8:D9:4E:2E:29:2A:65:C4:93:AA:04:11:5D:7C:11
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2589372191EB3D3A0C2F6A635FE9BF72053AD752
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b17ee1ad-335f-4391-9da4-c7c307e4ff99.roa
Signing time: Mon 06 Nov 2023 00:00:00 +0000
ROA not before: Mon 06 Nov 2023 00:00:00 +0000
ROA not after: Mon 11 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:89:37:21:91:eb:3d:3a:0c:2f:6a:63:5f:e9:bf:72:05:3a:d7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 6 00:00:00 2023 GMT
Not After : Dec 11 23:59:59 2023 GMT
Subject: serialNumber=bac38301ad941e8b9c7c89fe25e358e9f88f0dcf64a9960cda7a7439c32562d9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:51:35:c6:12:ed:80:f3:92:b1:02:ab:bf:
49:c1:d3:c7:2b:d4:fb:ac:c5:69:1a:70:47:59:9b:
79:67:cc:85:3a:ab:2f:4d:7a:6d:93:95:27:65:2e:
8a:31:1a:bc:de:b0:a3:be:3f:37:c4:c8:52:fb:4d:
d3:74:e5:0f:45:e0:2e:9e:ca:b2:de:7c:8a:f1:db:
6b:16:73:b9:c5:d4:d7:ff:41:75:ac:75:81:cc:e4:
fa:2c:d7:8f:17:e6:ed:06:9c:fe:87:d1:bb:d7:8e:
6e:8c:d1:bf:78:e3:d2:f6:59:7b:14:0d:7f:35:36:
9c:90:05:e6:9d:8e:d4:39:b5:87:73:e3:74:f4:74:
f2:4f:9b:02:6f:cd:6f:78:ab:75:24:02:a1:b4:9e:
1d:99:89:d3:ae:27:ec:17:5b:06:ac:d7:81:27:c2:
11:33:9c:5a:1b:06:3c:89:25:0e:e1:69:cd:94:8a:
f1:4e:97:5e:e0:43:96:92:7a:86:90:4e:1d:af:2d:
3c:60:60:8c:84:ef:70:08:dd:09:78:fe:56:b6:45:
3a:c4:06:1c:be:56:ed:ef:cd:56:bd:f3:47:2e:90:
84:25:22:d6:73:a0:07:2e:cf:71:d4:94:fc:68:5b:
04:3d:7f:36:89:c2:50:11:b7:4e:9d:31:ae:de:11:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EA:B4:E9:28:F8:D9:4E:2E:29:2A:65:C4:93:AA:04:11:5D:7C:11
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b17ee1ad-335f-4391-9da4-c7c307e4ff99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a2:d4:0d:94:9f:26:8f:27:03:f6:35:f0:98:8c:be:c1:25:
f7:71:0c:9f:c5:bd:c5:34:0b:50:e1:99:c2:01:9d:13:1f:9e:
de:78:e9:87:b0:b7:00:6d:2e:82:dc:7c:e5:a5:6d:b3:48:e5:
dc:f1:45:5f:bc:df:cb:46:e1:17:e4:d9:fa:3f:93:fc:52:64:
19:18:f9:5f:00:2a:5e:07:a4:22:0c:51:1e:e5:e7:2b:8d:e7:
56:79:44:4d:c0:07:65:09:1d:ed:df:f7:0e:65:eb:44:63:22:
d7:a7:d2:35:d2:b7:06:6d:87:a1:b5:f6:4c:0b:1b:34:15:9b:
32:ef:13:04:45:d7:ce:af:a9:a4:58:7a:59:e2:6c:59:51:e9:
67:90:2e:2e:83:bd:63:a7:b0:bd:5d:be:42:22:cb:82:95:9f:
d7:95:6f:99:1e:eb:e1:a2:6a:b7:52:39:2b:19:f7:b6:33:d0:
b7:b4:cc:93:20:40:e2:78:5d:27:1b:82:d9:43:6a:c4:ad:19:
79:25:a0:55:b8:0d:e8:f8:9c:bf:9f:37:11:cb:1c:51:08:25:
62:6d:dc:99:c1:6e:88:b6:ad:82:05:31:99:16:b4:66:a3:26:
a9:80:b7:bb:ec:9a:e1:e7:81:2d:5e:17:e5:33:c8:29:3b:90:
44:b2:30:8f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJYk3IZHrPToML2pjX+m/cgU611IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTA2MDAwMDAwWhcNMjMxMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0BiYWMzODMwMWFkOTQxZThiOWM3Yzg5ZmUyNWUzNThlOWY4
OGYwZGNmNjRhOTk2MGNkYTdhNzQzOWMzMjU2MmQ5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHXlE1xhLtgPOSsQKrv0nB08cr1PusxWkacEdZm3lnzIU6
qy9Nem2TlSdlLooxGrzesKO+PzfEyFL7TdN05Q9F4C6eyrLefIrx22sWc7nF1Nf/
QXWsdYHM5Pos148X5u0GnP6H0bvXjm6M0b9449L2WXsUDX81NpyQBeadjtQ5tYdz
43T0dPJPmwJvzW94q3UkAqG0nh2ZidOuJ+wXWwas14EnwhEznFobBjyJJQ7hac2U
ivFOl17gQ5aSeoaQTh2vLTxgYIyE73AI3Ql4/la2RTrEBhy+Vu3vzVa980cukIQl
ItZzoAcuz3HUlPxoWwQ9fzaJwlARt06dMa7eEc1vAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDuq06Sj42U4uKSplxJOqBBFdfBEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2IxN2VlMWFkLTMzNWYtNDM5MS05ZGE0LWM3YzMwN2U0ZmY5OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJSi1A2UnyaPJwP2NfCYjL7BJfdx
DJ/FvcU0C1DhmcIBnRMfnt546YewtwBtLoLcfOWlbbNI5dzxRV+838tG4Rfk2fo/
k/xSZBkY+V8AKl4HpCIMUR7l5yuN51Z5RE3AB2UJHe3f9w5l60RjIten0jXStwZt
h6G19kwLGzQVmzLvEwRF186vqaRYelnibFlR6WeQLi6DvWOnsL1dvkIiy4KVn9eV
b5ke6+GiardSOSsZ97Yz0Le0zJMgQOJ4XScbgtlDasStGXkloFW4Dej4nL+fNxHL
HFEIJWJt3JnBboi2rYIFMZkWtGajJqmAt7vsmuHngS1eF+UzyCk7kESyMI8=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net