Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b76a4fb3-f1f5-435b-acf6-7d50396ed5f7.roa
File: b76a4fb3-f1f5-435b-acf6-7d50396ed5f7.roa (raw, json)
Hash identifier: NY7dU7HdwElqBXCY0Ctf5QEMwHr3EXkdffGeNTaR4O4=
Subject key identifier: 9C:25:9D:1C:86:0F:B2:59:42:AE:62:C9:EE:C5:54:CE:17:EF:F0:03
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 43704EA6B0A7E516E70A24A8237096B027CE93A7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b76a4fb3-f1f5-435b-acf6-7d50396ed5f7.roa
Signing time: Tue 04 Jul 2023 00:00:00 +0000
ROA not before: Tue 04 Jul 2023 00:00:00 +0000
ROA not after: Tue 08 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:70:4e:a6:b0:a7:e5:16:e7:0a:24:a8:23:70:96:b0:27:ce:93:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 4 00:00:00 2023 GMT
Not After : Aug 8 23:59:59 2023 GMT
Subject: serialNumber=aff2cb7e502b7b7be66e201fac83917c6b6318b83492920f78c5b08b2d3129ad, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:a1:4e:93:14:7d:8a:2b:4a:06:7a:f6:fa:
f4:fe:d1:cd:05:51:f5:ec:26:6e:ab:65:6e:cb:25:
48:73:cf:1d:02:17:3f:40:17:06:9b:d1:50:a2:89:
92:8f:82:7e:8b:30:9a:ea:f0:2b:3c:cb:b8:4c:4a:
50:c1:58:e7:30:ff:8f:05:5d:4e:96:eb:4c:84:ea:
1a:dd:b9:df:d9:53:dc:fb:28:b6:2f:b3:c4:67:4d:
b7:4a:eb:ed:96:d3:74:68:1c:20:ba:11:38:72:3d:
37:82:79:bc:9a:56:f3:3d:a5:0e:18:93:dc:df:05:
f9:ea:01:32:8c:01:45:14:6f:ac:86:39:3d:40:11:
1a:98:ac:e1:b4:af:d7:bd:dd:20:10:8a:3f:17:86:
6c:36:b4:57:f9:3a:22:7a:5e:51:4e:d7:70:31:e1:
00:9c:75:70:23:ac:19:30:d1:ba:c8:93:17:b6:d8:
22:c7:44:b7:c9:c5:96:09:b6:93:c9:dd:c5:fd:f1:
5d:e5:c5:06:c9:1d:0a:d5:09:bb:b1:4e:35:81:47:
49:58:48:69:6a:e7:12:50:eb:30:1a:84:10:d3:42:
49:9e:a5:07:32:ad:84:9f:4d:ea:7a:60:ca:7d:0b:
20:71:8a:0e:a2:6e:b7:b1:9a:25:31:2c:db:49:1e:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:25:9D:1C:86:0F:B2:59:42:AE:62:C9:EE:C5:54:CE:17:EF:F0:03
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b76a4fb3-f1f5-435b-acf6-7d50396ed5f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7d:26:c0:39:51:4d:ae:e2:9a:cb:ad:3f:bd:f1:81:eb:5a:
e9:be:4f:ed:51:4e:88:77:ea:56:c1:c2:bf:e1:2e:f7:8d:47:
d9:d8:e1:30:24:2b:17:44:73:e3:a7:0c:7b:63:7e:03:29:e4:
53:3e:c7:9e:cc:30:67:c6:54:ba:71:15:dc:30:ef:84:d8:0a:
9d:08:4b:5e:a1:b8:47:8d:ed:fa:11:c4:78:de:20:b7:cc:81:
90:c9:20:8b:66:0e:5a:13:c5:d8:d2:4a:f7:d3:f0:62:ab:85:
4d:80:19:70:6c:8c:78:44:e1:91:96:c8:8f:f3:ad:87:c5:45:
33:ba:ba:1b:40:0d:a0:64:da:a9:b2:1d:55:61:7b:24:27:a3:
25:8d:06:83:2c:7d:3b:e0:ec:31:55:bd:1e:18:98:21:0d:03:
5b:05:2e:a3:31:b0:24:32:2e:16:cd:b4:4b:1d:57:b2:47:9d:
3e:aa:f1:2d:62:03:79:63:b6:aa:b0:6a:e8:f1:e7:ea:be:b4:
8c:0f:84:64:14:06:9f:01:9d:e2:86:64:44:8f:6e:71:97:c0:
cc:c5:31:b3:8d:5e:ba:23:9b:48:d8:0e:f6:ae:38:08:69:d2:
8c:61:db:4d:9f:1c:1f:7f:a9:bc:60:5a:80:4c:62:1f:5d:46:
ba:8e:c3:17
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQ3BOprCn5RbnCiSoI3CWsCfOk6cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzA0MDAwMDAwWhcNMjMwODA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZmYyY2I3ZTUwMmI3YjdiZTY2ZTIwMWZhYzgzOTE3YzZi
NjMxOGI4MzQ5MjkyMGY3OGM1YjA4YjJkMzEyOWFkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQUqFOkxR9iitKBnr2+vT+0c0FUfXsJm6rZW7LJUhzzx0C
Fz9AFwab0VCiiZKPgn6LMJrq8Cs8y7hMSlDBWOcw/48FXU6W60yE6hrdud/ZU9z7
KLYvs8RnTbdK6+2W03RoHCC6EThyPTeCebyaVvM9pQ4Yk9zfBfnqATKMAUUUb6yG
OT1AERqYrOG0r9e93SAQij8Xhmw2tFf5OiJ6XlFO13Ax4QCcdXAjrBkw0brIkxe2
2CLHRLfJxZYJtpPJ3cX98V3lxQbJHQrVCbuxTjWBR0lYSGlq5xJQ6zAahBDTQkme
pQcyrYSfTep6YMp9CyBxig6ibrexmiUxLNtJHtjzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnCWdHIYPsllCrmLJ7sVUzhfv8AMwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2I3NmE0ZmIzLWYxZjUtNDM1Yi1hY2Y2LTdkNTAzOTZlZDVmNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFF9JsA5UU2u4prLrT+98YHrWum+
T+1RToh36lbBwr/hLveNR9nY4TAkKxdEc+OnDHtjfgMp5FM+x57MMGfGVLpxFdww
74TYCp0IS16huEeN7foRxHjeILfMgZDJIItmDloTxdjSSvfT8GKrhU2AGXBsjHhE
4ZGWyI/zrYfFRTO6uhtADaBk2qmyHVVheyQnoyWNBoMsfTvg7DFVvR4YmCENA1sF
LqMxsCQyLhbNtEsdV7JHnT6q8S1iA3ljtqqwaujx5+q+tIwPhGQUBp8BneKGZESP
bnGXwMzFMbONXrojm0jYDvauOAhp0oxh202fHB9/qbxgWoBMYh9dRrqOwxc=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net