Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bb387c33-0f36-4d01-871e-8a70f62de762.roa
File: bb387c33-0f36-4d01-871e-8a70f62de762.roa (raw, json)
Hash identifier: q3zkTUXLrDE8anMV7txjkQ3wgZSqWspflFe/dNdJLEI=
Subject key identifier: 93:4F:0F:72:5B:36:59:17:E0:9B:BA:33:4D:C0:21:FB:C1:A9:A1:9F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4B367D9F4C28F32133D9E0C7A0E60EC91E3EEF69
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bb387c33-0f36-4d01-871e-8a70f62de762.roa
Signing time: Sun 08 Oct 2023 00:00:00 +0000
ROA not before: Sun 08 Oct 2023 00:00:00 +0000
ROA not after: Sun 12 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:36:7d:9f:4c:28:f3:21:33:d9:e0:c7:a0:e6:0e:c9:1e:3e:ef:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 8 00:00:00 2023 GMT
Not After : Nov 12 23:59:59 2023 GMT
Subject: serialNumber=7bd96fb4213094fdffd8ebb856063ccaf2bfcfc91b7920fdd02b4954d99e8ea3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:6e:ca:8b:9f:c0:f8:22:aa:d7:e1:c8:72:
1c:a4:04:18:18:ef:8a:f8:82:79:3e:24:c1:58:d2:
df:e5:8a:00:7f:de:85:76:35:f6:87:7d:c2:17:dd:
bb:92:63:cf:98:f4:34:94:c8:83:a4:73:e0:2e:d6:
95:5e:c5:b1:ff:d3:8f:02:30:1c:c7:ac:3b:8e:ce:
9d:a3:d6:b3:fc:30:a8:15:63:c5:99:98:7c:5a:8e:
8e:c8:b5:c3:13:fe:e5:17:87:3d:c4:6a:05:6e:d2:
01:ce:4a:ed:9d:e8:98:aa:be:8b:bb:c0:36:a7:03:
d5:ca:f8:76:17:eb:3c:cc:75:82:02:b2:1f:87:e3:
51:ee:54:67:b9:f4:d8:b0:69:1e:be:5a:2b:25:65:
b3:82:b2:7f:eb:1b:97:46:21:7a:78:c3:4d:70:8c:
47:66:7f:c3:11:be:46:d7:53:6f:8e:4f:64:ff:e0:
a2:14:ce:30:2a:55:75:db:10:01:5b:8a:51:56:eb:
3c:8d:eb:b8:ef:d2:96:a7:bd:5f:41:f1:60:df:4d:
f4:be:f6:12:69:c5:84:e5:0d:13:fd:2d:79:05:2a:
93:61:57:6d:47:61:64:65:48:23:64:6c:3c:0b:71:
a9:9d:a8:f8:54:fa:66:b5:b7:bd:5e:cb:97:94:f6:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4F:0F:72:5B:36:59:17:E0:9B:BA:33:4D:C0:21:FB:C1:A9:A1:9F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bb387c33-0f36-4d01-871e-8a70f62de762.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
09:8d:d8:74:f7:c0:a0:6f:26:c2:55:63:22:bd:b9:10:fc:3c:
a7:b3:02:8c:e4:b9:68:87:13:5c:c8:96:32:6f:a6:a3:80:96:
49:f7:8f:6b:b7:94:cc:c1:a0:e6:44:76:a0:68:92:22:5c:0b:
b7:e7:58:96:dc:86:68:10:9a:67:e2:9c:23:05:ca:48:f5:e8:
0f:2c:38:9e:e3:27:cc:ca:0c:19:f8:2e:03:40:9b:27:3e:5e:
d2:21:f6:f8:21:10:73:0a:33:7c:48:8d:be:a6:ee:63:61:72:
99:0c:a1:d0:2a:bd:2b:ff:e9:2d:05:fd:12:d7:af:fb:57:24:
cb:1e:9c:14:a0:e9:de:17:fe:aa:a6:09:ce:8a:09:d8:4d:db:
0c:d1:cb:ea:5a:63:ec:10:08:3f:d8:db:c2:b1:97:62:a0:41:
90:85:bf:22:cb:82:14:66:54:b3:7c:23:22:37:7d:3c:d4:3b:
c9:f1:72:48:86:33:ca:07:d8:1e:04:dc:36:d3:cb:78:d1:3d:
c9:74:6e:4f:bb:32:e3:6c:8f:43:a2:be:b8:4e:74:3e:dd:b9:
bc:86:77:d6:bf:be:ce:f6:7c:d5:4a:44:56:39:9d:04:cf:b8:
67:3e:a0:a5:4f:22:a6:0f:5d:9b:80:89:b3:91:e9:7b:7f:e1:
3a:07:ff:83
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSzZ9n0wo8yEz2eDHoOYOyR4+72kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDA4MDAwMDAwWhcNMjMxMTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3YmQ5NmZiNDIxMzA5NGZkZmZkOGViYjg1NjA2M2NjYWYy
YmZjZmM5MWI3OTIwZmRkMDJiNDk1NGQ5OWU4ZWEzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjm27Ki5/A+CKq1+HIchykBBgY74r4gnk+JMFY0t/ligB/
3oV2NfaHfcIX3buSY8+Y9DSUyIOkc+Au1pVexbH/048CMBzHrDuOzp2j1rP8MKgV
Y8WZmHxajo7ItcMT/uUXhz3EagVu0gHOSu2d6Jiqvou7wDanA9XK+HYX6zzMdYIC
sh+H41HuVGe59NiwaR6+WislZbOCsn/rG5dGIXp4w01wjEdmf8MRvkbXU2+OT2T/
4KIUzjAqVXXbEAFbilFW6zyN67jv0panvV9B8WDfTfS+9hJpxYTlDRP9LXkFKpNh
V21HYWRlSCNkbDwLcamdqPhU+ma1t71ey5eU9h71AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUk08Pcls2WRfgm7ozTcAh+8GpoZ8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2JiMzg3YzMzLTBmMzYtNGQwMS04NzFlLThhNzBmNjJkZTc2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAmN2HT3wKBvJsJVYyK9uRD8PKez
AozkuWiHE1zIljJvpqOAlkn3j2u3lMzBoOZEdqBokiJcC7fnWJbchmgQmmfinCMF
ykj16A8sOJ7jJ8zKDBn4LgNAmyc+XtIh9vghEHMKM3xIjb6m7mNhcpkModAqvSv/
6S0F/RLXr/tXJMsenBSg6d4X/qqmCc6KCdhN2wzRy+paY+wQCD/Y28Kxl2KgQZCF
vyLLghRmVLN8IyI3fTzUO8nxckiGM8oH2B4E3DbTy3jRPcl0bk+7MuNsj0OivrhO
dD7dubyGd9a/vs72fNVKRFY5nQTPuGc+oKVPIqYPXZuAibOR6Xt/4ToH/4M=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:11 2023 by rpki-client on console.sobornost.net