Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/becb7b2d-21d4-4916-b30b-3a8ffd6d3828.roa
File: becb7b2d-21d4-4916-b30b-3a8ffd6d3828.roa (raw, json)
Hash identifier: DLmdSFTf57RMD9C/8skHoc22aEIZl8Zue9MJ0xeReKc=
Subject key identifier: 1B:5E:C5:57:EC:3F:0E:67:D9:0A:13:3E:73:9A:56:35:37:CC:51:0D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2A8B652E4E80EE4C583D2AD24C264F3ADD439804
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/becb7b2d-21d4-4916-b30b-3a8ffd6d3828.roa
Signing time: Tue 24 Oct 2023 00:00:00 +0000
ROA not before: Tue 24 Oct 2023 00:00:00 +0000
ROA not after: Tue 28 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:8b:65:2e:4e:80:ee:4c:58:3d:2a:d2:4c:26:4f:3a:dd:43:98:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 24 00:00:00 2023 GMT
Not After : Nov 28 23:59:59 2023 GMT
Subject: serialNumber=16e837aa64bc7a3e82ccb07000813ab2edb9f500fbdc37a80dee6877bcbb8a8d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:58:98:5d:3a:ec:11:60:aa:ea:cb:53:fe:
81:41:5e:b6:93:45:6c:51:da:00:aa:90:b4:85:a1:
ab:68:25:8c:ad:11:7c:df:bf:c3:07:d0:59:f4:0d:
93:93:40:68:e5:f5:24:e4:9f:52:f4:88:c8:3f:7f:
80:cc:7c:74:15:74:49:eb:7e:15:2f:23:1b:01:34:
c0:75:74:87:10:80:30:ae:03:88:73:ea:98:8f:46:
7d:fb:63:f0:8d:f3:55:64:e8:33:8f:95:ae:a2:3b:
1e:24:e1:62:66:d6:33:f8:cb:b7:44:e4:32:4f:f4:
cd:4a:b7:90:42:10:db:5b:ee:41:26:c0:dc:e0:e1:
b5:b1:6d:16:70:aa:1e:b5:70:74:2b:2c:45:1d:b2:
bd:87:54:ad:05:64:eb:0f:02:d6:a1:98:4d:61:8b:
fc:f8:f7:57:51:8c:f5:2b:63:64:85:0f:9c:1a:9f:
8e:87:46:70:48:62:e0:b7:7f:c6:be:e7:b6:cf:b5:
c7:d4:fb:2d:15:3e:96:b2:1b:3e:5e:25:de:7f:7c:
86:0d:b3:39:a9:e8:a8:b9:ae:69:59:e7:3d:29:cc:
cb:03:23:c1:e6:fe:25:20:11:73:dc:41:64:22:35:
86:9c:c5:28:2c:ab:60:68:4e:61:d0:36:a1:84:20:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5E:C5:57:EC:3F:0E:67:D9:0A:13:3E:73:9A:56:35:37:CC:51:0D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/becb7b2d-21d4-4916-b30b-3a8ffd6d3828.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:57:93:de:71:68:6f:46:0f:f7:07:6d:46:e4:55:c9:a3:1c:
47:71:69:09:49:35:0b:ae:51:19:68:15:65:3f:e0:5e:e2:36:
f1:83:b1:d8:41:51:32:6b:4d:66:cf:12:6d:a3:83:9b:df:63:
ee:8e:0a:31:05:32:8e:b5:f7:5d:30:d4:30:7d:d7:d6:f9:71:
4f:24:69:22:c8:57:c9:9c:7f:03:51:6a:59:7b:c3:08:9f:dd:
45:95:13:b8:2c:d9:09:2c:c1:eb:7e:65:a2:84:2e:55:96:33:
0d:f8:27:fc:72:83:1b:c9:52:12:63:1a:51:61:cf:f1:23:54:
76:85:e3:28:bc:55:be:e5:b4:ae:4d:78:86:a9:1f:fa:4c:db:
74:38:91:e0:fc:f7:5c:24:c7:d3:6d:05:c2:19:8e:70:66:7a:
01:32:c7:4f:53:cd:fd:c8:f1:0c:95:0f:bd:14:e7:dd:de:ef:
e9:23:5b:f9:5e:0f:74:16:2e:bf:2b:90:b7:b2:63:cc:51:16:
20:bc:60:d9:dd:de:05:b5:73:bd:09:f8:87:ee:6b:db:6b:0d:
ef:5b:63:00:c1:1c:18:1d:c3:5a:68:1a:37:ae:70:a8:3d:7b:
74:b9:91:3c:cc:f7:01:be:2e:89:15:7d:ed:e7:96:92:5c:e7:
01:66:58:7e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKotlLk6A7kxYPSrSTCZPOt1DmAQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDI0MDAwMDAwWhcNMjMxMTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNmU4MzdhYTY0YmM3YTNlODJjY2IwNzAwMDgxM2FiMmVk
YjlmNTAwZmJkYzM3YTgwZGVlNjg3N2JjYmI4YThkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCu9liYXTrsEWCq6stT/oFBXraTRWxR2gCqkLSFoatoJYyt
EXzfv8MH0Fn0DZOTQGjl9STkn1L0iMg/f4DMfHQVdEnrfhUvIxsBNMB1dIcQgDCu
A4hz6piPRn37Y/CN81Vk6DOPla6iOx4k4WJm1jP4y7dE5DJP9M1Kt5BCENtb7kEm
wNzg4bWxbRZwqh61cHQrLEUdsr2HVK0FZOsPAtahmE1hi/z491dRjPUrY2SFD5wa
n46HRnBIYuC3f8a+57bPtcfU+y0VPpayGz5eJd5/fIYNszmp6Ki5rmlZ5z0pzMsD
I8Hm/iUgEXPcQWQiNYacxSgsq2BoTmHQNqGEIORPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUG17FV+w/DmfZChM+c5pWNTfMUQ0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2JlY2I3YjJkLTIxZDQtNDkxNi1iMzBiLTNhOGZmZDZkMzgyOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJpXk95xaG9GD/cHbUbkVcmjHEdx
aQlJNQuuURloFWU/4F7iNvGDsdhBUTJrTWbPEm2jg5vfY+6OCjEFMo61910w1DB9
19b5cU8kaSLIV8mcfwNRall7wwif3UWVE7gs2Qkswet+ZaKELlWWMw34J/xygxvJ
UhJjGlFhz/EjVHaF4yi8Vb7ltK5NeIapH/pM23Q4keD891wkx9NtBcIZjnBmegEy
x09Tzf3I8QyVD70U593e7+kjW/leD3QWLr8rkLeyY8xRFiC8YNnd3gW1c70J+Ifu
a9trDe9bYwDBHBgdw1poGjeucKg9e3S5kTzM9wG+LokVfe3nlpJc5wFmWH4=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:12 2023 by rpki-client on console.sobornost.net