Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c032a142-a717-4a63-ade5-d8ce38ba986d.roa
File: c032a142-a717-4a63-ade5-d8ce38ba986d.roa (raw, json)
Hash identifier: WH+jHzyLaTYPACJXeEgqOnrPQUzoGcv3U8tbV/KrajA=
Subject key identifier: EE:73:79:5C:3E:DF:DD:C4:95:97:06:DF:B1:64:BE:AD:7F:12:F3:DC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3C504905BD579F6F0FC913C8F239D4A4AC796752
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c032a142-a717-4a63-ade5-d8ce38ba986d.roa
Signing time: Sun 19 Nov 2023 00:00:00 +0000
ROA not before: Sun 19 Nov 2023 00:00:00 +0000
ROA not after: Sun 24 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:50:49:05:bd:57:9f:6f:0f:c9:13:c8:f2:39:d4:a4:ac:79:67:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 19 00:00:00 2023 GMT
Not After : Dec 24 23:59:59 2023 GMT
Subject: serialNumber=7282228aff1d71a164c2e5b36c940ddc341b68ecc5bd1734992e26f6f2a7c1e2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:2b:c5:70:e9:ff:d9:e3:df:ef:ef:5d:d7:
91:a7:0e:42:75:66:89:ad:61:56:73:25:26:66:df:
56:32:60:33:69:ee:61:18:bc:34:3d:08:51:44:9e:
e9:59:f1:b3:44:4d:01:f3:2d:d6:02:52:4a:e4:6a:
db:eb:bf:11:48:a3:f3:9c:65:00:27:30:0a:9f:e5:
a5:44:40:01:45:5b:46:80:b3:30:a6:b1:41:f2:08:
6c:bc:d6:06:a2:02:ef:c4:2a:7c:71:85:ac:8c:08:
08:bb:7c:87:d0:f3:bf:bd:69:67:55:39:0a:4a:ec:
eb:14:ca:43:16:3d:a9:a8:de:a5:02:c7:82:3c:ac:
9f:da:e0:32:23:1c:3c:40:5c:72:56:b6:05:d4:1c:
1b:eb:b6:00:17:fc:85:39:51:6c:6a:1d:cc:bd:c2:
40:8a:b2:d2:f9:0c:c5:24:8c:bd:5a:b1:ff:2f:91:
02:a7:ad:b2:38:5a:f4:b5:e3:14:27:b8:0b:2c:3f:
c7:df:96:53:85:f0:68:a2:c1:e5:91:78:7b:85:c7:
46:bc:c3:e9:7c:a7:92:8b:ee:a2:7b:6c:97:a9:36:
cd:e3:59:b3:f5:03:a3:89:ce:68:a5:93:16:5e:35:
37:f1:9c:21:e6:2d:0e:d2:4b:d5:cd:ba:38:6f:1a:
2a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:73:79:5C:3E:DF:DD:C4:95:97:06:DF:B1:64:BE:AD:7F:12:F3:DC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c032a142-a717-4a63-ade5-d8ce38ba986d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c0:07:c6:a0:cc:55:24:3a:97:4b:96:0b:c8:b4:ae:41:e1:
82:cd:f7:7b:54:30:7d:64:59:44:60:d1:4e:15:58:82:57:09:
37:91:09:32:cf:6c:fb:3f:8b:78:4e:d6:30:1c:20:80:ec:0f:
51:de:36:dc:0c:a2:2c:62:bd:77:1e:21:44:38:fc:35:97:69:
7f:b2:ec:c1:a0:9f:5a:be:50:81:60:6f:f3:08:ad:29:e9:46:
6e:89:1d:76:34:e7:d6:f7:67:7c:12:3f:c6:16:d1:0c:78:08:
74:e5:69:5f:6c:e6:6a:32:cb:4e:9d:f1:d1:b6:ca:2b:58:18:
88:bb:36:c2:02:87:67:9c:d6:fb:1b:7a:52:9e:8a:e3:1a:6d:
14:22:8d:16:b9:d3:88:97:38:6a:10:93:fb:67:f7:bc:d7:67:
d0:80:d5:6b:93:ef:8a:ad:73:56:d6:0b:0a:eb:a7:fe:da:d8:
96:1d:58:33:ff:51:ca:bf:5d:29:c2:3c:d3:f0:cc:46:fe:28:
64:bb:8c:29:ee:c3:a3:16:c5:0c:df:a1:be:3a:09:65:06:b3:
5c:dc:e8:b8:83:b7:ed:ac:59:fc:5b:a4:fe:a0:22:fc:54:74:
15:a9:e9:08:14:d4:2b:41:bd:d8:31:24:31:e4:26:97:fe:b0:
54:9d:d2:fc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPFBJBb1Xn28PyRPI8jnUpKx5Z1IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTE5MDAwMDAwWhcNMjMxMjI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MjgyMjI4YWZmMWQ3MWExNjRjMmU1YjM2Yzk0MGRkYzM0
MWI2OGVjYzViZDE3MzQ5OTJlMjZmNmYyYTdjMWUyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCW+SvFcOn/2ePf7+9d15GnDkJ1ZomtYVZzJSZm31YyYDNp
7mEYvDQ9CFFEnulZ8bNETQHzLdYCUkrkatvrvxFIo/OcZQAnMAqf5aVEQAFFW0aA
szCmsUHyCGy81gaiAu/EKnxxhayMCAi7fIfQ87+9aWdVOQpK7OsUykMWPamo3qUC
x4I8rJ/a4DIjHDxAXHJWtgXUHBvrtgAX/IU5UWxqHcy9wkCKstL5DMUkjL1asf8v
kQKnrbI4WvS14xQnuAssP8ffllOF8GiiweWReHuFx0a8w+l8p5KL7qJ7bJepNs3j
WbP1A6OJzmilkxZeNTfxnCHmLQ7SS9XNujhvGiozAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU7nN5XD7f3cSVlwbfsWS+rX8S89wwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2MwMzJhMTQyLWE3MTctNGE2My1hZGU1LWQ4Y2UzOGJhOTg2ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAD7AB8agzFUkOpdLlgvItK5B4YLN
93tUMH1kWURg0U4VWIJXCTeRCTLPbPs/i3hO1jAcIIDsD1HeNtwMoixivXceIUQ4
/DWXaX+y7MGgn1q+UIFgb/MIrSnpRm6JHXY059b3Z3wSP8YW0Qx4CHTlaV9s5moy
y06d8dG2yitYGIi7NsICh2ec1vsbelKeiuMabRQijRa504iXOGoQk/tn97zXZ9CA
1WuT74qtc1bWCwrrp/7a2JYdWDP/Ucq/XSnCPNPwzEb+KGS7jCnuw6MWxQzfob46
CWUGs1zc6LiDt+2sWfxbpP6gIvxUdBWp6QgU1CtBvdgxJDHkJpf+sFSd0vw=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:12 2023 by rpki-client on console.sobornost.net