Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c1d342a7-b407-446c-8d9e-89df60dd003c.roa
File: c1d342a7-b407-446c-8d9e-89df60dd003c.roa (raw, json)
Hash identifier: tUuDbkG0sH8/I7vT8p11JvlWTtMo0XijmIfKne0Q8og=
Subject key identifier: 3F:37:66:4D:FA:A7:11:4E:03:44:85:6F:40:C9:0B:60:BB:BC:D4:BC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2019DD7C77024986474519D60ACD496F10621AD6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c1d342a7-b407-446c-8d9e-89df60dd003c.roa
Signing time: Sun 15 Oct 2023 00:00:00 +0000
ROA not before: Sun 15 Oct 2023 00:00:00 +0000
ROA not after: Sun 19 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:19:dd:7c:77:02:49:86:47:45:19:d6:0a:cd:49:6f:10:62:1a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 15 00:00:00 2023 GMT
Not After : Nov 19 23:59:59 2023 GMT
Subject: serialNumber=eaabf29f79d0aee299fb80b55d4c17ecc70d4a7b5caea0a6823da204f599b959, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:ae:5f:38:dc:43:2f:b9:4d:a0:ba:86:a2:
10:9c:ad:a8:6f:c5:be:7d:75:5f:14:dd:6c:f4:25:
bf:a1:47:91:6f:aa:7e:81:a6:4b:49:42:51:43:f5:
7c:05:bf:af:d9:d1:60:c7:e5:7f:88:bb:10:02:f5:
58:72:09:85:e4:19:4b:94:1f:ae:7a:23:21:e2:cb:
90:da:f8:56:fb:4f:08:8c:c5:fb:c0:bb:4b:06:9f:
86:f3:b5:fb:89:d5:dd:96:ec:16:8d:70:92:8f:a2:
22:1e:52:bf:c6:10:d6:54:74:3f:95:e7:1d:6c:23:
26:53:23:da:79:43:6a:37:b9:a1:07:18:fd:01:7b:
45:4f:77:9f:d0:0f:4e:4a:60:31:9a:7d:cd:16:fb:
48:5f:d4:91:3d:b2:6b:3e:d5:9c:4f:bc:76:44:e3:
0f:d1:00:0a:c4:9a:13:b9:b1:88:40:76:1e:00:b6:
51:52:ae:51:85:aa:87:cc:66:6e:8d:26:6b:26:3b:
54:aa:87:88:3c:8b:89:9a:c5:b2:64:cc:e6:88:fb:
78:fc:ec:dc:4e:26:b8:1c:14:9a:31:7b:9f:6e:f9:
cb:a2:06:61:38:4d:cc:32:40:0c:44:2f:8b:de:93:
56:cf:26:73:63:28:79:9b:5d:81:4c:ec:63:80:61:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:37:66:4D:FA:A7:11:4E:03:44:85:6F:40:C9:0B:60:BB:BC:D4:BC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c1d342a7-b407-446c-8d9e-89df60dd003c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2a:77:46:fe:75:ad:af:7c:ae:2f:0e:0d:49:64:b9:ba:2a:
fc:76:77:df:3a:96:0c:e2:91:bb:d0:22:d4:f0:3f:7e:f7:d6:
0d:86:1d:00:be:ad:b9:ad:e3:d0:48:81:64:60:bb:d6:23:00:
68:9c:56:8b:4d:55:bb:49:58:5a:62:d0:c3:a6:98:8a:19:32:
94:7b:13:d9:7a:1c:40:9c:91:8a:a4:6f:d8:e8:0b:56:a4:23:
d8:33:b5:1b:a5:11:e4:a9:73:5b:26:63:51:ef:47:b7:cc:8f:
ac:dd:9f:72:13:36:05:cb:1c:d7:d4:01:19:dd:ed:d3:5b:80:
14:b0:12:79:23:48:9d:29:ac:34:e4:4a:64:4f:cf:5b:e7:f5:
f6:52:5a:d6:76:5c:d2:d4:ec:3c:a4:0e:14:51:85:ed:c8:1e:
a4:0f:88:f9:66:6b:5c:51:ce:79:39:f8:af:62:61:d2:af:29:
40:32:4a:cc:1f:d0:3d:ee:df:a7:e4:e3:2b:3e:41:d4:c9:b6:
37:7d:3c:e0:dc:09:d2:46:d8:4e:f9:76:a1:3d:81:41:ee:18:
42:8d:2b:18:c5:b7:a9:71:cb:ef:bd:c3:9c:30:be:21:c2:32:
ba:34:fd:7c:95:47:25:9f:cd:68:98:ba:4d:d5:f2:29:35:1e:
ea:cc:a8:30
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIBndfHcCSYZHRRnWCs1JbxBiGtYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDE1MDAwMDAwWhcNMjMxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYWFiZjI5Zjc5ZDBhZWUyOTlmYjgwYjU1ZDRjMTdlY2M3
MGQ0YTdiNWNhZWEwYTY4MjNkYTIwNGY1OTliOTU5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCok65fONxDL7lNoLqGohCcrahvxb59dV8U3Wz0Jb+hR5Fv
qn6BpktJQlFD9XwFv6/Z0WDH5X+IuxAC9VhyCYXkGUuUH656IyHiy5Da+Fb7TwiM
xfvAu0sGn4bztfuJ1d2W7BaNcJKPoiIeUr/GENZUdD+V5x1sIyZTI9p5Q2o3uaEH
GP0Be0VPd5/QD05KYDGafc0W+0hf1JE9sms+1ZxPvHZE4w/RAArEmhO5sYhAdh4A
tlFSrlGFqofMZm6NJmsmO1Sqh4g8i4maxbJkzOaI+3j87NxOJrgcFJoxe59u+cui
BmE4TcwyQAxEL4vek1bPJnNjKHmbXYFM7GOAYRlZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUPzdmTfqnEU4DRIVvQMkLYLu81LwwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2MxZDM0MmE3LWI0MDctNDQ2Yy04ZDllLTg5ZGY2MGRkMDAzYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADEqd0b+da2vfK4vDg1JZLm6Kvx2
d986lgzikbvQItTwP3731g2GHQC+rbmt49BIgWRgu9YjAGicVotNVbtJWFpi0MOm
mIoZMpR7E9l6HECckYqkb9joC1akI9gztRulEeSpc1smY1HvR7fMj6zdn3ITNgXL
HNfUARnd7dNbgBSwEnkjSJ0prDTkSmRPz1vn9fZSWtZ2XNLU7DykDhRRhe3IHqQP
iPlma1xRznk5+K9iYdKvKUAySswf0D3u36fk4ys+QdTJtjd9PODcCdJG2E75dqE9
gUHuGEKNKxjFt6lxy++9w5wwviHCMro0/XyVRyWfzWiYuk3V8ik1HurMqDA=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:13 2023 by rpki-client on console.sobornost.net