Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cad92f46-0bea-4355-b9a9-78d4e818c7cc.roa
File: cad92f46-0bea-4355-b9a9-78d4e818c7cc.roa (raw, json)
Hash identifier: QZLdVaPuTC2oub4tN/TY+OpeT44+82SvfeAhCNsT+ak=
Subject key identifier: B5:56:52:DD:C5:95:25:2E:99:EE:BC:AA:8B:17:04:EB:B7:AC:B5:22
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 15402C04409ED454502261AF5A45C0CFE3FE0D4D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cad92f46-0bea-4355-b9a9-78d4e818c7cc.roa
Signing time: Thu 28 Sep 2023 00:00:00 +0000
ROA not before: Thu 28 Sep 2023 00:00:00 +0000
ROA not after: Thu 02 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:40:2c:04:40:9e:d4:54:50:22:61:af:5a:45:c0:cf:e3:fe:0d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 28 00:00:00 2023 GMT
Not After : Nov 2 23:59:59 2023 GMT
Subject: serialNumber=aa6bec118f164d21b0b5a81e3061a386886ee83d1a16d9660c774cb89819b567, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4c:e2:c8:e2:09:e1:0e:d4:26:03:90:8b:b5:
17:04:6d:d0:b4:9d:3d:e2:6f:db:f1:a3:2e:ae:ce:
89:27:c5:ab:43:02:45:49:c4:55:bc:6c:50:44:e0:
97:dc:61:f4:d3:f0:99:04:83:29:40:5a:73:f3:2a:
46:7f:84:a5:29:19:23:be:bf:51:e7:39:d7:2d:ef:
1f:18:58:77:d7:57:65:58:53:aa:e5:7d:c4:1d:ee:
7f:c2:11:be:4e:6a:7a:eb:46:18:31:dd:88:a6:12:
90:c2:de:39:dc:06:e1:51:c0:5f:16:17:80:bc:53:
f3:9d:dd:47:78:b2:1f:3a:38:83:85:ba:17:80:32:
92:2a:20:af:b4:10:f3:45:6b:8f:ee:f6:14:b6:1a:
c4:0c:79:d6:74:aa:4c:28:ec:31:15:77:d2:cc:6c:
e8:12:71:4b:96:48:02:2a:4f:47:9f:80:1a:c3:0d:
27:f4:ec:ff:04:0e:d3:9c:81:67:f3:01:e1:f8:7f:
50:d8:4c:c4:19:a6:0f:68:4d:27:19:1f:c6:5d:37:
3c:ee:4d:e3:cf:ac:db:e1:67:c9:28:4c:52:4e:c8:
5d:9b:cf:d5:7a:25:94:2a:40:3d:51:f5:69:aa:73:
96:ce:2e:d1:9c:99:54:53:e2:6b:cc:5b:ed:c8:4f:
38:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:56:52:DD:C5:95:25:2E:99:EE:BC:AA:8B:17:04:EB:B7:AC:B5:22
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cad92f46-0bea-4355-b9a9-78d4e818c7cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:93:a1:42:65:b7:9f:15:13:af:70:86:5a:04:b1:dc:63:7a:
0f:9a:5a:7a:d0:a6:3b:85:0b:57:61:b9:26:ce:ea:a5:fa:7b:
7c:53:87:a3:68:32:4a:e6:e4:0a:46:d8:ba:0a:15:68:2f:75:
7b:f0:96:93:b6:31:52:9b:3a:f0:21:52:61:f1:5d:9b:ad:e4:
62:4e:71:96:75:54:c8:8f:2d:4f:52:46:ec:f2:ee:96:10:2a:
d9:d7:1a:13:7d:0d:36:59:59:18:c1:fd:8a:95:a9:f1:b2:a1:
73:f8:2e:1c:ac:9e:02:16:0a:4b:db:c2:2c:49:42:36:af:c4:
5d:80:81:41:d1:1e:97:18:86:a5:d6:60:1c:10:62:fd:35:4a:
dd:ad:03:0e:55:ae:80:4e:48:3e:35:d3:f6:c9:45:56:e0:30:
db:56:7a:cc:55:d5:9c:14:0a:ce:9b:36:3f:a2:59:4f:d3:8c:
e0:75:22:c6:c7:f8:e0:61:d7:42:06:32:8b:b8:ed:a8:91:3d:
69:f9:fa:ca:0f:f0:aa:43:59:96:a3:ff:2c:38:4a:a6:2d:7a:
08:e3:98:0a:96:d4:ff:61:8d:c8:d7:62:68:bb:d6:93:ea:18:
11:d1:76:11:65:96:e1:24:f9:a2:8c:7f:0e:6d:c4:56:45:d3:
99:48:bd:02
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFUAsBECe1FRQImGvWkXAz+P+DU0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTI4MDAwMDAwWhcNMjMxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhYTZiZWMxMThmMTY0ZDIxYjBiNWE4MWUzMDYxYTM4Njg4
NmVlODNkMWExNmQ5NjYwYzc3NGNiODk4MTliNTY3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgTOLI4gnhDtQmA5CLtRcEbdC0nT3ib9vxoy6uzoknxatD
AkVJxFW8bFBE4JfcYfTT8JkEgylAWnPzKkZ/hKUpGSO+v1HnOdct7x8YWHfXV2VY
U6rlfcQd7n/CEb5OanrrRhgx3YimEpDC3jncBuFRwF8WF4C8U/Od3Ud4sh86OIOF
uheAMpIqIK+0EPNFa4/u9hS2GsQMedZ0qkwo7DEVd9LMbOgScUuWSAIqT0efgBrD
DSf07P8EDtOcgWfzAeH4f1DYTMQZpg9oTScZH8ZdNzzuTePPrNvhZ8koTFJOyF2b
z9V6JZQqQD1R9Wmqc5bOLtGcmVRT4mvMW+3ITzi9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtVZS3cWVJS6Z7ryqixcE67estSIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NhZDkyZjQ2LTBiZWEtNDM1NS1iOWE5LTc4ZDRlODE4YzdjYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGyToUJlt58VE69whloEsdxjeg+a
WnrQpjuFC1dhuSbO6qX6e3xTh6NoMkrm5ApG2LoKFWgvdXvwlpO2MVKbOvAhUmHx
XZut5GJOcZZ1VMiPLU9SRuzy7pYQKtnXGhN9DTZZWRjB/YqVqfGyoXP4LhysngIW
CkvbwixJQjavxF2AgUHRHpcYhqXWYBwQYv01St2tAw5VroBOSD410/bJRVbgMNtW
esxV1ZwUCs6bNj+iWU/TjOB1IsbH+OBh10IGMou47aiRPWn5+soP8KpDWZaj/yw4
SqYtegjjmAqW1P9hjcjXYmi71pPqGBHRdhFlluEk+aKMfw5txFZF05lIvQI=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:13 2023 by rpki-client on console.sobornost.net