Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dfb9f3fb-f69f-4f39-aff0-c0e0c166bbed.roa
File: dfb9f3fb-f69f-4f39-aff0-c0e0c166bbed.roa (raw, json)
Hash identifier: Z0n1NYXj0n9QiyuS8Tllz1tjmPVF3kXi83MOIqrl7k8=
Subject key identifier: 5D:C1:36:DD:91:B0:3A:51:83:3C:8D:94:44:F4:28:5B:17:60:0F:85
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 590D2B3DCB4BEB12954B84336A5E096458CE5069
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dfb9f3fb-f69f-4f39-aff0-c0e0c166bbed.roa
Signing time: Thu 06 Jul 2023 00:00:00 +0000
ROA not before: Thu 06 Jul 2023 00:00:00 +0000
ROA not after: Thu 10 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0d:2b:3d:cb:4b:eb:12:95:4b:84:33:6a:5e:09:64:58:ce:50:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 6 00:00:00 2023 GMT
Not After : Aug 10 23:59:59 2023 GMT
Subject: serialNumber=dda1cbac4dcf327044ce865c8cd5492ac8eb5734d16531f7198c33d495d74f56, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:b3:88:00:60:b7:e5:09:53:59:a9:b7:df:
5e:18:18:be:1f:6c:ae:08:56:58:be:57:21:af:e0:
33:a1:82:45:d7:d1:b9:cf:86:23:7b:98:34:df:4b:
8e:78:b2:e0:6d:3e:5c:6c:6d:74:91:87:50:a2:e5:
e0:19:c1:9e:13:11:65:c2:e5:bd:b0:10:6c:43:84:
47:62:ba:d1:72:87:26:de:b0:d5:16:82:6b:99:30:
b7:7c:c4:93:73:a7:97:74:f4:78:97:e4:67:6a:86:
de:f4:bf:10:43:f0:b9:5b:1c:fe:5c:80:11:84:6d:
9f:b3:06:a2:ed:2c:d1:83:56:62:90:48:53:dd:96:
4a:56:11:42:2a:17:dc:3d:b7:0a:ed:38:bb:4e:6d:
14:20:cf:ad:60:2d:a9:22:34:7d:96:c7:ff:d8:9f:
d7:ce:a3:6d:95:ca:b2:60:f7:3d:26:37:a1:9c:18:
55:c8:77:b8:54:68:2f:4f:7d:8b:74:88:fc:7b:a5:
90:a3:f4:f0:06:d5:ed:0b:70:88:c9:eb:62:03:ed:
d1:ca:53:2a:d3:eb:d4:7e:b5:3c:6d:55:0c:8e:f7:
50:0e:4e:73:a1:b7:92:b9:20:3c:a5:21:f9:04:b7:
71:50:4b:64:88:46:05:63:f5:2d:78:b4:09:90:74:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C1:36:DD:91:B0:3A:51:83:3C:8D:94:44:F4:28:5B:17:60:0F:85
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dfb9f3fb-f69f-4f39-aff0-c0e0c166bbed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4d:c2:5e:58:9f:ba:32:19:11:ac:5b:45:06:72:44:29:8d:
d5:4c:d8:43:00:0a:45:fa:72:9e:7c:54:80:20:7a:5e:5b:b0:
be:ea:8d:a0:3d:6b:36:33:15:13:a2:40:f3:cb:b9:af:ec:16:
8b:50:3e:2f:da:17:43:7a:14:73:e5:bf:2d:39:df:3b:f9:90:
11:8b:62:bd:8f:05:43:d1:6e:d5:86:68:52:22:15:0c:3f:9f:
4f:03:2f:ac:9e:68:6c:2b:c2:0a:d3:1d:28:5f:f0:25:c8:ec:
34:00:1e:10:2b:dc:7c:86:b9:90:a8:62:d7:61:f6:eb:75:93:
b7:d4:0e:17:22:b7:3d:1c:a5:37:0f:7f:9e:24:60:47:b8:07:
0d:d5:80:26:da:b1:90:0a:f9:e3:93:0c:fa:f1:da:80:c2:22:
0c:87:54:bc:24:cf:ff:c0:2d:72:62:ce:c3:cb:f8:c3:4f:0a:
69:8f:50:f2:d3:60:b8:77:29:cc:d4:99:1a:a8:69:97:d7:5c:
67:9d:5e:59:fd:30:7a:a3:bd:da:01:8e:3f:6d:b9:64:12:c2:
2b:c7:81:03:ae:41:a2:7b:4d:d8:d7:d5:3d:44:30:b6:de:88:
65:47:17:1d:52:70:23:b0:e3:86:5e:c7:3a:22:2d:d7:10:28:
6d:55:61:5c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWQ0rPctL6xKVS4Qzal4JZFjOUGkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzA2MDAwMDAwWhcNMjMwODEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkZGExY2JhYzRkY2YzMjcwNDRjZTg2NWM4Y2Q1NDkyYWM4
ZWI1NzM0ZDE2NTMxZjcxOThjMzNkNDk1ZDc0ZjU2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxzLOIAGC35QlTWam3314YGL4fbK4IVli+VyGv4DOhgkXX
0bnPhiN7mDTfS454suBtPlxsbXSRh1Ci5eAZwZ4TEWXC5b2wEGxDhEdiutFyhybe
sNUWgmuZMLd8xJNzp5d09HiX5Gdqht70vxBD8LlbHP5cgBGEbZ+zBqLtLNGDVmKQ
SFPdlkpWEUIqF9w9twrtOLtObRQgz61gLakiNH2Wx//Yn9fOo22VyrJg9z0mN6Gc
GFXId7hUaC9PfYt0iPx7pZCj9PAG1e0LcIjJ62ID7dHKUyrT69R+tTxtVQyO91AO
TnOht5K5IDylIfkEt3FQS2SIRgVj9S14tAmQdFpnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXcE23ZGwOlGDPI2URPQoWxdgD4UwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2RmYjlmM2ZiLWY2OWYtNGYzOS1hZmYwLWMwZTBjMTY2YmJlZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABxNwl5Yn7oyGRGsW0UGckQpjdVM
2EMACkX6cp58VIAgel5bsL7qjaA9azYzFROiQPPLua/sFotQPi/aF0N6FHPlvy05
3zv5kBGLYr2PBUPRbtWGaFIiFQw/n08DL6yeaGwrwgrTHShf8CXI7DQAHhAr3HyG
uZCoYtdh9ut1k7fUDhcitz0cpTcPf54kYEe4Bw3VgCbasZAK+eOTDPrx2oDCIgyH
VLwkz//ALXJizsPL+MNPCmmPUPLTYLh3KczUmRqoaZfXXGedXln9MHqjvdoBjj9t
uWQSwivHgQOuQaJ7TdjX1T1EMLbeiGVHFx1ScCOw44ZexzoiLdcQKG1VYVw=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:16 2023 by rpki-client on console.sobornost.net