Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f2f7cf3e-31bb-4e56-90c3-31b17beca7d1.roa
File: f2f7cf3e-31bb-4e56-90c3-31b17beca7d1.roa (raw, json)
Hash identifier: 2btrfo2bfsYjRaBReqU/C3gHWOHwwqP5e9R9u8R/yjs=
Subject key identifier: F1:E5:C0:DE:A0:38:A4:A0:82:F0:85:AF:39:73:57:B3:E0:CC:F6:D1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 18F50DB42B74CF5317C1D962F9A53F8106B634B1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f2f7cf3e-31bb-4e56-90c3-31b17beca7d1.roa
Signing time: Tue 14 Nov 2023 00:00:00 +0000
ROA not before: Tue 14 Nov 2023 00:00:00 +0000
ROA not after: Tue 19 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f5:0d:b4:2b:74:cf:53:17:c1:d9:62:f9:a5:3f:81:06:b6:34:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 14 00:00:00 2023 GMT
Not After : Dec 19 23:59:59 2023 GMT
Subject: serialNumber=58154f3470cc6a40ed05dd18f0f6cceaa7c96aba0d28d7c2e6cda8b38f8857d5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:70:4b:3b:61:c5:9c:09:68:49:10:23:df:
49:88:c8:fb:e0:73:8d:7b:6c:d9:c1:99:08:5a:ef:
e6:68:0d:15:13:18:b6:19:bc:7a:dd:eb:b2:b8:79:
74:40:27:ce:9b:55:1f:be:1e:07:82:29:98:11:dc:
70:76:cc:5b:38:42:fd:2d:39:05:c7:e6:89:f1:18:
d4:a1:dd:f4:21:58:38:92:48:4f:4d:54:7b:75:bd:
42:b6:d5:61:62:23:69:c7:4d:e1:1f:d5:df:56:c6:
ce:80:89:29:01:01:e5:29:c8:0a:a5:23:e2:31:7c:
72:ed:b4:bc:c3:a5:4b:3f:86:9d:0c:4d:63:0d:62:
3f:76:e3:66:b4:58:58:b4:79:84:79:1d:ae:04:5b:
f8:25:a5:f3:64:12:9f:4f:3f:1b:73:1f:70:d0:85:
6d:a0:35:8e:fb:87:01:5f:1d:1e:a2:ab:ee:2a:90:
5e:66:16:cc:b8:2d:7c:1c:8a:b2:f4:de:71:1e:4e:
cf:d4:d6:19:28:b8:a3:1c:8d:e2:a2:ae:0d:0d:c2:
4f:49:52:9e:65:49:70:ff:29:9e:22:9f:1f:6b:22:
d1:af:25:df:0e:0a:e0:de:4f:df:de:6f:c7:dc:02:
cf:a3:cd:80:7f:45:df:6c:a8:ee:0d:cc:60:3a:2d:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E5:C0:DE:A0:38:A4:A0:82:F0:85:AF:39:73:57:B3:E0:CC:F6:D1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f2f7cf3e-31bb-4e56-90c3-31b17beca7d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:81:de:57:8c:55:52:98:0e:bf:79:88:21:ec:e3:f4:d9:19:
5d:76:e6:f2:1d:90:ba:ca:64:f7:c2:09:56:fa:51:77:5c:b3:
a9:ff:8e:fa:53:50:ae:b4:78:f4:c7:94:e5:42:9f:bb:2c:ba:
7f:96:bc:f4:34:1a:56:c7:a2:6f:72:3a:89:f9:ed:02:c3:3b:
ba:6e:75:3c:3c:6a:1b:af:1f:63:40:1d:a1:e0:ba:33:f0:4e:
98:c5:47:74:ae:74:f6:e9:72:dc:1f:1a:8b:ef:df:45:d9:d7:
b4:23:e8:de:21:b0:83:ed:17:65:78:03:0f:64:bd:0d:c9:68:
08:4d:dd:f4:b3:9a:59:8a:12:8d:0c:62:65:94:01:ac:82:52:
a2:33:fc:68:8c:a0:25:07:a1:1c:ab:a0:95:be:85:0e:1a:7d:
b6:d9:7a:c7:5c:fe:7c:58:4a:1e:23:66:08:d5:cd:45:e1:6a:
9b:2a:9d:08:1b:92:48:2b:81:4b:d3:2c:b6:2f:ce:cf:a5:a0:
76:67:44:db:a5:8a:ca:20:b1:07:d1:87:d9:2a:ce:87:e4:2d:
ff:90:c4:00:13:14:c5:12:4c:ab:e1:e9:fc:da:5b:8a:06:b9:
df:50:22:26:ec:99:c0:50:22:20:35:9e:80:a1:cb:cb:f9:88:
04:96:bb:ea
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGPUNtCt0z1MXwdli+aU/gQa2NLEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTE0MDAwMDAwWhcNMjMxMjE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ODE1NGYzNDcwY2M2YTQwZWQwNWRkMThmMGY2Y2NlYWE3
Yzk2YWJhMGQyOGQ3YzJlNmNkYThiMzhmODg1N2Q1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYd3BLO2HFnAloSRAj30mIyPvgc417bNnBmQha7+ZoDRUT
GLYZvHrd67K4eXRAJ86bVR++HgeCKZgR3HB2zFs4Qv0tOQXH5onxGNSh3fQhWDiS
SE9NVHt1vUK21WFiI2nHTeEf1d9Wxs6AiSkBAeUpyAqlI+IxfHLttLzDpUs/hp0M
TWMNYj9242a0WFi0eYR5Ha4EW/glpfNkEp9PPxtzH3DQhW2gNY77hwFfHR6iq+4q
kF5mFsy4LXwcirL03nEeTs/U1hkouKMcjeKirg0Nwk9JUp5lSXD/KZ4inx9rItGv
Jd8OCuDeT9/eb8fcAs+jzYB/Rd9sqO4NzGA6LT4LAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU8eXA3qA4pKCC8IWvOXNXs+DM9tEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2YyZjdjZjNlLTMxYmItNGU1Ni05MGMzLTMxYjE3YmVjYTdkMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAC6B3leMVVKYDr95iCHs4/TZGV12
5vIdkLrKZPfCCVb6UXdcs6n/jvpTUK60ePTHlOVCn7ssun+WvPQ0GlbHom9yOon5
7QLDO7pudTw8ahuvH2NAHaHgujPwTpjFR3SudPbpctwfGovv30XZ17Qj6N4hsIPt
F2V4Aw9kvQ3JaAhN3fSzmlmKEo0MYmWUAayCUqIz/GiMoCUHoRyroJW+hQ4afbbZ
esdc/nxYSh4jZgjVzUXhapsqnQgbkkgrgUvTLLYvzs+loHZnRNulisogsQfRh9kq
zofkLf+QxAATFMUSTKvh6fzaW4oGud9QIibsmcBQIiA1noChy8v5iASWu+o=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:17 2023 by rpki-client on console.sobornost.net