Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f963344c-bb27-4890-942e-e47bed9ef987.roa
File: f963344c-bb27-4890-942e-e47bed9ef987.roa (raw, json)
Hash identifier: w4xSo3EpVn6CmzME7W+kvmoLbKYspxMyxd9SSBryiTA=
Subject key identifier: 43:8D:98:AE:DD:63:ED:47:04:E0:14:BF:00:20:52:DF:3A:6E:1F:A0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 63EBACBA5EB416663C321AC54CCC6D5C466F377D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f963344c-bb27-4890-942e-e47bed9ef987.roa
Signing time: Thu 03 Aug 2023 00:00:00 +0000
ROA not before: Thu 03 Aug 2023 00:00:00 +0000
ROA not after: Thu 07 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:eb:ac:ba:5e:b4:16:66:3c:32:1a:c5:4c:cc:6d:5c:46:6f:37:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 3 00:00:00 2023 GMT
Not After : Sep 7 23:59:59 2023 GMT
Subject: serialNumber=635924ef970db73d03c1408ff658326d55b7c2f225370f175eaa3cb230fea2dd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:da:46:d5:85:b5:3d:23:82:ca:f7:af:74:
68:17:d3:e5:84:17:7d:a8:f3:4d:3a:0a:29:7d:56:
47:e8:1a:47:4c:4d:83:ea:e4:47:52:ad:b9:db:0e:
fd:0d:f4:25:15:28:80:16:08:e2:0a:23:69:3f:05:
d8:58:12:79:e3:3b:67:0d:1e:17:74:24:0d:2b:bf:
d8:39:0b:1d:84:15:c7:b2:fc:f4:32:e9:8e:1a:b2:
8d:82:09:fc:89:5b:02:1f:fd:68:4c:1a:37:be:e9:
f5:60:71:93:e6:62:cc:76:7a:08:c3:1e:df:50:2c:
5c:65:fd:fc:e0:1b:e7:28:48:3e:ab:b6:7a:af:98:
c4:f0:bd:cc:cf:c4:2a:e9:55:2c:af:2a:e9:0e:6d:
f2:24:7c:f3:01:a8:f1:fa:a3:dc:57:4e:8e:0f:66:
9c:8b:bb:79:37:a6:e8:99:2b:bd:88:7e:90:f9:46:
59:9d:21:c1:b4:2c:37:fd:ff:4f:61:80:0b:fb:ad:
29:8f:54:3e:26:4d:6c:b4:8d:4a:ce:11:0c:91:6b:
9e:4f:d1:e7:a3:a1:34:e0:01:4c:16:cc:7c:5f:45:
e6:21:14:9d:5f:da:d4:4c:7b:e8:27:c9:03:8a:fc:
82:12:cb:20:0a:12:92:22:39:76:9b:17:5a:ee:c7:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8D:98:AE:DD:63:ED:47:04:E0:14:BF:00:20:52:DF:3A:6E:1F:A0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f963344c-bb27-4890-942e-e47bed9ef987.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8b:85:ad:91:62:01:bd:66:96:39:26:b7:4d:43:3b:fe:ca:
98:40:e3:5a:8e:cc:ca:38:a9:11:31:72:b2:4d:d7:6c:43:38:
22:eb:a6:94:dc:33:52:94:42:20:6d:20:75:a4:ae:dc:b4:91:
ef:97:67:28:5a:61:a7:9e:38:11:dd:20:3c:79:af:a7:48:66:
ed:6a:68:64:21:3e:41:52:b0:4c:4a:8d:e1:45:ef:7f:14:8d:
d0:9e:e1:49:cc:be:38:4b:1b:63:5d:7a:06:f8:45:8f:66:a0:
a9:10:0d:8e:9b:fd:da:32:0c:90:1a:8c:48:1e:56:85:a9:ab:
a9:b5:ab:e3:9a:04:ac:74:8a:1a:e7:e6:f3:1c:34:bc:c2:45:
58:b4:48:61:27:e6:e4:92:c6:00:00:e3:ae:8a:df:b5:00:2f:
14:87:6e:dc:52:56:14:a2:5f:88:09:c8:27:03:55:5e:06:db:
02:29:8f:ac:89:4e:2c:4d:60:7d:9e:3c:d4:c3:07:8e:86:76:
19:b6:62:bd:ce:4d:da:c2:b6:59:13:d3:51:6c:8b:ba:1c:ab:
37:d3:06:f7:d6:81:96:d7:88:41:fc:20:1d:18:90:b4:69:24:
75:a3:8b:87:71:63:d6:c1:85:76:15:fc:7b:f7:b8:e7:1a:61:
9a:9d:bd:21
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUY+usul60FmY8MhrFTMxtXEZvN30wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODAzMDAwMDAwWhcNMjMwOTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MzU5MjRlZjk3MGRiNzNkMDNjMTQwOGZmNjU4MzI2ZDU1
YjdjMmYyMjUzNzBmMTc1ZWFhM2NiMjMwZmVhMmRkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4BtpG1YW1PSOCyvevdGgX0+WEF32o8006Cil9VkfoGkdM
TYPq5EdSrbnbDv0N9CUVKIAWCOIKI2k/BdhYEnnjO2cNHhd0JA0rv9g5Cx2EFcey
/PQy6Y4aso2CCfyJWwIf/WhMGje+6fVgcZPmYsx2egjDHt9QLFxl/fzgG+coSD6r
tnqvmMTwvczPxCrpVSyvKukObfIkfPMBqPH6o9xXTo4PZpyLu3k3puiZK72IfpD5
RlmdIcG0LDf9/09hgAv7rSmPVD4mTWy0jUrOEQyRa55P0eejoTTgAUwWzHxfReYh
FJ1f2tRMe+gnyQOK/IISyyAKEpIiOXabF1rux/2JAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUQ42Yrt1j7UcE4BS/ACBS3zpuH6AwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Y5NjMzNDRjLWJiMjctNDg5MC05NDJlLWU0N2JlZDllZjk4Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKSLha2RYgG9ZpY5JrdNQzv+yphA
41qOzMo4qRExcrJN12xDOCLrppTcM1KUQiBtIHWkrty0ke+XZyhaYaeeOBHdIDx5
r6dIZu1qaGQhPkFSsExKjeFF738UjdCe4UnMvjhLG2Ndegb4RY9moKkQDY6b/doy
DJAajEgeVoWpq6m1q+OaBKx0ihrn5vMcNLzCRVi0SGEn5uSSxgAA466K37UALxSH
btxSVhSiX4gJyCcDVV4G2wIpj6yJTixNYH2ePNTDB46Gdhm2Yr3OTdrCtlkT01Fs
i7ocqzfTBvfWgZbXiEH8IB0YkLRpJHWji4dxY9bBhXYV/Hv3uOcaYZqdvSE=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:18 2023 by rpki-client on console.sobornost.net