Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f96ea8e0-87e3-4826-a9c2-98af6a943748.roa
File: f96ea8e0-87e3-4826-a9c2-98af6a943748.roa (raw, json)
Hash identifier: 34XsBx+cuI1O1+mO0kB3312cpfBXddG9BuGb1qafpsE=
Subject key identifier: B1:3A:66:6D:19:E9:D3:E9:3E:C7:F4:92:35:FF:55:04:C4:9C:50:18
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 25C826DBD7F74C398AAE1F023C56335C9CAF833A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f96ea8e0-87e3-4826-a9c2-98af6a943748.roa
Signing time: Thu 06 Jul 2023 00:00:00 +0000
ROA not before: Thu 06 Jul 2023 00:00:00 +0000
ROA not after: Thu 10 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c8:26:db:d7:f7:4c:39:8a:ae:1f:02:3c:56:33:5c:9c:af:83:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 6 00:00:00 2023 GMT
Not After : Aug 10 23:59:59 2023 GMT
Subject: serialNumber=fd8ceacb9f1862080d4b77c8b81c0ed647630415a61658fa0cf09e442792990e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:65:b4:3b:39:d7:4b:7a:1f:89:80:a0:49:
72:5d:3f:75:76:63:9f:e2:fe:30:0c:91:7d:e8:6f:
8d:86:08:2b:c0:92:86:a3:f0:ff:b0:ad:44:b7:53:
17:e8:a9:f3:c6:ca:ba:b4:d2:ad:e8:7a:7f:d3:47:
b0:30:cc:af:a5:f7:43:fe:2e:0e:4a:1b:b8:15:b0:
2e:f9:05:1c:01:72:1a:07:87:a1:87:2d:0a:73:47:
50:bf:01:25:ce:79:13:40:9e:55:16:2f:07:75:a9:
7f:04:45:91:e8:50:04:10:71:0f:fd:c3:cc:8c:be:
13:3a:15:57:cd:06:e5:5f:cd:c2:b6:f7:b7:43:51:
2f:c9:c9:83:79:32:5b:75:3f:27:ce:eb:b5:b7:e0:
f7:94:73:39:a3:0a:f5:23:09:27:dc:3c:2a:3c:ec:
dc:f7:d4:aa:7d:5a:c5:2a:7d:bf:c7:c7:00:cd:77:
de:75:ed:80:4b:c1:6d:3f:bd:d4:51:3e:a3:23:0b:
4e:2f:7f:0b:66:bb:c6:6b:83:a8:05:2b:55:93:9c:
4a:d3:0b:26:d7:3b:e0:6c:6d:c1:6c:a4:81:91:75:
6f:4b:9d:8e:51:80:27:0c:ea:ac:46:79:a9:b0:d8:
7d:5c:c6:6a:73:ef:28:72:c4:67:70:9f:d2:df:0c:
ba:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3A:66:6D:19:E9:D3:E9:3E:C7:F4:92:35:FF:55:04:C4:9C:50:18
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f96ea8e0-87e3-4826-a9c2-98af6a943748.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:55:23:24:12:1e:e8:c7:2a:d6:98:75:64:29:25:23:ce:07:
39:b0:ef:4a:70:31:a6:59:67:78:a1:9e:d9:69:06:f9:69:04:
bc:c3:a2:43:96:f2:7e:0b:1a:0d:3c:7b:96:bf:92:df:d6:9c:
23:98:58:fe:c2:25:78:e7:02:e3:fb:28:84:c9:7b:4a:be:51:
8e:7e:cf:fb:ae:e6:16:53:fb:db:91:33:01:1b:23:86:f5:ef:
df:47:50:4e:a3:1b:69:56:49:40:4d:b7:4e:0e:b9:65:ab:ef:
d1:d0:87:dd:d4:cf:9e:23:88:b6:4f:a1:0e:75:11:cf:89:f5:
9a:56:5c:33:df:fa:76:78:e9:b7:7b:52:cd:d2:e8:de:37:ef:
ef:13:aa:66:68:9d:ea:9d:22:be:9c:00:1b:fb:e1:6a:31:74:
96:a0:22:3d:f1:e9:4c:d9:30:78:47:c0:27:0f:6f:09:84:54:
3a:28:e6:ca:51:bb:06:9c:3f:8e:62:2b:13:cd:08:b2:1b:3b:
5a:6a:2a:f6:b9:2f:13:d9:0b:ae:72:40:46:38:35:00:7d:13:
cd:0f:b6:a0:78:52:9b:70:1e:8e:9e:c5:b7:7b:4f:21:0f:af:
be:f1:f1:ad:1d:38:df:fa:ed:07:76:77:d0:82:5f:65:25:dd:
b0:34:16:95
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJcgm29f3TDmKrh8CPFYzXJyvgzowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzA2MDAwMDAwWhcNMjMwODEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmZDhjZWFjYjlmMTg2MjA4MGQ0Yjc3YzhiODFjMGVkNjQ3
NjMwNDE1YTYxNjU4ZmEwY2YwOWU0NDI3OTI5OTBlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKVWW0OznXS3ofiYCgSXJdP3V2Y5/i/jAMkX3ob42GCCvA
koaj8P+wrUS3UxfoqfPGyrq00q3oen/TR7AwzK+l90P+Lg5KG7gVsC75BRwBchoH
h6GHLQpzR1C/ASXOeRNAnlUWLwd1qX8ERZHoUAQQcQ/9w8yMvhM6FVfNBuVfzcK2
97dDUS/JyYN5Mlt1PyfO67W34PeUczmjCvUjCSfcPCo87Nz31Kp9WsUqfb/HxwDN
d9517YBLwW0/vdRRPqMjC04vfwtmu8Zrg6gFK1WTnErTCybXO+BsbcFspIGRdW9L
nY5RgCcM6qxGeamw2H1cxmpz7yhyxGdwn9LfDLpBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUsTpmbRnp0+k+x/SSNf9VBMScUBgwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Y5NmVhOGUwLTg3ZTMtNDgyNi1hOWMyLTk4YWY2YTk0Mzc0OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKhVIyQSHujHKtaYdWQpJSPOBzmw
70pwMaZZZ3ihntlpBvlpBLzDokOW8n4LGg08e5a/kt/WnCOYWP7CJXjnAuP7KITJ
e0q+UY5+z/uu5hZT+9uRMwEbI4b1799HUE6jG2lWSUBNt04OuWWr79HQh93Uz54j
iLZPoQ51Ec+J9ZpWXDPf+nZ46bd7Us3S6N437+8TqmZoneqdIr6cABv74WoxdJag
Ij3x6UzZMHhHwCcPbwmEVDoo5spRuwacP45iKxPNCLIbO1pqKva5LxPZC65yQEY4
NQB9E80PtqB4UptwHo6exbd7TyEPr77x8a0dON/67Qd2d9CCX2Ul3bA0FpU=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:18 2023 by rpki-client on console.sobornost.net