Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/07be989e-f768-431c-b226-9c339200fa60.roa
File: 07be989e-f768-431c-b226-9c339200fa60.roa (raw, json)
Hash identifier: +bGGaZeruwSTv3FU29APK81BU6VJoivlqZRNEuVioU8=
Subject key identifier: 68:4D:0D:16:DF:66:12:51:E7:77:9F:7B:FF:B9:BB:85:C2:75:FE:32
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2B3CAEB20A0BEB7A52B49533E74E2E734006EE10
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/07be989e-f768-431c-b226-9c339200fa60.roa
Signing time: Sun 01 Jun 2025 20:38:21 +0000
ROA not before: Sun 01 Jun 2025 20:38:21 +0000
ROA not after: Sun 06 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Jun 2025 20:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:3c:ae:b2:0a:0b:eb:7a:52:b4:95:33:e7:4e:2e:73:40:06:ee:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 1 20:38:21 2025 GMT
Not After : Jul 6 23:59:59 2025 GMT
Subject: serialNumber=a469990f53c0918df91fc9422510b6a85d15b22f646b94be2b032fd008cdc9c4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:11:ec:f6:45:1d:02:81:df:59:a0:6b:1c:
f5:1e:a7:ca:32:99:84:91:af:05:35:32:71:72:04:
db:56:71:3d:55:a9:6f:07:6c:0c:4d:72:ee:c9:54:
82:67:7e:f7:f6:e2:05:fb:dc:7d:1f:1e:f7:0f:5f:
e3:4a:ed:ca:61:68:8d:c8:ea:48:d9:e5:e2:56:bf:
16:d5:e1:e8:0c:3c:7c:38:cd:c3:74:54:8e:77:f2:
07:ba:e2:1f:6b:09:21:79:00:d3:7b:3e:72:81:0c:
57:0f:55:b3:23:c4:10:ae:c6:ec:cf:1c:95:75:04:
eb:4f:41:63:09:ec:ae:d6:68:11:ac:4d:75:07:f7:
c2:ee:27:88:58:db:87:5b:b2:2f:93:46:f1:8b:c3:
7e:ab:4c:0b:a6:3e:a9:a9:26:72:0d:57:f7:b8:11:
a9:d2:2a:12:96:63:73:25:e0:99:73:2c:33:94:12:
73:d4:1c:01:75:7a:cd:60:2f:b0:d4:33:f7:0a:f7:
47:4d:70:7a:1b:29:cc:5b:01:e1:1b:9c:f1:80:b5:
f8:5a:f6:17:b5:9b:72:fb:ef:72:01:31:63:ed:37:
e9:ff:17:18:d6:ba:6a:b4:ae:62:23:77:cd:48:5c:
3a:4b:cd:0f:4b:e4:93:6f:41:dc:a0:f2:57:ed:05:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4D:0D:16:DF:66:12:51:E7:77:9F:7B:FF:B9:BB:85:C2:75:FE:32
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/07be989e-f768-431c-b226-9c339200fa60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:0a:3c:47:78:b0:4b:5c:b8:8a:b7:4d:74:51:a6:df:1e:fc:
cd:66:43:8f:71:bd:b1:86:de:a3:d3:8f:a9:28:13:b6:44:af:
d4:a5:02:b8:af:ce:9d:1b:f4:8f:6f:77:21:5c:40:43:1b:99:
27:fa:05:f4:05:88:43:ba:02:8d:63:7d:e6:12:e5:f3:6a:2e:
1d:e0:4b:78:f0:85:9a:2d:83:af:68:e6:71:58:cf:c3:da:ef:
b8:3a:be:1f:9a:5d:72:73:24:0b:4f:ac:d9:17:f3:a1:cb:a1:
c8:96:5a:f4:8f:96:bc:0b:db:65:d6:ab:15:8a:9c:03:bf:f4:
1c:45:87:ad:f8:c0:06:63:d3:f1:1d:ee:93:fe:11:85:9e:22:
7d:49:16:d9:05:9b:3e:43:59:44:45:a8:4a:90:fb:ec:1b:3a:
9f:c7:9a:e9:b7:d6:4a:11:ce:dc:06:35:09:be:fc:81:27:97:
b2:70:1e:00:7f:ef:20:98:3f:f7:78:95:2c:8f:66:39:4f:87:
8c:3e:62:b1:38:bc:3d:4e:fa:66:0d:06:1d:e7:eb:89:de:a6:
6e:11:36:05:d6:26:4a:18:74:14:4b:92:e6:63:e8:88:e6:df:
86:eb:b4:23:6d:5b:12:9d:b7:ac:23:4c:b8:88:f6:dd:5b:7d:
9f:65:61:1f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKzyusgoL63pStJUz504uc0AG7hAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNjAxMjAzODIxWhcNMjUwNzA2MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNDY5OTkwZjUzYzA5MThkZjkxZmM5NDIyNTEwYjZhODVk
MTViMjJmNjQ2Yjk0YmUyYjAzMmZkMDA4Y2RjOWM0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxQBHs9kUdAoHfWaBrHPUep8oymYSRrwU1MnFyBNtWcT1V
qW8HbAxNcu7JVIJnfvf24gX73H0fHvcPX+NK7cphaI3I6kjZ5eJWvxbV4egMPHw4
zcN0VI538ge64h9rCSF5ANN7PnKBDFcPVbMjxBCuxuzPHJV1BOtPQWMJ7K7WaBGs
TXUH98LuJ4hY24dbsi+TRvGLw36rTAumPqmpJnINV/e4EanSKhKWY3Ml4JlzLDOU
EnPUHAF1es1gL7DUM/cK90dNcHobKcxbAeEbnPGAtfha9he1m3L773IBMWPtN+n/
FxjWumq0rmIjd81IXDpLzQ9L5JNvQdyg8lftBQe9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUaE0NFt9mElHnd597/7m7hcJ1/jIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzA3YmU5ODllLWY3NjgtNDMxYy1iMjI2LTljMzM5MjAwZmE2MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIoKPEd4sEtcuIq3TXRRpt8e/M1m
Q49xvbGG3qPTj6koE7ZEr9SlArivzp0b9I9vdyFcQEMbmSf6BfQFiEO6Ao1jfeYS
5fNqLh3gS3jwhZotg69o5nFYz8Pa77g6vh+aXXJzJAtPrNkX86HLociWWvSPlrwL
22XWqxWKnAO/9BxFh634wAZj0/Ed7pP+EYWeIn1JFtkFmz5DWURFqEqQ++wbOp/H
mum31koRztwGNQm+/IEnl7JwHgB/7yCYP/d4lSyPZjlPh4w+YrE4vD1O+mYNBh3n
64nepm4RNgXWJkoYdBRLkuZj6Ijm34brtCNtWxKdt6wjTLiI9t1bfZ9lYR8=
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:21:14 2025 by rpki-client