Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/167274d7-5b0c-4da9-a77f-c1244e9f4ce5.roa
File: 167274d7-5b0c-4da9-a77f-c1244e9f4ce5.roa (raw, json)
Hash identifier: vwdUhRpdOaONiYET3IxI2D8SdYzWHyUKBNnoZgoDbbc=
Subject key identifier: 07:78:DD:49:0A:1C:FC:8B:62:BA:A6:8B:77:5C:A6:2F:C5:D6:20:54
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1B4484C893061D1ECF6DCBB5D52191F4A9FF7AB8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/167274d7-5b0c-4da9-a77f-c1244e9f4ce5.roa
Signing time: Tue 08 Apr 2025 09:23:19 +0000
ROA not before: Tue 08 Apr 2025 09:23:19 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 09:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:44:84:c8:93:06:1d:1e:cf:6d:cb:b5:d5:21:91:f4:a9:ff:7a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 8 09:23:19 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: serialNumber=8703ce6de7190bdddd89162ec566baac9d44a07f35b3324b876342a22ebd3225, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ee:e7:7e:2f:6d:b0:a5:47:a5:bf:45:c5:6c:
d2:8d:fd:be:18:e5:4b:76:00:2a:9e:80:77:ec:00:
d8:90:54:2d:44:11:34:bc:79:70:a0:62:d6:97:01:
b1:96:f9:a3:8e:9a:11:a8:1d:61:d7:a7:f6:f4:38:
6d:b8:38:e2:a5:f6:54:e0:a9:49:0a:b1:a9:84:98:
26:5f:70:61:96:e8:38:9a:bd:05:2f:ed:e1:40:b8:
82:b6:6e:ad:bc:65:00:13:ec:1d:f9:8f:9e:53:c4:
3e:af:61:c1:85:79:75:ec:6a:29:a2:bf:0b:21:bf:
49:e4:d3:16:b0:d5:b7:f8:47:b6:3d:57:49:fa:8b:
a7:93:1d:8d:5e:5f:cd:bd:7e:19:28:3c:08:ae:5e:
aa:26:6d:15:f8:24:b2:ec:37:24:84:8c:22:80:51:
9f:8b:05:2e:6f:71:70:72:87:5c:85:c7:2c:4a:94:
6f:f6:a8:84:a7:e6:bb:8d:03:c8:7e:8c:d4:e8:c0:
28:6d:0c:a2:1c:9d:02:5e:e7:be:ba:72:61:fe:f6:
99:79:d1:ca:80:8c:14:8a:7c:3a:6e:50:7e:51:5e:
04:dd:59:d3:c0:a5:50:23:68:7b:a5:96:36:96:a4:
98:b4:a0:b3:23:ba:84:a1:a2:d1:96:cf:a9:63:83:
a6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:78:DD:49:0A:1C:FC:8B:62:BA:A6:8B:77:5C:A6:2F:C5:D6:20:54
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/167274d7-5b0c-4da9-a77f-c1244e9f4ce5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:08:c2:6e:82:cc:b3:42:08:5c:63:d2:31:33:a8:7a:9c:78:
78:0e:c0:23:45:17:1a:45:61:51:03:58:16:f1:a1:6c:44:8b:
7f:26:b0:8c:18:45:a3:e7:0c:0e:f9:0c:05:c5:df:43:48:84:
a7:73:33:58:b6:b8:b1:8d:1b:7f:5a:4a:74:ba:ca:3f:06:97:
1e:47:e9:3b:f1:01:f3:59:6e:2f:39:c6:0c:02:f6:0c:7d:74:
df:31:35:c7:9c:5c:66:1f:6e:ee:4e:e1:04:45:40:00:d7:7c:
3b:3e:74:fe:03:2c:4b:57:47:61:7c:be:f5:27:4d:37:0c:8f:
b1:aa:27:33:c6:65:d0:25:a2:69:87:3a:06:fc:c1:f5:0e:c5:
ae:c0:77:6b:47:4d:a1:a7:f1:85:99:56:c1:a6:89:3e:b8:7e:
e9:e2:22:b4:ba:ce:4a:cc:72:76:fb:f5:b9:6c:66:56:8f:34:
01:25:a2:aa:ee:96:de:89:df:02:3a:13:b5:b9:57:a2:aa:9c:
a0:e7:35:09:c9:4e:43:d1:45:e6:96:cc:1c:1d:cf:5a:99:ba:
bb:e5:38:ba:ce:4e:90:e1:2c:f8:ee:64:cb:cd:a5:f4:ee:7e:
24:43:01:73:b2:bd:3b:98:f8:73:19:12:7d:38:1d:82:c8:04:
8a:fc:c7:29
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUG0SEyJMGHR7Pbcu11SGR9Kn/ergwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDA4MDkyMzE5WhcNMjUwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NzAzY2U2ZGU3MTkwYmRkZGQ4OTE2MmVjNTY2YmFhYzlk
NDRhMDdmMzViMzMyNGI4NzYzNDJhMjJlYmQzMjI1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDl7ud+L22wpUelv0XFbNKN/b4Y5Ut2ACqegHfsANiQVC1E
ETS8eXCgYtaXAbGW+aOOmhGoHWHXp/b0OG24OOKl9lTgqUkKsamEmCZfcGGW6Dia
vQUv7eFAuIK2bq28ZQAT7B35j55TxD6vYcGFeXXsaimivwshv0nk0xaw1bf4R7Y9
V0n6i6eTHY1eX829fhkoPAiuXqombRX4JLLsNySEjCKAUZ+LBS5vcXByh1yFxyxK
lG/2qISn5ruNA8h+jNTowChtDKIcnQJe5766cmH+9pl50cqAjBSKfDpuUH5RXgTd
WdPApVAjaHulljaWpJi0oLMjuoShotGWz6ljg6bFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUB3jdSQoc/ItiuqaLd1ymL8XWIFQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzE2NzI3NGQ3LTViMGMtNGRhOS1hNzdmLWMxMjQ0ZTlmNGNlNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAD8Iwm6CzLNCCFxj0jEzqHqceHgO
wCNFFxpFYVEDWBbxoWxEi38msIwYRaPnDA75DAXF30NIhKdzM1i2uLGNG39aSnS6
yj8Glx5H6TvxAfNZbi85xgwC9gx9dN8xNcecXGYfbu5O4QRFQADXfDs+dP4DLEtX
R2F8vvUnTTcMj7GqJzPGZdAlommHOgb8wfUOxa7Ad2tHTaGn8YWZVsGmiT64funi
IrS6zkrMcnb79blsZlaPNAEloqrult6J3wI6E7W5V6KqnKDnNQnJTkPRReaWzBwd
z1qZurvlOLrOTpDhLPjuZMvNpfTufiRDAXOyvTuY+HMZEn04HYLIBIr8xyk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:53:25 2025 by rpki-client