Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18c0426e-6356-4ece-bceb-fd02e63fe0d3.roa
File: 18c0426e-6356-4ece-bceb-fd02e63fe0d3.roa (raw, json)
Hash identifier: SPBtBRxR2eKSaCSysF/jTifSwvT18uXFZlu/QlRExeQ=
Subject key identifier: F4:6D:C3:D2:AE:0D:23:00:08:D6:7A:C5:07:8A:4B:13:82:2E:0F:C0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5C2CC970DF066A706A2F825D8515D6C892668881
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18c0426e-6356-4ece-bceb-fd02e63fe0d3.roa
Signing time: Sat 07 Jun 2025 07:43:17 +0000
ROA not before: Sat 07 Jun 2025 07:43:17 +0000
ROA not after: Sat 12 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jun 2025 08:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:2c:c9:70:df:06:6a:70:6a:2f:82:5d:85:15:d6:c8:92:66:88:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 7 07:43:17 2025 GMT
Not After : Jul 12 23:59:59 2025 GMT
Subject: serialNumber=0d128b267567e8c022625c16934243b0073c2ae1f80b969753294a90222c0630, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:aa:51:20:d1:35:d5:b8:69:ae:1c:30:68:
d0:c4:44:7a:2f:59:ef:3e:66:93:99:94:14:71:fe:
e2:97:ae:d0:53:d7:f9:a3:bd:06:d2:35:57:7b:bb:
a4:ed:8c:29:d1:66:f8:04:f1:d4:c6:6f:c6:1e:1a:
62:d8:f7:34:b7:14:e5:7e:da:f5:b5:c9:5a:a9:7c:
28:c5:13:72:4b:34:69:5f:5f:70:40:ef:03:ff:91:
4e:03:08:1b:68:30:84:49:aa:26:ba:34:39:a9:2a:
1e:92:2e:de:04:37:24:a6:98:1c:8a:a5:11:56:e4:
54:bf:e0:ef:3f:84:2c:4a:44:5d:8d:68:af:7f:20:
20:40:c3:ad:32:55:7c:27:7f:f9:b6:a7:b9:b0:6e:
7b:ca:68:bf:97:e2:21:75:86:e9:fd:19:0b:fa:11:
ca:8c:05:49:29:a5:73:04:61:3c:30:9b:db:8b:85:
36:d4:a0:ab:65:85:f7:e2:6d:a0:37:bd:5b:aa:62:
a2:ad:de:8c:c1:f8:c3:0e:ca:1d:fd:b2:8b:6a:e6:
be:b8:41:d0:97:f6:5d:be:fe:9b:db:b6:56:72:83:
6b:bd:70:4b:45:43:a7:72:69:d2:d8:fb:21:1e:03:
15:71:02:92:57:8d:41:cb:b4:8b:93:21:74:00:ee:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6D:C3:D2:AE:0D:23:00:08:D6:7A:C5:07:8A:4B:13:82:2E:0F:C0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18c0426e-6356-4ece-bceb-fd02e63fe0d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8b:f8:56:9f:3d:14:3e:1e:c4:39:31:de:84:dd:23:44:47:
9f:36:7d:47:0e:4b:36:1b:1f:ce:ae:a8:8d:aa:c5:f9:6e:8d:
c3:1a:2a:a6:e2:32:3c:49:66:83:6b:be:c3:98:cc:c4:c5:c3:
5e:c2:0d:3d:5b:ce:a2:a7:63:7d:c3:13:75:e1:e6:ec:8e:71:
80:20:a4:30:3e:2c:34:b9:e0:09:6e:4e:5b:e4:ea:ac:d8:62:
4b:f5:3f:fc:bf:20:42:0f:92:da:00:61:61:5b:37:f4:82:8e:
ac:16:49:0e:70:47:0d:e9:3e:83:04:cd:fc:57:91:8f:1e:d5:
ed:c1:fb:67:b2:ba:b0:bc:9d:d3:91:1f:7d:0b:cd:45:d6:82:
1f:2e:95:1e:72:e3:56:2f:fe:04:23:59:0b:0e:f2:6f:26:32:
9a:4e:36:89:b8:0d:2b:b8:75:f3:d1:09:7c:3c:34:6f:e9:7c:
5c:2e:7e:27:fc:9e:0d:2a:6f:8d:5e:07:60:fa:4a:94:24:a4:
d3:aa:3b:ac:9c:58:5a:d5:55:95:5d:a8:01:ff:db:d2:48:2f:
f0:0a:89:a3:98:52:76:35:61:f0:9e:d0:3e:7f:aa:aa:8c:54:
30:69:28:dd:ea:9a:db:c4:7a:f6:1f:73:ad:b1:7c:4e:c8:7d:
0b:7a:22:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:43:57 2025 by rpki-client