Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19cfd7be-f2dc-4a88-ac33-3f015c12c562.roa
File: 19cfd7be-f2dc-4a88-ac33-3f015c12c562.roa (raw, json)
Hash identifier: aAYasByv5iyp9J4mHdCi3wexx5MJOSs8KileIDq/jN0=
Subject key identifier: B8:E9:7D:FA:97:00:EB:A9:07:89:92:09:36:53:81:EA:82:A3:1E:B4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3723027F4736920225376EA9339B78C55091D7FB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19cfd7be-f2dc-4a88-ac33-3f015c12c562.roa
Signing time: Mon 31 Mar 2025 01:38:15 +0000
ROA not before: Mon 31 Mar 2025 01:38:15 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 01:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:23:02:7f:47:36:92:02:25:37:6e:a9:33:9b:78:c5:50:91:d7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 31 01:38:15 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=2c1c5f33615d7d20f24d2810551284fd2850b664c45385f044f2aa8ce59c73cf, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:fe:14:4a:52:c7:bb:33:f2:7d:44:a3:72:
27:a7:70:1a:a5:94:a1:ce:e8:f5:cd:d1:d1:df:38:
b6:64:44:98:eb:8b:c3:87:ce:18:0f:39:0b:e2:99:
50:c8:81:56:e5:70:92:b7:f9:e4:10:c3:ef:1a:14:
37:be:b4:39:4b:8d:02:3f:1e:92:c4:1d:48:23:26:
b0:a8:e6:15:df:ae:eb:ec:8e:dd:21:44:2b:05:7b:
9a:66:6b:68:e0:5a:ac:75:35:50:00:98:39:a8:d5:
de:d4:6e:d0:a0:19:82:82:25:54:21:b3:3b:d0:3d:
aa:52:7e:a4:98:dc:9e:c2:ab:fe:8c:59:6e:cc:71:
e7:11:29:26:4c:c6:25:ae:69:b4:a4:dc:29:45:af:
9f:66:c1:33:ed:bf:01:7e:d5:11:52:ac:4b:a2:76:
e8:dd:4c:af:4e:0e:98:a9:fd:03:42:ca:35:8b:e6:
7a:91:e3:6d:5f:5c:fe:9a:53:2b:8f:99:63:a3:46:
23:c1:ec:53:d6:d6:d2:ac:a9:7a:d3:d3:64:5b:83:
54:eb:0c:e8:2f:0a:cf:e7:ce:35:36:e6:97:9d:5b:
c8:61:cb:ea:5e:57:af:b2:1d:eb:0c:85:23:e5:c0:
d5:70:46:02:fc:0a:90:1d:dc:3c:45:9c:b0:00:8f:
96:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E9:7D:FA:97:00:EB:A9:07:89:92:09:36:53:81:EA:82:A3:1E:B4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19cfd7be-f2dc-4a88-ac33-3f015c12c562.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:34:06:1d:f8:90:5c:c4:9e:39:2e:c8:ff:f3:cd:e4:b0:2f:
ef:65:b8:32:a3:dc:5a:57:29:77:68:2f:9b:7c:58:ed:0f:8f:
e6:8b:3c:a9:08:fb:7d:61:e0:ef:a1:58:a0:ef:d1:43:95:34:
b8:ae:83:0d:f8:e2:95:60:85:8d:d7:62:4a:db:56:9d:9a:3b:
a8:27:73:71:c0:ce:a0:23:7b:af:de:8b:f9:dd:b6:5e:c9:ed:
0c:22:ef:d7:14:84:24:0d:b0:2c:9d:d4:24:a8:8d:4c:eb:a4:
d6:1b:c7:49:97:fd:32:58:77:e9:d8:83:c5:a6:bc:9a:0d:2e:
fd:c1:f7:6c:c3:9d:60:2c:47:b8:c3:73:2b:33:4f:16:79:83:
e6:bc:77:84:e9:9f:de:50:86:b4:48:f4:17:06:6e:1c:2a:f1:
16:4c:3e:12:f1:a9:26:ff:e9:4a:6d:82:9e:91:d6:25:c2:21:
20:5f:e1:51:e3:5b:5a:bf:7e:15:28:fd:3b:92:5b:da:78:92:
77:a0:ed:64:f2:d9:4a:8e:c0:4c:58:35:51:2d:7e:f0:24:03:
2c:74:7b:ca:29:af:a6:a5:13:7a:05:e0:1d:78:d8:d9:4a:ed:
e0:ba:3e:57:4f:db:e1:79:e2:d9:95:9e:d6:1c:28:aa:95:00:
be:e1:1d:bd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNyMCf0c2kgIlN26pM5t4xVCR1/swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMzMxMDEzODE1WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYzFjNWYzMzYxNWQ3ZDIwZjI0ZDI4MTA1NTEyODRmZDI4
NTBiNjY0YzQ1Mzg1ZjA0NGYyYWE4Y2U1OWM3M2NmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDM2/4USlLHuzPyfUSjciencBqllKHO6PXN0dHfOLZkRJjr
i8OHzhgPOQvimVDIgVblcJK3+eQQw+8aFDe+tDlLjQI/HpLEHUgjJrCo5hXfruvs
jt0hRCsFe5pma2jgWqx1NVAAmDmo1d7UbtCgGYKCJVQhszvQPapSfqSY3J7Cq/6M
WW7McecRKSZMxiWuabSk3ClFr59mwTPtvwF+1RFSrEuidujdTK9ODpip/QNCyjWL
5nqR421fXP6aUyuPmWOjRiPB7FPW1tKsqXrT02Rbg1TrDOgvCs/nzjU25pedW8hh
y+peV6+yHesMhSPlwNVwRgL8CpAd3DxFnLAAj5bbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUuOl9+pcA66kHiZIJNlOB6oKjHrQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzE5Y2ZkN2JlLWYyZGMtNGE4OC1hYzMzLTNmMDE1YzEyYzU2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAG80Bh34kFzEnjkuyP/zzeSwL+9l
uDKj3FpXKXdoL5t8WO0Pj+aLPKkI+31h4O+hWKDv0UOVNLiugw344pVghY3XYkrb
Vp2aO6gnc3HAzqAje6/ei/ndtl7J7Qwi79cUhCQNsCyd1CSojUzrpNYbx0mX/TJY
d+nYg8WmvJoNLv3B92zDnWAsR7jDcyszTxZ5g+a8d4Tpn95QhrRI9BcGbhwq8RZM
PhLxqSb/6Uptgp6R1iXCISBf4VHjW1q/fhUo/TuSW9p4kneg7WTy2UqOwExYNVEt
fvAkAyx0e8opr6alE3oF4B142NlK7eC6PldP2+F54tmVntYcKKqVAL7hHb0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:10:20 2025 by rpki-client