Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/209bfa6f-0922-4ad0-bb50-1431a3deddc7.roa
File: 209bfa6f-0922-4ad0-bb50-1431a3deddc7.roa (raw, json)
Hash identifier: dHIUUqLXlCvtbylyLO0hfg4yTANBNt+LRjttMDT/OTA=
Subject key identifier: 99:72:85:8C:17:B4:F3:DD:39:B9:13:03:24:0D:06:41:4F:39:15:2F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 139612FE17D48604A19F5F49525CE45C9C2052BE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/209bfa6f-0922-4ad0-bb50-1431a3deddc7.roa
Signing time: Wed 21 May 2025 11:18:20 +0000
ROA not before: Wed 21 May 2025 11:18:20 +0000
ROA not after: Wed 25 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 11:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:96:12:fe:17:d4:86:04:a1:9f:5f:49:52:5c:e4:5c:9c:20:52:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 21 11:18:20 2025 GMT
Not After : Jun 25 23:59:59 2025 GMT
Subject: serialNumber=4ebdb439dae2783849f7d74e4d2c5e53b92925998a719fbc88680a606c42b92c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5b:97:a7:9f:96:7a:13:44:0a:03:89:1e:3c:
b9:e9:2d:5c:5a:6f:52:9b:8f:57:a8:4d:f0:8c:72:
28:fb:92:50:d3:73:9e:f5:cf:fd:6f:66:a9:5d:59:
8f:ef:5c:30:5b:84:22:bf:ee:c8:67:e3:57:79:2c:
0f:d4:10:19:89:92:bc:5f:f9:4f:fe:bd:c1:15:8c:
5e:10:65:94:13:15:b8:40:16:f9:1d:9f:95:ce:42:
e6:99:cf:73:1b:d4:43:e5:3b:85:02:a5:91:a5:99:
bd:b3:70:d9:12:bd:99:bc:5b:f4:79:42:fd:5a:42:
2f:7d:29:59:95:f2:ec:5e:7a:05:92:29:18:aa:d0:
26:4a:4e:a8:f6:0f:38:e2:a9:ee:f7:a7:37:48:30:
0f:64:e4:63:17:76:73:b4:3d:f4:39:95:5c:07:3e:
05:3a:d9:b0:5e:ad:ec:fc:45:cf:dc:e4:86:eb:47:
18:12:94:0c:9c:03:f5:7a:b9:40:3b:34:fc:df:5d:
c3:b6:05:e4:b2:37:b3:ee:72:7f:b2:a3:f4:15:af:
b7:82:1f:f9:2a:96:ca:06:61:c1:2e:b2:08:9b:59:
31:ee:30:90:71:00:ba:d0:5f:ba:89:71:fc:de:05:
1c:22:8f:75:ee:9c:1c:19:b7:35:fa:b4:77:98:32:
73:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:72:85:8C:17:B4:F3:DD:39:B9:13:03:24:0D:06:41:4F:39:15:2F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/209bfa6f-0922-4ad0-bb50-1431a3deddc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b2:da:58:8a:79:55:7c:d1:8b:71:e8:d5:7d:39:18:f8:f1:
63:e0:11:05:48:f0:62:cf:ed:37:4b:19:c5:ff:70:3c:71:27:
18:84:e2:4e:95:cc:ab:39:00:55:6e:99:8a:22:05:fe:29:bf:
e1:4d:92:4c:68:77:2f:9c:0d:30:6e:ad:6f:44:0f:c5:b8:47:
69:b3:83:8e:dd:be:3b:a3:22:c5:a5:80:d0:24:dc:5d:ec:e8:
59:d7:81:78:37:23:d1:c7:b5:e9:11:46:a3:c3:d3:82:a8:4a:
cd:6a:99:bc:e2:1a:f0:8b:96:3b:60:11:c7:83:df:a7:96:99:
71:93:02:ae:73:9b:f3:ff:0a:58:67:04:16:ed:cf:a2:45:c8:
fc:f4:52:a4:a0:af:7d:84:a4:f2:8c:a2:25:a1:0e:84:3a:aa:
dd:0a:80:aa:b1:6a:54:b6:e5:c5:71:ce:fd:18:3b:cf:8a:fb:
3b:09:d6:8b:6f:c3:04:97:1e:10:c4:d0:46:f2:2b:b2:1d:51:
3e:22:19:64:b3:ed:14:16:e7:f1:4e:34:1c:ba:9a:4d:97:49:
b8:72:ae:09:66:6a:db:6f:1d:cf:38:86:c8:60:e3:4c:1e:18:
8b:78:b0:37:5f:e5:e8:80:82:a7:d6:26:5d:e5:55:78:e6:ab:
b7:1f:50:e8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUE5YS/hfUhgShn19JUlzkXJwgUr4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNTIxMTExODIwWhcNMjUwNjI1MjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZWJkYjQzOWRhZTI3ODM4NDlmN2Q3NGU0ZDJjNWU1M2I5
MjkyNTk5OGE3MTlmYmM4ODY4MGE2MDZjNDJiOTJjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCMW5enn5Z6E0QKA4kePLnpLVxab1Kbj1eoTfCMcij7klDT
c571z/1vZqldWY/vXDBbhCK/7shn41d5LA/UEBmJkrxf+U/+vcEVjF4QZZQTFbhA
Fvkdn5XOQuaZz3Mb1EPlO4UCpZGlmb2zcNkSvZm8W/R5Qv1aQi99KVmV8uxeegWS
KRiq0CZKTqj2Dzjiqe73pzdIMA9k5GMXdnO0PfQ5lVwHPgU62bBerez8Rc/c5Ibr
RxgSlAycA/V6uUA7NPzfXcO2BeSyN7Pucn+yo/QVr7eCH/kqlsoGYcEusgibWTHu
MJBxALrQX7qJcfzeBRwij3XunBwZtzX6tHeYMnMLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUmXKFjBe08905uRMDJA0GQU85FS8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzIwOWJmYTZmLTA5MjItNGFkMC1iYjUwLTE0MzFhM2RlZGRjNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAA+y2liKeVV80Ytx6NV9ORj48WPg
EQVI8GLP7TdLGcX/cDxxJxiE4k6VzKs5AFVumYoiBf4pv+FNkkxody+cDTBurW9E
D8W4R2mzg47dvjujIsWlgNAk3F3s6FnXgXg3I9HHtekRRqPD04KoSs1qmbziGvCL
ljtgEceD36eWmXGTAq5zm/P/ClhnBBbtz6JFyPz0UqSgr32EpPKMoiWhDoQ6qt0K
gKqxalS25cVxzv0YO8+K+zsJ1otvwwSXHhDE0EbyK7IdUT4iGWSz7RQW5/FONBy6
mk2XSbhyrglmattvHc84hshg40weGIt4sDdf5eiAgqfWJl3lVXjmq7cfUOg=
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:40:57 2025 by rpki-client