Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/62c1a18e-b713-491e-8efe-5634b66f62b7.roa
File: 62c1a18e-b713-491e-8efe-5634b66f62b7.roa (raw, json)
Hash identifier: Oj1fGfce6TzoUg4jdhrM7/zQeIIs31vLg3LAdFjVW8s=
Subject key identifier: EC:C9:E9:AD:1A:72:93:9B:F7:44:9E:8C:A5:F5:F6:3C:72:40:EF:1B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 373F3F6ECC95D047C226F2A018B008372A9D4896
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/62c1a18e-b713-491e-8efe-5634b66f62b7.roa
Signing time: Sat 14 Jun 2025 15:28:16 +0000
ROA not before: Sat 14 Jun 2025 15:28:16 +0000
ROA not after: Sat 19 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Jun 2025 15:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3f:3f:6e:cc:95:d0:47:c2:26:f2:a0:18:b0:08:37:2a:9d:48:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 14 15:28:16 2025 GMT
Not After : Jul 19 23:59:59 2025 GMT
Subject: serialNumber=1d5909fcd17d588e685740b999f4d6320c22508a8891b3bc3cb65c77ab2f5cb3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:ae:6a:f9:11:85:27:2a:b0:a5:ff:25:ef:
4d:e4:fe:ba:e6:be:56:3e:61:ab:58:b4:50:c9:a9:
ae:5a:ba:b7:37:99:f7:7d:37:8c:be:00:ee:b3:2b:
4f:12:6f:4e:c5:86:c4:87:17:53:9e:a8:08:6f:73:
45:8f:31:c6:b3:2d:7a:b7:5b:f0:85:6c:94:b9:d7:
05:4d:ca:72:5d:61:f6:b4:1e:5e:5a:ff:0d:cd:cc:
d0:b4:1c:4e:7b:c0:3f:84:c9:b5:1e:0a:44:42:02:
78:03:4e:b1:ec:8c:60:67:d9:1f:b0:41:34:67:c4:
a7:8c:bd:09:aa:83:6a:10:fb:1e:3b:51:b8:a2:49:
ac:91:54:e4:5b:2a:bb:97:70:36:ef:15:4a:c7:c0:
e9:8e:8b:a7:5e:f2:ff:b1:fe:f2:16:c2:ef:ab:14:
31:9f:48:a9:f1:7c:74:d2:cc:6c:72:a3:d2:f8:1f:
ea:19:7e:88:f0:02:0a:5e:9b:21:9a:d9:61:72:dd:
70:48:fb:27:c1:f5:34:92:b7:08:dc:b7:af:91:67:
aa:7a:8d:d4:f3:93:04:7b:a1:a4:f3:17:c1:b3:6d:
0d:37:b0:97:9d:4d:96:18:f4:eb:7a:2d:9e:bc:04:
b9:e2:92:a3:7d:70:0e:63:00:72:e1:3f:50:fc:a6:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C9:E9:AD:1A:72:93:9B:F7:44:9E:8C:A5:F5:F6:3C:72:40:EF:1B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/62c1a18e-b713-491e-8efe-5634b66f62b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:1c:14:f2:58:ba:b9:94:53:f5:35:3b:40:91:20:1a:99:d7:
7d:91:ba:8e:68:79:b5:7f:77:e9:c2:63:1c:4c:8c:74:e8:3f:
28:9f:bd:18:65:6c:b2:d8:ec:bb:1b:01:08:ac:b1:66:e5:b7:
00:72:fb:1e:3d:65:53:a6:3f:10:3f:9b:c6:80:7a:c8:c3:54:
59:4f:04:a8:df:bb:70:2b:b9:32:5a:7d:9a:b8:ef:8e:92:eb:
80:51:23:e4:c0:d3:d0:88:29:df:71:62:d3:ab:4c:14:d6:2e:
eb:1c:44:66:d6:6b:83:07:2b:70:8c:95:9c:66:f2:e6:26:c1:
38:f3:3b:52:e4:cd:d6:4c:0c:b9:a6:bb:c5:70:ac:85:ff:66:
77:dd:4f:2f:3a:1f:56:fe:ab:fc:f2:e7:0b:c8:f0:e6:2c:a3:
a9:61:a4:09:69:53:e2:76:5a:4a:36:32:12:49:b6:4b:1f:bf:
fb:cc:11:38:33:dd:85:a2:a8:99:01:6a:1a:7a:b8:1e:2e:76:
3c:b5:2b:a2:e7:69:0d:b4:3c:c7:36:64:0e:6c:2d:24:6e:f5:
fd:d3:7c:8f:56:5a:db:60:49:5a:2f:af:c3:bb:35:02:52:1b:
82:34:f2:aa:61:72:45:81:0d:1b:c7:ce:11:77:46:e7:09:5d:
1d:45:be:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:06:05 2025 by rpki-client