Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/76767777-0c27-48eb-a42b-0c57145aba79.roa
File: 76767777-0c27-48eb-a42b-0c57145aba79.roa (raw, json)
Hash identifier: RuL3ZnYosLyTkxvffeC8+28twee1rWuStG5rP0GYLFE=
Subject key identifier: B5:4C:BD:7A:FC:B5:8A:35:B5:FF:EA:03:42:C2:DD:56:73:D5:F6:4B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 49A2017E274FC7C6D7302258B516615FAEBAE839
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/76767777-0c27-48eb-a42b-0c57145aba79.roa
Signing time: Wed 11 Jun 2025 16:28:20 +0000
ROA not before: Wed 11 Jun 2025 16:28:20 +0000
ROA not after: Wed 16 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jun 2025 16:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a2:01:7e:27:4f:c7:c6:d7:30:22:58:b5:16:61:5f:ae:ba:e8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 11 16:28:20 2025 GMT
Not After : Jul 16 23:59:59 2025 GMT
Subject: serialNumber=43725bf445876c858182fdb9f059d9d982c6a5b672469ffbd7e508617b9448fa, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0f:dc:44:99:20:ff:e8:9c:33:bf:06:05:33:
ec:81:20:cd:48:1f:00:ac:a7:fa:40:b1:09:75:a3:
4d:ec:62:bc:05:80:a2:83:28:b3:47:bc:46:54:80:
9c:b6:a5:6a:14:57:30:3d:cd:d6:17:5f:22:55:73:
ff:68:96:b7:cf:32:24:50:2e:b5:5d:4b:27:f6:90:
58:99:4c:3e:a6:7b:60:dc:a3:fc:e0:ab:8d:97:33:
d4:ce:9a:20:9b:09:72:e2:02:50:e0:54:2d:a1:80:
be:ea:c6:04:5d:7b:96:5b:6e:b0:22:34:66:fa:d3:
be:ed:60:90:56:f6:68:2a:f9:c2:48:81:22:9b:6d:
3f:0c:ec:60:b1:01:80:3b:49:60:d8:7f:f0:c8:41:
07:8d:05:96:57:8a:b4:ea:22:d2:f9:b1:c1:3d:c1:
e7:7d:45:34:1f:58:a3:e5:6c:e1:b8:ed:85:4f:59:
36:3f:72:64:d5:2c:09:7d:4e:7a:89:a8:b6:fe:2d:
4f:47:8f:0b:90:1b:e7:7c:0b:c9:39:41:6a:1a:a2:
20:5d:6c:24:f4:be:26:3e:9d:6c:33:ac:fd:0a:5e:
c1:c4:e9:46:69:32:ba:b3:9a:39:9c:1e:4f:07:b3:
25:e8:ef:6e:91:06:a7:ab:3f:1b:93:ed:d1:f5:11:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4C:BD:7A:FC:B5:8A:35:B5:FF:EA:03:42:C2:DD:56:73:D5:F6:4B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/76767777-0c27-48eb-a42b-0c57145aba79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:3e:d8:06:19:48:9c:41:e1:f6:06:ff:fb:b7:5b:9d:ea:ac:
39:5f:2b:7d:08:d3:1b:01:b2:96:59:7d:b8:38:68:b5:86:8e:
39:fb:69:35:8e:c0:91:57:30:d2:f4:9e:17:7c:b7:21:01:09:
ce:f3:f1:2b:9f:b5:a5:e7:b2:dd:22:99:c3:b7:ce:8d:98:7d:
aa:b7:54:5d:f9:f0:97:87:67:11:76:ec:a1:a2:cb:ea:5c:b2:
e0:f0:15:1b:36:03:a7:c7:2f:a8:9b:67:22:2d:70:90:d3:c8:
e8:0a:4f:e8:c5:8d:f8:c0:12:c3:0b:4b:40:10:c2:23:50:f9:
7e:7c:15:da:7f:ce:c5:18:eb:2b:c7:3c:89:0e:0b:d5:d3:1b:
cb:92:87:e7:89:6c:ac:51:6f:4b:5d:14:ab:51:d2:25:ed:24:
c1:9f:84:7b:f2:80:f2:3e:95:ea:18:49:14:88:8d:5d:da:61:
3f:b8:06:f2:50:2b:79:ef:7d:d3:31:e0:95:0f:4e:18:33:7d:
51:57:23:80:3e:a7:60:b0:d8:1f:15:17:d9:08:62:46:48:98:
06:ea:83:e8:13:54:67:de:7d:cb:41:db:37:bf:e0:bd:9e:2a:
ab:ca:33:55:93:22:5b:13:be:db:bd:5a:dc:e3:5c:bd:5a:a0:
ea:04:a2:86
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSaIBfidPx8bXMCJYtRZhX6666DkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNjExMTYyODIwWhcNMjUwNzE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MzcyNWJmNDQ1ODc2Yzg1ODE4MmZkYjlmMDU5ZDlkOTgy
YzZhNWI2NzI0NjlmZmJkN2U1MDg2MTdiOTQ0OGZhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCKD9xEmSD/6JwzvwYFM+yBIM1IHwCsp/pAsQl1o03sYrwF
gKKDKLNHvEZUgJy2pWoUVzA9zdYXXyJVc/9olrfPMiRQLrVdSyf2kFiZTD6me2Dc
o/zgq42XM9TOmiCbCXLiAlDgVC2hgL7qxgRde5ZbbrAiNGb6077tYJBW9mgq+cJI
gSKbbT8M7GCxAYA7SWDYf/DIQQeNBZZXirTqItL5scE9wed9RTQfWKPlbOG47YVP
WTY/cmTVLAl9TnqJqLb+LU9HjwuQG+d8C8k5QWoaoiBdbCT0viY+nWwzrP0KXsHE
6UZpMrqzmjmcHk8HsyXo726RBqerPxuT7dH1Ebw7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtUy9evy1ijW1/+oDQsLdVnPV9kswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzc2NzY3Nzc3LTBjMjctNDhlYi1hNDJiLTBjNTcxNDVhYmE3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALU+2AYZSJxB4fYG//u3W53qrDlf
K30I0xsBspZZfbg4aLWGjjn7aTWOwJFXMNL0nhd8tyEBCc7z8SuftaXnst0imcO3
zo2Yfaq3VF358JeHZxF27KGiy+pcsuDwFRs2A6fHL6ibZyItcJDTyOgKT+jFjfjA
EsMLS0AQwiNQ+X58Fdp/zsUY6yvHPIkOC9XTG8uSh+eJbKxRb0tdFKtR0iXtJMGf
hHvygPI+leoYSRSIjV3aYT+4BvJQK3nvfdMx4JUPThgzfVFXI4A+p2Cw2B8VF9kI
YkZImAbqg+gTVGfefctB2ze/4L2eKqvKM1WTIlsTvtu9WtzjXL1aoOoEooY=
-----END CERTIFICATE-----
Generated at Mon Jun 16 18:49:05 2025 by rpki-client