Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/884176bb-83c1-49fc-8b1d-87b51c0f166f.roa
File: 884176bb-83c1-49fc-8b1d-87b51c0f166f.roa (raw, json)
Hash identifier: WeRN9MBPLK0zCJrZ01R0UuO6/9FXXFfx1fCLktEoqHY=
Subject key identifier: 31:B0:A3:A7:BB:19:75:B0:33:E2:84:21:4C:2A:50:64:7D:0C:C1:45
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 057281827E905916F44A1635B83C0455EB3E71BE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/884176bb-83c1-49fc-8b1d-87b51c0f166f.roa
Signing time: Tue 22 Apr 2025 18:58:23 +0000
ROA not before: Tue 22 Apr 2025 18:58:23 +0000
ROA not after: Tue 27 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 19:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:72:81:82:7e:90:59:16:f4:4a:16:35:b8:3c:04:55:eb:3e:71:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 22 18:58:23 2025 GMT
Not After : May 27 23:59:59 2025 GMT
Subject: serialNumber=cdae46ebf0bf0b14dc4f762a4ce861a808229f5d67911b46b517e1d64668d58d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:70:f9:3d:e2:c9:0f:d6:47:a2:70:90:0d:
c0:eb:8e:0c:d6:3e:cb:74:cf:74:5a:c1:2b:a3:19:
a9:da:5a:99:d8:7f:6b:1f:0a:d7:15:ea:3f:a9:d6:
3c:ed:f7:b0:15:d3:f8:96:04:57:49:5e:90:bf:21:
a9:dd:8a:fd:3f:12:ea:81:6d:fc:68:62:d7:4c:67:
97:58:9c:98:26:ba:dc:a9:27:50:f4:e4:68:05:7a:
7a:29:70:e4:14:c0:2c:02:ae:ca:3d:91:da:86:e6:
3e:fa:8a:a2:b4:44:85:98:94:d2:c5:d3:be:e9:4a:
64:3c:ad:93:f1:66:ad:12:d3:37:a5:b9:00:8e:a8:
c1:2c:e7:94:da:ed:71:d9:53:34:66:b3:e2:2b:37:
42:fd:30:77:cf:88:0b:2e:c3:7c:1d:c5:48:39:a3:
e4:43:15:a3:3e:5b:39:1b:f1:8a:ac:bd:bb:d0:d0:
12:b6:04:a8:81:d0:70:90:ad:9f:fc:2a:b1:f5:a5:
c0:2f:ca:2f:eb:43:30:24:ab:0e:32:cb:29:54:f7:
d9:1b:11:18:45:bc:bc:9b:69:ee:8b:db:ba:94:37:
7e:aa:cc:9d:7d:5f:e5:cf:97:c3:26:a1:83:b6:e2:
57:2e:6d:75:7d:87:21:a3:68:8c:82:92:a0:af:cf:
f2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B0:A3:A7:BB:19:75:B0:33:E2:84:21:4C:2A:50:64:7D:0C:C1:45
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/884176bb-83c1-49fc-8b1d-87b51c0f166f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
67:9d:28:5a:20:9e:47:e5:12:b3:9d:a5:28:5f:0b:b9:15:78:
d5:32:55:0b:5c:16:82:86:3c:0c:7b:4c:93:81:9c:1c:d6:8f:
16:08:75:3d:48:e8:cb:18:b6:30:1e:75:96:62:ed:dc:11:d5:
4a:db:8f:1a:21:aa:f5:11:cd:1d:e1:70:a3:87:43:6e:65:eb:
e0:ee:af:f1:2b:3c:02:25:f4:52:4f:5c:97:0a:19:04:81:e7:
d5:a2:48:8e:53:17:c7:6b:93:68:b7:28:00:bd:a2:85:e0:f4:
3f:eb:40:f9:28:61:dc:87:63:d4:39:43:a8:6b:2f:ec:cc:59:
29:cd:e9:73:0b:ac:4a:fc:33:21:7f:6d:df:18:9a:de:11:51:
2e:96:fb:3c:2a:36:83:14:c1:fe:6f:a3:73:9b:23:77:4e:a9:
67:db:02:5c:31:35:1b:83:6b:ab:e7:5a:cb:16:ea:31:c4:e6:
59:f0:80:6d:8e:82:b6:46:da:9a:40:fb:03:2d:5a:32:77:27:
b2:79:cd:c2:e2:29:4f:c7:cf:55:28:4d:38:aa:70:c3:be:d5:
92:63:99:89:10:bf:78:5f:15:ea:34:60:0d:99:98:1c:50:31:
08:16:51:bb:ec:9d:e6:b1:4f:cc:15:f7:5e:4a:e4:e0:c4:90:
91:bd:8a:5d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBXKBgn6QWRb0ShY1uDwEVes+cb4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDIyMTg1ODIzWhcNMjUwNTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjZGFlNDZlYmYwYmYwYjE0ZGM0Zjc2MmE0Y2U4NjFhODA4
MjI5ZjVkNjc5MTFiNDZiNTE3ZTFkNjQ2NjhkNThkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCaLXD5PeLJD9ZHonCQDcDrjgzWPst0z3RawSujGanaWpnY
f2sfCtcV6j+p1jzt97AV0/iWBFdJXpC/Iandiv0/EuqBbfxoYtdMZ5dYnJgmutyp
J1D05GgFenopcOQUwCwCrso9kdqG5j76iqK0RIWYlNLF077pSmQ8rZPxZq0S0zel
uQCOqMEs55Ta7XHZUzRms+IrN0L9MHfPiAsuw3wdxUg5o+RDFaM+Wzkb8YqsvbvQ
0BK2BKiB0HCQrZ/8KrH1pcAvyi/rQzAkqw4yyylU99kbERhFvLybae6L27qUN36q
zJ19X+XPl8MmoYO24lcubXV9hyGjaIyCkqCvz/KhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUMbCjp7sZdbAz4oQhTCpQZH0MwUUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzg4NDE3NmJiLTgzYzEtNDlmYy04YjFkLTg3YjUxYzBmMTY2Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGedKFognkflErOdpShfC7kVeNUy
VQtcFoKGPAx7TJOBnBzWjxYIdT1I6MsYtjAedZZi7dwR1UrbjxohqvURzR3hcKOH
Q25l6+Dur/ErPAIl9FJPXJcKGQSB59WiSI5TF8drk2i3KAC9ooXg9D/rQPkoYdyH
Y9Q5Q6hrL+zMWSnN6XMLrEr8MyF/bd8Ymt4RUS6W+zwqNoMUwf5vo3ObI3dOqWfb
AlwxNRuDa6vnWssW6jHE5lnwgG2OgrZG2ppA+wMtWjJ3J7J5zcLiKU/Hz1UoTTiq
cMO+1ZJjmYkQv3hfFeo0YA2ZmBxQMQgWUbvsneaxT8wV915K5ODEkJG9il0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:54 2025 by rpki-client