Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9400f4fe-72ff-496e-93f7-347ecece9d43.roa
File: 9400f4fe-72ff-496e-93f7-347ecece9d43.roa (raw, json)
Hash identifier: 9OqsobHRNH4eLQgpfwJJdKsG/T/cZz6vX9s2ZqYBnHk=
Subject key identifier: BD:71:60:58:E2:36:50:9E:26:D3:C6:DF:5E:AE:96:E5:32:82:A1:D4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7B0B9694251290B63F170FA29987C87AC1C3936A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9400f4fe-72ff-496e-93f7-347ecece9d43.roa
Signing time: Sat 07 Jun 2025 06:23:20 +0000
ROA not before: Sat 07 Jun 2025 06:23:20 +0000
ROA not after: Sat 12 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jun 2025 06:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:0b:96:94:25:12:90:b6:3f:17:0f:a2:99:87:c8:7a:c1:c3:93:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 7 06:23:20 2025 GMT
Not After : Jul 12 23:59:59 2025 GMT
Subject: serialNumber=775d899f1eca2f1c86dabd93a7d481a43dff52e170ccad869f9446c4b123d640, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:78:44:e2:f1:9f:ff:8f:4e:ef:99:7f:8f:75:
25:f2:ea:3a:9f:13:d3:a5:96:6d:23:69:32:53:22:
fd:0c:35:2a:20:7a:4a:fe:07:36:83:c0:fa:db:e6:
f6:5e:8f:f6:c9:62:9a:ae:09:92:52:be:49:2d:af:
68:2d:4c:33:ca:35:a0:a2:be:7c:0e:ab:aa:6c:a7:
0a:6c:1c:02:ca:d0:63:ff:36:7f:4e:61:25:17:30:
1b:ca:8f:2c:d5:28:75:47:f1:76:67:c7:40:10:70:
9e:6b:4d:cc:28:05:69:d3:03:56:eb:14:33:55:51:
13:62:46:c1:91:09:f4:d2:9e:d4:71:6b:da:fc:d9:
a4:d0:b3:0f:e8:6e:dc:9d:77:9c:4e:82:c9:c3:be:
53:ca:61:45:a6:57:40:b9:79:c2:b3:bc:df:ed:19:
a0:eb:91:5e:c9:9a:0a:02:7e:5e:75:77:66:10:3e:
cf:fd:91:ca:7f:09:6c:8a:79:2b:9e:4f:e0:1e:12:
70:55:a0:b2:99:98:b6:a6:1e:b8:b6:ee:51:24:53:
56:99:0f:53:80:8e:62:10:5f:62:ca:18:e4:08:dc:
46:8e:40:b3:af:21:a5:dc:b6:7b:27:ae:dc:56:f0:
97:fe:2f:e2:83:9f:f9:11:cd:f4:9a:9c:20:1b:9a:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:71:60:58:E2:36:50:9E:26:D3:C6:DF:5E:AE:96:E5:32:82:A1:D4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9400f4fe-72ff-496e-93f7-347ecece9d43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4d:4e:d5:bd:ba:6d:6c:7e:0b:8f:55:c5:3c:eb:90:f2:c8:
d4:6f:d9:ed:d2:52:39:12:88:29:bd:de:10:44:13:16:cd:8f:
d7:9a:9d:e6:cd:b8:c2:88:5a:e5:14:c9:cb:1e:b1:05:99:89:
b4:3f:16:47:15:cc:ef:0e:b7:93:81:7c:00:2b:2d:f5:1b:c6:
27:46:2e:1a:66:33:8b:e3:93:52:98:b9:d7:0a:50:b8:46:aa:
39:ed:f1:a8:d7:2a:4b:73:77:d0:90:7b:cc:57:b4:f5:6c:1d:
82:0d:8c:5b:54:fa:ff:96:21:3d:a9:45:ab:1f:41:50:7f:e6:
0e:75:8e:3c:39:af:3c:99:d9:7f:c9:16:b8:f5:79:98:41:89:
9c:66:92:0a:ff:eb:b4:fa:4f:cb:9a:a2:7c:b8:98:11:09:88:
3f:5a:a1:52:b6:91:02:42:59:6b:0b:2f:a9:b9:30:7c:8b:17:
6b:2c:be:a4:84:ac:57:54:53:bc:54:08:67:c8:46:12:49:f3:
28:71:27:86:7f:ff:39:47:16:9d:21:fc:86:a8:5d:ca:d1:41:
30:6c:8c:85:85:49:ec:c0:00:a7:dc:c0:14:8a:45:89:56:f2:
a2:d9:c8:e4:37:db:1e:e2:56:b8:4c:55:e7:1c:4e:95:58:34:
c8:66:70:c2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUewuWlCUSkLY/Fw+imYfIesHDk2owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNjA3MDYyMzIwWhcNMjUwNzEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NzVkODk5ZjFlY2EyZjFjODZkYWJkOTNhN2Q0ODFhNDNk
ZmY1MmUxNzBjY2FkODY5Zjk0NDZjNGIxMjNkNjQwMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDheETi8Z//j07vmX+PdSXy6jqfE9Ollm0jaTJTIv0MNSog
ekr+BzaDwPrb5vZej/bJYpquCZJSvkktr2gtTDPKNaCivnwOq6pspwpsHALK0GP/
Nn9OYSUXMBvKjyzVKHVH8XZnx0AQcJ5rTcwoBWnTA1brFDNVURNiRsGRCfTSntRx
a9r82aTQsw/obtydd5xOgsnDvlPKYUWmV0C5ecKzvN/tGaDrkV7JmgoCfl51d2YQ
Ps/9kcp/CWyKeSueT+AeEnBVoLKZmLamHri27lEkU1aZD1OAjmIQX2LKGOQI3EaO
QLOvIaXctnsnrtxW8Jf+L+KDn/kRzfSanCAbmvl3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUvXFgWOI2UJ4m08bfXq6W5TKCodQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzk0MDBmNGZlLTcyZmYtNDk2ZS05M2Y3LTM0N2VjZWNlOWQ0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADdNTtW9um1sfguPVcU865DyyNRv
2e3SUjkSiCm93hBEExbNj9eanebNuMKIWuUUycsesQWZibQ/FkcVzO8Ot5OBfAAr
LfUbxidGLhpmM4vjk1KYudcKULhGqjnt8ajXKktzd9CQe8xXtPVsHYINjFtU+v+W
IT2pRasfQVB/5g51jjw5rzyZ2X/JFrj1eZhBiZxmkgr/67T6T8uaony4mBEJiD9a
oVK2kQJCWWsLL6m5MHyLF2ssvqSErFdUU7xUCGfIRhJJ8yhxJ4Z//zlHFp0h/Iao
XcrRQTBsjIWFSezAAKfcwBSKRYlW8qLZyOQ32x7iVrhMVeccTpVYNMhmcMI=
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:16:55 2025 by rpki-client