Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c19fe4f2-848e-478a-841d-d91f858a4783.roa
File: c19fe4f2-848e-478a-841d-d91f858a4783.roa (raw, json)
Hash identifier: ot1Li/AadGpEtRNPib/hcNv+0iTfIIXVRephxJIsS+k=
Subject key identifier: C5:7F:54:E7:BF:B5:F9:9B:50:88:DC:C3:69:27:24:A9:20:A4:0C:B6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 79566441AD554091C733EE1CA019DB32542608D5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c19fe4f2-848e-478a-841d-d91f858a4783.roa
Signing time: Tue 10 Jun 2025 03:23:18 +0000
ROA not before: Tue 10 Jun 2025 03:23:18 +0000
ROA not after: Tue 15 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 03:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:56:64:41:ad:55:40:91:c7:33:ee:1c:a0:19:db:32:54:26:08:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 10 03:23:18 2025 GMT
Not After : Jul 15 23:59:59 2025 GMT
Subject: serialNumber=5eac68b827580dc32a8349f8dd8066ac2b42204838be0666b4c9822696f4ac15, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:4e:94:84:9a:d5:c1:dd:6f:5c:ad:01:8f:f0:
52:38:bf:4d:1b:77:07:ef:12:0c:3f:12:bc:d7:c9:
16:b7:f9:2a:57:94:b1:f3:11:bb:e8:bb:0e:57:3b:
b2:04:58:94:f9:04:99:65:34:be:cb:9e:f7:f8:20:
78:89:18:e5:2f:24:34:53:ad:7f:74:61:9a:28:bb:
cc:f9:8e:c5:92:e9:9b:d4:c7:b7:d6:f2:a8:86:e4:
81:54:e0:71:08:c5:aa:19:18:57:3a:0f:78:c3:b6:
a9:81:ad:14:bb:ef:1a:c4:0b:86:a6:75:13:13:a0:
81:f0:de:8b:66:ad:99:58:75:69:37:74:df:1d:67:
a1:bc:57:2c:13:f4:bc:cd:de:a4:43:72:cb:b8:1e:
05:8b:65:bb:b1:41:6c:2c:9c:ac:67:49:7e:96:55:
61:ef:5b:c1:74:a4:91:f5:a5:8f:ac:43:e4:64:39:
83:09:b5:78:49:c5:81:1a:a0:53:67:a0:0f:7a:53:
9d:f3:67:88:00:b3:ca:66:05:ab:6c:b2:03:32:4e:
78:77:a1:ab:38:7d:df:09:be:31:68:89:0e:96:79:
d4:a9:a9:b9:fb:02:89:91:e2:ad:c6:fd:7d:57:cb:
5c:30:ef:65:e8:e2:30:f9:fa:74:0b:3f:c2:71:8a:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:54:E7:BF:B5:F9:9B:50:88:DC:C3:69:27:24:A9:20:A4:0C:B6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c19fe4f2-848e-478a-841d-d91f858a4783.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
38:01:75:27:c0:f7:df:f5:d2:70:ce:86:70:ab:46:20:84:9d:
5a:c3:74:dc:6b:b4:06:ca:11:db:55:ba:db:5b:31:b6:e4:72:
d7:71:ca:72:70:8f:2f:e3:dd:07:1c:af:69:0e:f5:07:d7:cd:
9c:ea:04:b8:ac:3c:28:24:e0:3b:42:cf:b7:bc:44:66:ae:4e:
8b:86:5a:4b:38:bd:0c:2d:19:cd:0d:38:6a:a6:2b:aa:89:4e:
88:43:27:bc:1c:b7:9d:56:6e:30:ca:97:87:89:67:43:eb:01:
c5:e1:05:01:44:34:85:6a:96:c1:54:b4:59:97:6c:7c:95:98:
6e:5a:2c:81:8c:26:f3:e5:1e:ab:b3:4c:ef:7f:4c:45:08:51:
69:32:81:3e:e8:b5:cb:6e:f5:b5:85:06:99:b7:f3:7d:f8:71:
d3:32:85:13:cf:99:e6:87:6f:82:d1:e7:9a:93:7c:13:c4:53:
1d:c0:ab:96:c1:40:9d:66:03:0b:8c:bc:3e:f4:0e:4d:73:77:
cc:11:8d:79:be:ff:e6:db:34:b9:39:c2:fd:0c:c1:b2:75:2f:
da:70:70:3e:a1:66:4d:f1:52:5a:3e:e0:4a:e7:ef:cd:88:56:
50:42:e0:e9:b8:19:3b:7b:15:5f:99:d7:e7:5b:4e:03:6b:51:
09:e8:34:62
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeVZkQa1VQJHHM+4coBnbMlQmCNUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNjEwMDMyMzE4WhcNMjUwNzE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZWFjNjhiODI3NTgwZGMzMmE4MzQ5ZjhkZDgwNjZhYzJi
NDIyMDQ4MzhiZTA2NjZiNGM5ODIyNjk2ZjRhYzE1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD3TpSEmtXB3W9crQGP8FI4v00bdwfvEgw/ErzXyRa3+SpX
lLHzEbvouw5XO7IEWJT5BJllNL7Lnvf4IHiJGOUvJDRTrX90YZoou8z5jsWS6ZvU
x7fW8qiG5IFU4HEIxaoZGFc6D3jDtqmBrRS77xrEC4amdRMToIHw3otmrZlYdWk3
dN8dZ6G8VywT9LzN3qRDcsu4HgWLZbuxQWwsnKxnSX6WVWHvW8F0pJH1pY+sQ+Rk
OYMJtXhJxYEaoFNnoA96U53zZ4gAs8pmBatssgMyTnh3oas4fd8JvjFoiQ6WedSp
qbn7AomR4q3G/X1Xy1ww72Xo4jD5+nQLP8JxiprtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUxX9U57+1+ZtQiNzDaSckqSCkDLYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2MxOWZlNGYyLTg0OGUtNDc4YS04NDFkLWQ5MWY4NThhNDc4My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADgBdSfA99/10nDOhnCrRiCEnVrD
dNxrtAbKEdtVuttbMbbkctdxynJwjy/j3Qccr2kO9QfXzZzqBLisPCgk4DtCz7e8
RGauTouGWks4vQwtGc0NOGqmK6qJTohDJ7wct51WbjDKl4eJZ0PrAcXhBQFENIVq
lsFUtFmXbHyVmG5aLIGMJvPlHquzTO9/TEUIUWkygT7otctu9bWFBpm38334cdMy
hRPPmeaHb4LR55qTfBPEUx3Aq5bBQJ1mAwuMvD70Dk1zd8wRjXm+/+bbNLk5wv0M
wbJ1L9pwcD6hZk3xUlo+4Ern782IVlBC4Om4GTt7FV+Z1+dbTgNrUQnoNGI=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:51:32 2025 by rpki-client