Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c24ef713-b452-4efe-9598-6aff64514411.roa
File: c24ef713-b452-4efe-9598-6aff64514411.roa (raw, json)
Hash identifier: wu1v8OE2JKKX2YZcTBPBpBUaGSrV59kf5DJ+QfM5ST4=
Subject key identifier: D9:61:7F:9C:48:B4:2D:18:4F:F3:08:02:A4:0B:2A:F2:F6:48:85:D1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2221451D82D833FC0EA53DA94D94F3ADACF0DFF6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c24ef713-b452-4efe-9598-6aff64514411.roa
Signing time: Wed 09 Apr 2025 07:33:17 +0000
ROA not before: Wed 09 Apr 2025 07:33:17 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 07:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:21:45:1d:82:d8:33:fc:0e:a5:3d:a9:4d:94:f3:ad:ac:f0:df:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 9 07:33:17 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: serialNumber=b74c24f09f6488752914e539dd60f605e04e925bb23a8e65c60761d8b0e77a53, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:a2:75:05:f1:67:cc:de:21:03:7d:e9:7f:
38:0c:a2:22:17:6d:4b:c1:bf:74:18:90:91:d0:5e:
63:24:d4:73:42:fe:ff:56:9e:ef:27:b8:c2:5a:28:
b1:dd:6f:cc:a0:66:d7:77:9a:33:7a:43:9e:ec:9b:
d4:f8:fd:5f:fa:35:5d:d4:f1:07:94:ff:87:da:90:
6f:d0:0a:4b:6f:af:71:ae:d4:d1:aa:56:0f:6a:f9:
49:1b:b5:2a:7b:a8:66:ed:bf:e7:1f:14:e0:88:5c:
f3:14:66:33:70:17:81:27:e6:ee:e3:a5:e4:4a:b2:
45:a8:ae:e1:1b:60:b7:5a:c8:73:1f:b1:a0:76:bb:
5b:5e:69:ec:98:6c:76:3f:17:9b:95:3d:2b:a4:9f:
a7:c3:f4:16:42:6a:e4:d4:53:9a:55:de:f3:1d:db:
43:77:54:66:44:6f:49:57:4c:30:5e:f7:07:32:36:
be:3c:57:76:b7:dd:31:54:b2:ca:a5:cd:94:70:a0:
6f:10:8a:d1:bc:4a:06:cb:b3:8a:52:cd:4b:6e:b7:
e2:49:1b:0f:bb:76:a3:5a:01:c1:9b:e0:ee:bf:20:
94:82:57:7c:a0:87:d8:79:f0:95:bb:c7:3d:b2:72:
ce:ff:c4:83:e7:c7:79:ca:b5:e9:2a:81:19:eb:c3:
c5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:61:7F:9C:48:B4:2D:18:4F:F3:08:02:A4:0B:2A:F2:F6:48:85:D1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c24ef713-b452-4efe-9598-6aff64514411.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:56:a8:5d:b3:aa:95:d2:16:b6:8a:f2:99:a4:e6:ca:14:95:
4a:68:f0:74:21:41:fe:89:06:ae:5d:b5:59:eb:9d:71:13:8b:
c1:ba:47:29:d1:44:07:d0:66:3b:99:58:82:20:15:ce:e7:93:
f3:15:79:8d:43:0a:9f:19:c4:fb:d0:ab:b6:cf:ff:f0:30:ba:
94:e4:1e:9c:bd:84:55:94:6e:08:57:aa:61:7b:a3:54:f5:5d:
ab:88:fc:ce:6b:d1:53:5c:e2:51:5b:24:8b:58:ea:6b:87:ef:
be:16:9b:86:30:7f:98:2b:cb:7f:dc:66:6b:ba:6d:2f:1b:0c:
d8:eb:f8:42:bd:5c:a0:7a:a9:fd:9e:54:ce:1a:c6:9a:8f:bb:
c0:5c:b5:44:99:92:be:5b:ed:19:f9:a8:a1:6a:cf:cf:9a:12:
39:2b:5d:8f:53:8e:3c:db:c4:2e:d4:3d:06:ad:7d:e6:cc:cc:
6d:84:0b:22:15:93:59:92:72:95:2c:e6:59:ca:a2:4e:ed:cd:
6a:ea:d5:38:26:01:c8:fb:26:e1:92:31:53:eb:ff:3c:d6:27:
4c:de:9d:86:f8:fa:9e:c3:90:f4:fc:12:d3:0f:1a:13:62:9f:
d2:d7:e1:ae:65:f8:5f:ab:09:12:8e:1a:da:92:6d:59:37:e4:
95:16:68:e6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIiFFHYLYM/wOpT2pTZTzrazw3/YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDA5MDczMzE3WhcNMjUwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNzRjMjRmMDlmNjQ4ODc1MjkxNGU1MzlkZDYwZjYwNWUw
NGU5MjViYjIzYThlNjVjNjA3NjFkOGIwZTc3YTUzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyVaJ1BfFnzN4hA33pfzgMoiIXbUvBv3QYkJHQXmMk1HNC
/v9Wnu8nuMJaKLHdb8ygZtd3mjN6Q57sm9T4/V/6NV3U8QeU/4fakG/QCktvr3Gu
1NGqVg9q+UkbtSp7qGbtv+cfFOCIXPMUZjNwF4En5u7jpeRKskWoruEbYLdayHMf
saB2u1teaeyYbHY/F5uVPSukn6fD9BZCauTUU5pV3vMd20N3VGZEb0lXTDBe9wcy
Nr48V3a33TFUssqlzZRwoG8QitG8SgbLs4pSzUtut+JJGw+7dqNaAcGb4O6/IJSC
V3ygh9h58JW7xz2ycs7/xIPnx3nKtekqgRnrw8XJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2WF/nEi0LRhP8wgCpAsq8vZIhdEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2MyNGVmNzEzLWI0NTItNGVmZS05NTk4LTZhZmY2NDUxNDQxMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAExWqF2zqpXSFraK8pmk5soUlUpo
8HQhQf6JBq5dtVnrnXETi8G6RynRRAfQZjuZWIIgFc7nk/MVeY1DCp8ZxPvQq7bP
//AwupTkHpy9hFWUbghXqmF7o1T1XauI/M5r0VNc4lFbJItY6muH774Wm4Ywf5gr
y3/cZmu6bS8bDNjr+EK9XKB6qf2eVM4axpqPu8BctUSZkr5b7Rn5qKFqz8+aEjkr
XY9TjjzbxC7UPQatfebMzG2ECyIVk1mScpUs5lnKok7tzWrq1TgmAcj7JuGSMVPr
/zzWJ0zenYb4+p7DkPT8EtMPGhNin9LX4a5l+F+rCRKOGtqSbVk35JUWaOY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:51:49 2025 by rpki-client