Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f27b6c3a-2bdc-4f89-89b7-33dd863e87ee.roa
File: f27b6c3a-2bdc-4f89-89b7-33dd863e87ee.roa (raw, json)
Hash identifier: bA2eHB8W6GBdIM/Bi2gMxRNHep3UnR71j6NXgljnrXE=
Subject key identifier: 6C:30:C1:C5:CF:58:1E:DC:89:7E:34:88:21:63:6F:28:71:C9:E2:AE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5161CB1C5A5AFB30ACF636A347907D13168EFE17
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f27b6c3a-2bdc-4f89-89b7-33dd863e87ee.roa
Signing time: Mon 02 Jun 2025 01:18:15 +0000
ROA not before: Mon 02 Jun 2025 01:18:15 +0000
ROA not after: Mon 07 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 01:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:61:cb:1c:5a:5a:fb:30:ac:f6:36:a3:47:90:7d:13:16:8e:fe:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 2 01:18:15 2025 GMT
Not After : Jul 7 23:59:59 2025 GMT
Subject: serialNumber=c2d187dd2df4dec4cab307d1a05f0a4ab00ba7b3602bd559ed5e436708fba71f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:19:5c:c3:0a:35:c2:67:6b:89:dd:5d:8d:
a2:45:4d:c6:3e:d7:79:87:1a:fa:a9:8a:65:13:09:
c0:f6:b2:d0:4f:f5:62:24:ae:89:36:e5:1e:8d:ff:
e1:7e:85:6c:78:2c:b4:d9:33:7b:45:55:cd:43:2e:
48:a7:0e:d7:0b:35:ef:55:54:c8:8b:11:ef:47:a1:
01:48:1b:c7:17:42:89:66:72:93:6e:e1:bc:af:fd:
aa:e1:22:03:dd:ba:0e:3d:0e:2a:d1:06:0f:3e:34:
64:79:1f:8b:9d:c3:ac:31:b9:c3:4a:9e:8b:f5:82:
07:23:bc:fa:bd:09:85:0d:86:63:6c:2a:c1:d6:ca:
04:4d:22:fd:80:7d:63:c8:32:08:54:e2:44:b6:aa:
24:4b:d5:ac:27:6c:c2:63:56:69:74:b7:b4:22:84:
71:12:87:d2:63:d0:16:ea:6c:fb:1e:84:3d:e4:e8:
69:4e:4d:79:ac:51:7e:b1:6c:d5:84:40:43:02:ce:
44:25:43:5d:df:40:cc:42:82:48:3f:43:06:0c:60:
2d:21:9f:11:ed:aa:cf:a2:40:34:d4:12:f9:88:d7:
40:04:3d:f7:ee:8e:d1:77:7f:e1:c6:de:56:02:87:
2d:65:59:9e:5e:8d:15:f8:76:29:61:89:fd:89:b9:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:30:C1:C5:CF:58:1E:DC:89:7E:34:88:21:63:6F:28:71:C9:E2:AE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f27b6c3a-2bdc-4f89-89b7-33dd863e87ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:4e:de:c2:42:ad:46:7d:9a:94:81:6d:c1:a9:ca:9f:d3:92:
3f:0f:8a:bd:a3:e6:a2:b0:56:ad:6f:7f:02:a0:10:89:49:ab:
d3:2a:27:a1:4d:0b:41:2b:21:34:eb:6c:c3:5c:57:b4:a7:fd:
8c:54:97:f4:19:f3:c6:1b:f5:23:4c:db:10:0e:9a:db:79:09:
52:b7:72:7c:c8:d3:fd:dd:f5:01:80:ad:52:d8:83:9c:de:b5:
c9:16:35:ba:79:6e:45:d3:e1:03:ef:d3:93:ab:6e:66:e0:3a:
43:2f:bb:91:b9:39:7e:38:4e:e3:79:b0:15:5c:74:7c:6d:3f:
64:3f:c7:9b:08:11:df:cd:ce:bb:0f:ec:d1:34:99:6d:e0:08:
6a:6e:b1:d3:09:1f:6e:d0:bd:32:b2:3b:88:6e:f9:d8:5a:ba:
5f:79:73:d4:d3:5e:7a:0b:40:d7:97:10:7b:64:9b:c6:52:ea:
f3:6c:04:39:de:43:dd:2c:8d:6f:a0:f8:e8:9f:16:6e:07:e6:
28:37:6e:73:63:cf:b8:24:1a:87:d4:25:ba:0f:55:a5:09:5e:
f9:3a:fb:7b:46:bb:96:7f:7c:44:ac:3d:d4:84:ae:3a:dc:10:
c9:18:d6:5f:7a:75:5f:4a:55:aa:37:88:aa:c9:17:13:e0:51:
66:8d:b3:cd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUWHLHFpa+zCs9jajR5B9ExaO/hcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNjAyMDExODE1WhcNMjUwNzA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMmQxODdkZDJkZjRkZWM0Y2FiMzA3ZDFhMDVmMGE0YWIw
MGJhN2IzNjAyYmQ1NTllZDVlNDM2NzA4ZmJhNzFmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8Nxlcwwo1wmdrid1djaJFTcY+13mHGvqpimUTCcD2stBP
9WIkrok25R6N/+F+hWx4LLTZM3tFVc1DLkinDtcLNe9VVMiLEe9HoQFIG8cXQolm
cpNu4byv/arhIgPdug49DirRBg8+NGR5H4udw6wxucNKnov1ggcjvPq9CYUNhmNs
KsHWygRNIv2AfWPIMghU4kS2qiRL1awnbMJjVml0t7QihHESh9Jj0BbqbPsehD3k
6GlOTXmsUX6xbNWEQEMCzkQlQ13fQMxCgkg/QwYMYC0hnxHtqs+iQDTUEvmI10AE
PffujtF3f+HG3lYChy1lWZ5ejRX4dilhif2JuaIdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbDDBxc9YHtyJfjSIIWNvKHHJ4q4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2YyN2I2YzNhLTJiZGMtNGY4OS04OWI3LTMzZGQ4NjNlODdlZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJpO3sJCrUZ9mpSBbcGpyp/Tkj8P
ir2j5qKwVq1vfwKgEIlJq9MqJ6FNC0ErITTrbMNcV7Sn/YxUl/QZ88Yb9SNM2xAO
mtt5CVK3cnzI0/3d9QGArVLYg5zetckWNbp5bkXT4QPv05OrbmbgOkMvu5G5OX44
TuN5sBVcdHxtP2Q/x5sIEd/NzrsP7NE0mW3gCGpusdMJH27QvTKyO4hu+dhaul95
c9TTXnoLQNeXEHtkm8ZS6vNsBDneQ90sjW+g+OifFm4H5ig3bnNjz7gkGofUJboP
VaUJXvk6+3tGu5Z/fESsPdSErjrcEMkY1l96dV9KVao3iKrJFxPgUWaNs80=
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:07:46 2025 by rpki-client