Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c30fc5e6-6972-4cb8-b3ae-409c12ddbb35.roa
File: c30fc5e6-6972-4cb8-b3ae-409c12ddbb35.roa (raw, json)
Hash identifier: sOBRW+GrqvwMPr3YTRNyWx3HMD8OPBdxWqU8raA1s5k=
Subject key identifier: 79:B5:7F:AF:01:4B:2B:A9:E1:E3:FE:54:8B:89:EF:54:9E:6C:14:81
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6C45BA398766294BB47714DBDE83CE593FF8C46F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c30fc5e6-6972-4cb8-b3ae-409c12ddbb35.roa
Signing time: Thu 17 Apr 2025 16:22:26 +0000
ROA not before: Thu 17 Apr 2025 16:22:26 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fee:e000::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 17 Apr 2025 20:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:45:ba:39:87:66:29:4b:b4:77:14:db:de:83:ce:59:3f:f8:c4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 17 16:22:26 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=7698304d2dcd4c684ccef8e34588dce5e2ca762e657509b148436aa7064f3951, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:54:66:ee:f0:63:5d:4c:0b:2f:df:fb:86:
80:8b:8b:01:53:5d:ae:6e:01:a5:f9:7b:33:69:6f:
78:e6:83:1d:19:a1:c3:f3:1a:3b:27:31:1e:85:5b:
49:b4:20:6f:ad:be:e7:99:b1:67:a8:0c:3c:d6:3e:
b7:e5:3c:08:75:3e:5a:34:43:d5:5c:ad:f2:11:77:
0d:fc:84:56:cb:86:83:ae:4c:20:f9:ef:2f:69:4d:
2e:23:ce:73:d3:d8:64:77:37:e7:70:2e:cf:69:b6:
60:4f:ed:67:ff:56:04:ad:32:71:cf:35:5b:71:6f:
c7:61:00:1f:9b:6a:85:96:80:fe:3a:47:7d:aa:b6:
4c:8c:f3:8a:57:93:d3:d2:08:d0:0e:d4:62:3f:c6:
10:e6:b5:e9:ba:eb:e9:3a:10:a0:c2:ef:c8:aa:f2:
9e:4e:51:9a:8a:41:cc:ba:bd:0a:8d:62:38:77:d3:
85:58:64:6a:1a:39:41:d8:0f:e5:ba:e2:f6:59:24:
f3:02:33:da:5e:d1:d5:9d:77:fd:3b:02:9d:58:5b:
ff:d2:8a:33:95:be:f6:24:d5:7a:8e:26:ec:42:cd:
aa:7e:8c:49:b5:14:0d:f5:40:2f:8e:91:28:4d:87:
8c:e1:17:49:4d:d6:57:68:f8:10:6d:58:78:29:d4:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B5:7F:AF:01:4B:2B:A9:E1:E3:FE:54:8B:89:EF:54:9E:6C:14:81
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c30fc5e6-6972-4cb8-b3ae-409c12ddbb35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fee:e000::/40
Signature Algorithm: sha256WithRSAEncryption
a1:3f:6f:a5:43:39:7d:e3:09:5a:65:14:a9:61:34:07:85:09:
ed:88:8d:27:eb:84:8d:b4:68:cb:10:38:27:a8:9d:87:cc:a1:
0f:7b:07:76:c7:34:fe:40:89:ab:98:b9:ce:89:9b:67:45:43:
8d:19:95:8a:17:10:54:e0:9b:9c:c6:f4:41:d9:26:dc:4d:9d:
b6:bf:cc:a4:6c:52:ea:ce:ce:bf:4f:08:ce:c7:be:2b:29:f5:
70:29:03:54:14:1f:ad:47:75:ae:64:94:a4:f4:c8:36:a8:b1:
34:6e:35:fd:31:c9:4e:3e:3a:51:08:30:96:d9:36:05:cc:ee:
ab:2f:f8:8f:d7:48:5d:7d:29:b0:64:ea:72:fd:15:13:cc:ef:
32:08:29:40:a0:e8:f8:f4:10:08:c6:e5:81:43:b5:e0:36:7d:
ab:56:0a:de:e3:fa:ef:46:d9:75:33:59:45:18:c4:cb:5a:c4:
6e:0c:04:06:d5:bb:40:e0:89:ed:97:f7:7d:47:96:a9:8e:5f:
1c:3f:df:ea:36:6c:66:9c:7a:7e:e3:25:1e:3c:45:d0:e9:20:
90:f1:25:27:18:c8:b8:bb:18:b4:e9:c8:75:ed:5d:38:0b:c2:
b5:2d:4d:9c:fe:7b:32:43:5d:b7:d2:f0:ec:96:16:4f:21:1a:
61:43:b7:d1
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUbEW6OYdmKUu0dxTb3oPOWT/4xG8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE3MTYyMjI2WhcNMjUwNTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3Njk4MzA0ZDJkY2Q0YzY4NGNjZWY4ZTM0NTg4ZGNlNWUy
Y2E3NjJlNjU3NTA5YjE0ODQzNmFhNzA2NGYzOTUxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXHFRm7vBjXUwLL9/7hoCLiwFTXa5uAaX5ezNpb3jmgx0Z
ocPzGjsnMR6FW0m0IG+tvueZsWeoDDzWPrflPAh1Plo0Q9VcrfIRdw38hFbLhoOu
TCD57y9pTS4jznPT2GR3N+dwLs9ptmBP7Wf/VgStMnHPNVtxb8dhAB+baoWWgP46
R32qtkyM84pXk9PSCNAO1GI/xhDmtem66+k6EKDC78iq8p5OUZqKQcy6vQqNYjh3
04VYZGoaOUHYD+W64vZZJPMCM9pe0dWdd/07Ap1YW//SijOVvvYk1XqOJuxCzap+
jEm1FA31QC+OkShNh4zhF0lN1ldo+BBtWHgp1IwJAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUebV/rwFLK6nh4/5Ui4nvVJ5sFIEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MzMGZjNWU2LTY5NzItNGNiOC1iM2FlLTQwOWMxMmRkYmIzNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/u4DANBgkqhkiG9w0BAQsFAAOCAQEAoT9vpUM5feMJWmUUqWE0B4UJ
7YiNJ+uEjbRoyxA4J6idh8yhD3sHdsc0/kCJq5i5zombZ0VDjRmVihcQVOCbnMb0
Qdkm3E2dtr/MpGxS6s7Ov08Izse+Kyn1cCkDVBQfrUd1rmSUpPTINqixNG41/THJ
Tj46UQgwltk2Bczuqy/4j9dIXX0psGTqcv0VE8zvMggpQKDo+PQQCMblgUO14DZ9
q1YK3uP670bZdTNZRRjEy1rEbgwEBtW7QOCJ7Zf3fUeWqY5fHD/f6jZsZpx6fuMl
HjxF0OkgkPElJxjIuLsYtOnIde1dOAvCtS1NnP57MkNdt9Lw7JYWTyEaYUO30Q==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:15:40 2025 by rpki-client